Privacy Policy

MestreObra is operated by SYSTEMROOT SOLUÇÕES EM TECNOLOGIA LTDA, which acts as the controller of the personal data processed on the platform.

In this policy, "you" includes the account owner, the team members they invite, and any other people whose data is recorded on the platform.

We collect only what is necessary to provide the service:

• Account data: name and email, managed by the Clerk authentication platform.
• Team data: members' name, phone number, and role, registered by the account owner.
• Project content: text messages, audio and its transcriptions, photos, videos, expenses, measurements, logs, purchases, and messages sent by you and your team.
• Payment data: processed directly by Stripe. We do not store your card numbers, we only keep the subscription status.
• Technical usage data: access logs, identifiers, and information necessary for the security and operation of the platform.

We use your data to:

• operate the service: record, organize, and display your projects' information;
• process your messages with artificial intelligence (audio transcription, photo reading, and data extraction);
• send notifications and assistant messages via WhatsApp;
• provide support and improve the product;
• keep the platform secure and prevent fraud;
• comply with legal and regulatory obligations.

The applicable legal bases include performance of the contract, legitimate interest, compliance with legal obligations, and, where necessary, your consent.

The MestreObra assistant uses AI models from Anthropic (Claude), which acts as a data processor. The content of your messages is sent for processing, for example, to transcribe an audio message or extract the amount from a receipt.

Your content is not used to train third-party AI models.

AI can make interpretation mistakes. We recommend reviewing important automatically generated records on the dashboard.

We never sell your data. We share data only with processors that help us provide the service, each with its own role:

• Clerk, authentication and account management;
• Stripe, payment processing;
• Vercel, application hosting;
• Neon, database (PostgreSQL);
• UploadThing, storage of photos, videos, and audio;
• Anthropic, artificial intelligence processing;
• WhatsApp API gateway, sending and receiving messages.

Some of these processors are located outside Brazil. In those cases, international transfers follow the safeguards provided by the LGPD (art. 33).

We may also share data when required by law or by a competent authority.

WhatsApp is MestreObra's main channel and is operated through an API. Once registered by the account owner, a team member starts receiving assistant messages at the number provided.

The account owner is responsible for informing the team about this use. If you are part of a team and no longer want to receive messages, talk to the account owner or write to our support, we will remove your number.

WhatsApp is a Meta service, with its own terms and privacy policies.

We keep your data for as long as your account exists.

If the free trial ends without a subscription, access is paused, but the data is preserved, so you can come back whenever you want.

You can request deletion of your account and data at any time. Some records may be kept for the period required by legal obligations (for example, tax records) and then deleted.

Article 18 of the LGPD guarantees you, among others, the rights to:

• confirm the existence of processing of your data;
• access your data;
• correct incomplete, inaccurate, or outdated data;
• request anonymization, blocking, or deletion of unnecessary or excessive data;
• request data portability;
• obtain information about who we share your data with;
• revoke consent, when processing is based on it;
• object to processing carried out in violation of the law.

To exercise any of these rights, write to contato@mestreobra.com.br. We will respond as quickly as possible, within the limits of the law.

We adopt technical and organizational measures to protect your data: encryption in transit, access control per account and per role, and infrastructure providers with recognized security practices.

No system is 100% immune. If a significant security incident occurs, we will notify you and the Brazilian National Data Protection Authority (ANPD), as required by the LGPD.

We use only essential cookies: session and authentication (Clerk) and language preference. Without them, the platform does not work.

Today, we do not use marketing cookies or pixels. If that changes, we will ask for your consent first.

MestreObra is intended for people 18 and older, and we do not knowingly collect data from minors. If we identify an account registered by a minor, the data will be removed.

We may update this policy to reflect changes in the product or the law. The current version will always be published on this page, with the effective date at the top, and significant changes will be communicated through the platform, WhatsApp, or email.

Our privacy channel, including to reach our Data Protection Officer (DPO), is:

If you prefer, you may also file complaints with the Brazilian National Data Protection Authority (ANPD).