Privacy Policy
Last updated: November 1, 2026
This policy explains what personal data Parolah collects, why, who it is shared with and how to exercise your rights under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).
1. Who we are
PAROLAH SERVICOS DESIGN E COMUNICACAO VISUAL LTDA ("Parolah"), CNPJ 47.605.406/0001-61, Rua 14, Lote 15, Apt. 1104, Sul, Águas Claras, Brasília-DF, 71939-720, Brazil.
Contact for privacy matters (data protection officer): impeto.wellington@gmail.com · +55 61 98104-3296.
userexperience.com.br is Parolah’s website and the portfolio of its founder, Wellington Mota.
2. What this policy covers
- →This website.
- →The "Parolah" app on the Meta platform, which Parolah uses to send and receive WhatsApp messages on behalf of its business clients through the WhatsApp Business Platform (Cloud API).
3. This website
- →What you send us by email or WhatsApp (name, email, phone and your message), used only to reply to you and, if we work together, to run the project.
- →Usage data from Google Analytics and the Meta Pixel, only if you accept cookies in the banner. You can decline and the site works the same.
4. WhatsApp messages on behalf of our clients
Parolah builds and runs software for businesses (for example, a fitness studio) that send WhatsApp messages to their own customers, such as class reminders and payment notices. In this service, the client business is the controller of its customers’ data and Parolah is the processor: we only process that data to deliver the service the client asked for.
- →Business data: the WhatsApp Business account ID, phone number ID and access token that Meta issues when the client connects its WhatsApp account to the Parolah app.
- →Recipient data: phone number, name and the content of the messages the client’s system sends; messages recipients send back; delivery and read status.
- →Purpose: deliver the messages the client’s customers expect, show their replies to the client and keep delivery records.
- →We do not sell personal data and do not use it for advertising.
- →Sharing: Meta (WhatsApp), which delivers the messages, and our hosting and database providers, under confidentiality. Nobody else, unless required by law.
- →International transfer: our servers may be located outside Brazil (for example, in the United States), with the safeguards required by the LGPD.
- →Retention: message records are kept while the client uses the service or as long as the law requires. Access tokens are deleted when the client disconnects its account.
5. Data we receive from Meta
When a client connects its WhatsApp account through the Parolah app, Meta shares with us only the IDs of the business assets the client selected and an access token. We do not access personal Facebook profile data beyond what Meta shows in that flow, and we use what we receive only to operate the client’s WhatsApp messaging.
6. Your rights
Under the LGPD you can ask for confirmation and access, correction, anonymization or deletion, portability, information about sharing and to revoke consent. If you are a customer of one of our clients, you can contact that business directly or write to impeto.wellington@gmail.com; we will help them answer you.
7. How to delete your data
- →Email impeto.wellington@gmail.com with the subject "Data deletion" and the phone number or business involved. We confirm the request and complete the deletion within 15 days, keeping only what the law requires us to keep.
- →Client businesses can disconnect the Parolah app at any time in Meta Business settings (Integrations). We then delete the access token and stop processing their data.
8. Security
Data travels encrypted (HTTPS). Access tokens are stored as secrets, outside the source code, and access to systems is limited to the people who run them.
9. Changes
When this policy changes, we update this page and the date at the top.