Nami CRM Privacy Policy
Last updated: October 16, 2026
This policy explains how Nami Consultoria em Marketing LTDA processes personal data in Nami CRM, the customer service, sales and relationship platform we provide to businesses, including connections to WhatsApp and Instagram through Meta's official platforms. It follows Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD"). The Portuguese version prevails in case of any discrepancy.
1. Who we are
Nami Consultoria em Marketing LTDA (trade name Nami Consultoria), Brazilian company registration (CNPJ) 34.392.843/0001-00, headquartered at Av. Batel, 1550, Room 805, Curitiba, Paraná, Brazil.
Privacy contact: contato@namiconsultoria.com.br.
2. Our role for each type of data
- Data of Nami CRM user accounts (people who access the platform): Nami is the controller.
- Data of our business customers' contacts and conversations (for example, people who message a business on WhatsApp or Instagram): the business customer is the controller, and Nami acts as a processor, handling this data only to provide the service and according to the business customer's instructions.
If you are a contact of a business that uses Nami CRM, the business you talked to is responsible for your data. You can reach out to them directly or to us, and we will forward your request.
3. What data we process
Platform users
- Name, email and password (stored only as a hash, never in plain text).
- One-time access codes sent by email.
- The business account the user belongs to and their role (for example, owner or member).
- Technical access and usage logs, such as IP address, date and time, browser and sessions.
Business customers' contacts and conversations
- Name, phone number, email, username and channel identifiers (such as the Instagram identifier).
- Content of the messages exchanged, including text, images, audio, video and documents.
- Service and sales information recorded by the business customer, such as deals, stages, activities, notes and custom fields.
Meta connection data
- Identifiers of the connected business, WhatsApp Business account, phone number and Instagram account.
- Access tokens issued by Meta to the business customer, stored encrypted.
- Message templates approved in the WhatsApp Business account and message delivery statuses.
4. WhatsApp, Instagram and Facebook Login
Nami CRM connects to WhatsApp and Instagram through Meta's official platforms (WhatsApp Business Platform and Instagram API). When a business customer uses the "Connect WhatsApp" button, they log in to their own Facebook account and authorize Nami CRM to manage the selected WhatsApp Business account. In this process:
- we receive only what is needed to operate the channel: the business, WhatsApp Business account and phone number identifiers, and an access token for that account;
- we do not receive or store the Facebook password;
- we use this data only to send and receive messages, sync templates and show message statuses inside Nami CRM;
- we do not sell data received from Meta and do not use it for advertising.
The use of this data is also subject to Meta's terms and policies, including the WhatsApp Business Policy.
5. How we use the data
- Providing the contracted service: creating and maintaining accounts, receiving and sending messages, organizing conversations, deals and automations (legal basis: performance of contract).
- Authenticating and protecting access: login, sending codes by email, preventing abuse and fraud (legal bases: performance of contract and legitimate interest).
- Processing contacts' and conversations' data on behalf of business customers, according to their instructions (the legal basis is defined by the business customer as controller).
- Complying with legal and regulatory obligations and orders from authorities (legal basis: compliance with a legal obligation).
- Maintaining, fixing and improving the platform, using technical logs and operational metrics (legal basis: legitimate interest).
6. Artificial intelligence
When a business customer enables artificial intelligence features in Nami CRM, such as the assistant that answers or suggests replies, the necessary conversation content is sent to AI providers engaged by Nami, solely to generate the requested result. These features are optional and controlled by the business customer. Nami does not use the content of business customers' conversations for advertising.
7. Who we share data with
We share data only with those we need to provide the service, always limited to what is necessary:
- Meta (WhatsApp and Instagram), to deliver and receive messages on connected channels;
- infrastructure providers for hosting, databases and file storage;
- email provider, to send access codes and platform notices;
- artificial intelligence providers, when AI features are enabled;
- public authorities, when required by law or court order.
We do not sell personal data.
8. International transfer
Some of our providers, including hosting and storage providers, keep servers outside Brazil, mainly in the United States. In these cases, the transfer is made to perform the contract and with providers that adopt security measures compatible with the LGPD.
9. Security
- Communication protected by HTTPS.
- Passwords stored only as hashes; channel tokens and credentials stored encrypted.
- Separation of each business customer's data and role-based access within each business.
- Conversation files stored privately and released only through temporary links.
No system is completely immune to incidents. If a security incident occurs that may cause relevant risk or harm, we will notify the affected business customers and Brazil's National Data Protection Authority (ANPD), as required by law.
10. How long we keep data
- Account and business customer data: while the account or contract is active.
- Contacts and conversations: for the period defined by the business customer, who can delete them at any time on the platform.
- After the contract ends or a valid deletion request is made, data is deleted or anonymized, except data we must keep to comply with a legal obligation or to exercise rights in legal proceedings.
11. Your rights
Under the LGPD, you may request: confirmation that we process your data; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in non-compliance; portability; deletion of data processed based on consent; information about who we share data with; and review of decisions made solely on automated processing. You may also file a complaint with the ANPD.
To exercise your rights, write to contato@namiconsultoria.com.br. We will reply within 15 days. We may ask for information to confirm your identity before fulfilling the request.
12. How to request deletion of your data
Nami CRM user: send an email to contato@namiconsultoria.com.br with the subject "Data deletion", from the email registered in your account. We will delete your account and associated data, except what we must keep by law, and confirm by email.
Business that connected WhatsApp or Instagram through Facebook: you can delete the channel under Settings → Channels in Nami CRM, which removes the tokens and connection data. You can also remove Nami CRM's access in your Facebook account settings, under Settings & privacy → Settings → Business integrations. To delete all of your business's data, write to the email above.
Contact of a business that uses Nami CRM: ask the business you talked to for deletion. If you prefer, write to us with the business name and your phone number or username, and we will forward the request to them.
13. Cookies
Nami CRM uses only essential cookies, needed to keep you logged in and protect your session. They are not used for advertising.
14. Contact and data protection officer
The channel to reach Nami's data protection officer is contato@namiconsultoria.com.br.
Nami Consultoria em Marketing LTDA · CNPJ 34.392.843/0001-00 · Av. Batel, 1550, Room 805, Curitiba, Paraná, Brazil.
15. Changes to this policy
We may update this policy to reflect changes in Nami CRM or in the law. The last update date is always shown at the top of the page. Relevant changes will be announced to business customers on the platform or by email.
