Privacy Policy EccoSuit

This Policy describes how EccoSuit (a product of EccoValue) processes personal data and operational information when law firms use the platform to manage leads, clients, cases, documents, contracts, invoices, calendar, integrations and service subscription. If you have questions, contact us at contato@eccovalue.com.br.

1. Data we collect and process

To operate EccoSuit, we may process data provided directly by the firm, by authorized users and by integrations configured by the firm itself.

• Firm data: firm name, phone number, address, city, state, ZIP Code, configuration data and subscription status.
• User data: name, email, access profile, relationship with the firm and information required for authentication and authorization.
• Lead and client data: name, email, phone number, source, status, communication history, service information and data entered by the firm.
• Case data: type of service, owners, workflow stages, deadlines, history, notes and operational information related to the case.
• Documents and contracts: files uploaded or generated inside the platform, templates, contracts and associated metadata.
• Invoices and installments: data from invoices created by the firm, amounts, due dates, installments and manual payment tracking entered by the user.
• Technical data: logs, session identifiers, IP address, browser, audit events and information used for security, diagnostics and support.
• Integration data: tokens, identifiers, metadata and information required to operate integrations enabled by the firm, such as Google Calendar and WhatsApp.

2. Data received from Google Calendar

When connecting a Google account, we request the scopes required to operate the calendar integration:

• https://www.googleapis.com/auth/calendar.events — create/update events in your Google Calendar.
• https://www.googleapis.com/auth/userinfo.email — identify the connected account (email).

3. How we use this data

We use data processed by EccoSuit to:

• create and maintain the firm account;
• authenticate users and control access permissions;
• manage leads, clients, cases, documents, contracts, invoices and workflows;
• run integrations configured by the firm, such as Google Calendar and WhatsApp;
• create, update and maintain calendar events related to the firm’s operations;
• process the firm’s subscription and control trial, payment, cancellation or delinquency status;
• provide support, investigate failures, improve stability and protect the platform against misuse;
• comply with legal, contractual, tax, regulatory and security obligations.

4. WhatsApp and communications

When the firm enables WhatsApp-related features, EccoSuit may process phone numbers, conversation identifiers, messages, metadata and history required to support service workflows, lead intake, communication and operational organization.

The firm is responsible for ensuring that it has the appropriate legal basis, consent or authorization to communicate with leads, clients and third parties through the channels used.

5. Invoices, installments and the firm’s subscription

EccoSuit allows the firm to create invoices, define installments and manually track which installments have been paid. EccoSuit does not process payments from the firm’s end clients within the platform.

The firm’s own subscription to EccoSuit is processed by an external payment provider, such as Stripe. During onboarding, the firm may be directed to register a payment method, but no charge will be made before the end of the free trial period informed at the time of contracting.

We do not store complete credit card data. We may store customer identifiers, subscription identifiers, billing status and metadata required to operate the trial, subscription and access control for the platform.

6. Storage and security

• Data is stored in managed cloud services, with encryption in transit and at rest when supported by the infrastructure used.
• We apply access controls to restrict access to data to the corresponding firm and authorized users.
• Integration tokens and metadata are stored in managed services, with access restricted to what is necessary for operations and support.
• We may record logs and audit events for security, diagnostics, abuse prevention and incident investigation.
• No platform is immune to risk; therefore, we adopt reasonable measures to reduce exposure, protect data and respond to failures when identified.

7. Sharing with third parties

We do not sell or rent personal data. We may share data only when necessary to operate, protect or comply with obligations related to EccoSuit, including:

• cloud infrastructure and database providers;
• authentication, security, monitoring and support providers;
• payment providers used to process the firm’s subscription;
• integration services configured by the firm, such as Google Calendar and WhatsApp;
• public authorities, when required by law, valid order or regulatory obligation.

8. Retention and deletion

• We keep data while the firm account is active or while it is necessary for operations, support, security, audit or compliance with legal and contractual obligations.
• Integration tokens are kept while the corresponding integration is active.
• You may disconnect the Google Calendar integration inside EccoSuit, when available, or revoke access at myaccount.google.com/permissions.
• Requests for deletion, export or modification of data may be sent to contato@eccovalue.com.br.
• Deletion may be limited when records must be maintained for legal obligations, security, fraud prevention, audit or defense of rights.

9. Your rights

You may request access, correction, portability, deletion or limitation of personal data processing, as applicable under the corresponding law. For privacy-related requests, contact us at contato@eccovalue.com.br.

10. International transfers

EccoSuit may use infrastructure, providers and services located in different countries, including Brazil and the United States. By using the platform, you acknowledge that data may be processed outside the country of origin, always according to reasonable security measures and the contracts applicable to the providers used.

11. Firm responsibility

The firm is responsible for the legality, accuracy and suitability of the data entered into the platform, as well as for obtaining the consents, authorizations and legal bases required to process data from leads, clients, collaborators and third parties.

EccoSuit is an operational management platform. Legal responsibility, case strategy, document review, professional communication and compliance with ethical duties remain with the firm and the responsible professionals.

12. Children

The service is not intended for children under 13, and we do not knowingly collect data from this audience.

13. Changes to this Policy

We may update this document periodically. We will publish the current version on this page with the “Last updated” date.