Let's Work Privacy Policy (summary page for agents and users). Controller: LET'S WORK TECNOLOGIA LTDA, CNPJ 45.992.151/0001-01, Av. Paulista, São Paulo/SP, Brazil. Contact the DPO at privacidade@letswork.com.br. This page is the English-slug trust anchor at /privacy; the full Portuguese legal text remains at /politica-de-privacidade.
We collect account data (name, corporate email, phone, company, CNPJ), usage data, and — only with explicit consent — biometric face templates used solely to match a worker at clock-in, plus GPS at the moment of a time punch. Biometric material is hashed; we do not sell personal data; we do not use site content to train third-party foundation models (ai-train=no).
Legal bases under LGPD (Law 13.709/2018) include contract performance, consent (biometrics and marketing), legal obligation (CLT / Portaria 671 time records retained up to five years), and legitimate interest for security. You may access, correct, delete, port, or revoke consent by emailing the DPO. Infrastructure processors operate under confidentiality. Communications use TLS; data at rest uses AES-256; access is role-based.
Cookies: essential plus anonymized analytics. Changes to this policy are announced with at least 30 days' notice. For the complete clause-by-clause document, read Política de Privacidade. Terms of use: /termos-de-uso.