1. Data controller
This Privacy Policy explains how LBRNT CONSULTORÍA TECNOLÓGICA Y DESARROLLO DE SOFTWARE S.A.C.S. (“LBRNT”, “we”, “us”, or “our”) collects, uses, stores, and protects personal information obtained through this website, our digital services, and any user-authorized integrations, including authentication flows powered by Google.
Contact details:
- Email: [email protected]
- WhatsApp: +51 976 387 055
- Address: Calle República China 137, Jose Leonardo Ortiz District, Chiclayo, Lambayeque, Peru
2. Information we may collect
Depending on the service being used, we may collect:
- Identification and contact details provided by the user.
- Basic technical information such as browser or device data, approximate IP-based location, time zone, language, and access logs.
- Content or files voluntarily shared by the user in order to receive support, consulting, or software development services.
- Data authorized through Google OAuth, such as name, email address, account identifier, profile picture, and any other information specifically approved by the user on the Google consent screen.
3. How we use information
We use collected information only for legitimate and proportionate purposes, including:
- Identifying the user and enabling secure access to our services.
- Providing, maintaining, protecting, and improving our products or services.
- Responding to support requests, inquiries, and operational communications.
- Complying with contractual, legal, or regulatory obligations.
- Preventing fraud, abuse, unauthorized access, and other security incidents.
When data obtained through Google OAuth is involved, we use that data only for the purposes clearly disclosed to the user and consistent with the permissions requested.
4. Use of data obtained from Google
If the user signs in with Google or connects a Google account to one of our services:
- We request only the permissions that are strictly necessary for the offered functionality.
- We use Google information solely to authenticate the user, link the account, enable requested features, and operate the authorized service.
- We do not sell user data obtained from Google.
- We do not use Google data for behavioral advertising, unauthorized commercial profiling, or purposes unrelated to the service approved by the user.
- If we later need additional permissions or materially change how we use that data, we will update this policy and obtain any required consent before applying the new use.
SNDR and integrations with Meta and WhatsApp
SNDR, available at https://sndr.jzrzr.com, is a LBRNT service for managing WhatsApp conversations and templates for businesses that authorize a connection. This policy also applies to that service.
Depending on enabled features and granted permissions, SNDR processes WhatsApp Business Account identifiers and phone numbers, contact names and numbers, message content and media, templates, delivery and read statuses, and integration credentials. The connection flow uses Facebook Login for Business and Embedded Signup to obtain business authorization. Basic profile data provided by Meta in that flow is used for authorized authentication and account linking.
This data enables account connection, sending and receiving messages, displaying conversations to authorized business users, managing templates, and processing webhook events. Coexistence, when enabled by Meta for the account, allows the same number to be used with WhatsApp Business App and Cloud API. It does not automatically import all history; any contact or history synchronization depends on implemented features and business authorization.
Providing the service involves transmitting necessary data to Meta/WhatsApp and the infrastructure, storage and communications providers involved in operating it. The retention and security criteria described in this policy apply. Business customers must inform their contacts about processing their conversations and obtain the necessary authorizations.
To request deletion of SNDR data, follow the data deletion instructions. Revoking an integration does not by itself erase previously stored data or messages retained by Meta, the business or its recipients.
5. Legal basis and consent
We process personal data based on:
- The user’s consent, when applicable.
- The necessity to perform a pre-contractual or contractual relationship.
- Compliance with legal obligations.
- Our legitimate interest in operating secure, reliable, and auditable services, provided that such interest does not override the user’s rights.
6. Data retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Retention periods may vary depending on the nature of the service, the type of data involved, and applicable legal requirements. When information is no longer needed, we will reasonably delete or anonymize it.
7. Data sharing
We do not share personal information with third parties except in the following situations:
- When required to provide the service requested by the user.
- With vendors or service providers assisting us with technology operations, infrastructure, security, support, or communications, subject to confidentiality obligations.
- When required by law, by competent authority, or when necessary to protect the rights, security, or integrity of LBRNT, our users, or third parties.
- In connection with a corporate reorganization, merger, acquisition, or transfer of assets, subject to reasonable safeguards.
8. Security
We apply reasonable technical, organizational, and administrative safeguards to protect information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no system is entirely infallible, and we cannot guarantee absolute security.
9. User rights
Subject to applicable law, users may request:
- Access to their personal data.
- Correction or update of inaccurate information.
- Deletion or erasure.
- Objection to or restriction of processing.
- Withdrawal of previously granted consent.
To exercise these rights, users may contact us at [email protected]. Users may also revoke Google account access from their Google account security settings.
10. Data deletion and revocation of access
If a user wishes to request deletion of data associated with a Google integration or access, the user may contact [email protected] and identify the relevant account and request. We will handle the request within a reasonable timeframe, subject to any legal or security obligations requiring limited retention.
11. Children’s privacy
Our services are not intentionally directed to children without the involvement or authorization of their legal representatives. If we become aware that we collected data from a child improperly, we will take reasonable steps to delete it.
12. Changes to this policy
We may update this Privacy Policy when legal, technical, operational, or product changes require it. The current version will be published on this page together with the latest update date. When a change materially affects the way we process previously collected data, we will take reasonable steps to inform users before the change becomes effective when required.
13. Contact
For questions about privacy, data processing, or Google OAuth-related requests, contact us at [email protected].