Privacy Policy

This Policy explains how BRZL processes personal data when operating the platform. For privacy questions, write to [email protected].

1. Data and purposes

During account creation, we process name, professional email, hashed password, professional license (CRP), and calendar settings to administer the account, authenticate access, and deliver services. Practitioners may enter patient records to run their clinical practice.

We collect anonymized technical call quality metrics (latency, packet loss, network type) with zero audio or video recording to maintain service stability.

When the app crashes or a call fails, it sends a technical report: error type, app and Android/iOS version, device model and the screen where it happened, with no message content, name, e-mail or IP address. We keep it for 90 days to find and fix problems.

If you write to us through the contact form on the website, we receive your name, email, optional phone number, subject and message, plus your IP address and browser. We use them only to reply and to protect the form from abuse, and we keep these messages for up to 12 months.

2. Legal bases and sharing

Processing required for service provision complies with applicable law and contract fulfillment. When enabled by the practitioner, necessary data is shared with Google (calendar and video), Stripe (payments), and Resend (transactional email).

3. Marketing

Commercial communications are optional. Consent may be withdrawn at any time. Transactional and security emails do not depend on marketing consent.

4. Retention and security

Data is retained for the period necessary to fulfill clinical, legal, and regulatory obligations. We implement bank-grade encryption and technical controls. To delete your account, see how to request deletion: access is closed, but clinical records are kept as professional and legal rules require.

5. Your rights

Under applicable data privacy legislation (including Brazil's LGPD and international standards), users may request access, correction, data portability, anonymization, and consent revocation.

Health data and clinical records require heightened care. Practitioners remain directly responsible for clinical records and confidentiality under their professional code of ethics.