Stonen
Privacy and data handling
What data Stonen handles, and what for
Stonen handles commercial data belonging to the client company and contact data of people connected to those companies. This page describes what is handled, for what purpose, which external services take part, and how to send a request.
⚠️ This text has not been reviewed by a lawyer and is not the final privacy policy. It describes the verified behaviour of the system so that legal review can start from facts. Stonen makes no claim of full compliance with Brazil's LGPD or any other data protection law, and no certification has been obtained.
Who is responsible for what
The commercial data belongs to the client company. It decides what comes in, what it is for and when it goes out. Stonen handles that data on its behalf, in order to provide the service.
In practice: a request from an end customer about their own data normally arrives through the company they have a relationship with. Stonen acts on that company's instruction.
The formal definition of these roles, and of the data protection officer, depends on the legal review under way. Until then this section describes practice, not a legal qualification.
What is handled, and why
| Category | Whose | What for |
|---|---|---|
| CategoryName, e-mail and affiliation | Whosepeople who use the system at the client company | What forgranting access, defining what each one may do, and recording who decided what |
| CategoryCompany name and commercial contacts | Whosecustomers and prospects of the client company | What forbuilding the recommendation and enabling the commercial approach |
| CategoryCommercial history | Whoseorders, line items, values and shipments | What forthis is what supports the recommendation: without history there is no evidence, only guesswork |
| CategoryContent of commercial conversations | Whosesalesperson and customer contact | What forkeeping the negotiation history visible to salesperson and manager |
| CategoryTechnical access records | Whosepeople who use the system | What forsecurity and failure diagnosis |
Stonen handles no sensitive personal data in the LGPD sense — no health, biometrics, racial origin, religious belief or political opinion appears on any screen or in any table of the product.
Where the data lives
Live data sits on a server in Brazil, in São Paulo. The database runs on the same machine as the application and is not exposed to the internet.
What leaves the country is a backup copy, encrypted before it leaves the machine, with the key kept separately. The destination receives a file it cannot read.
Whether that encrypted copy constitutes an international transfer for legal purposes is one of the questions referred to legal review. Until there is an answer, this page does not claim there is no international transfer.
External services involved
Each receives only what its function requires, and the product keeps working without the last three — each absence switches off the matching feature explicitly, rather than leaving it half on.
| Service | Function | What it receives |
|---|---|---|
| ServiceInfrastructure provider | Functionhosts the application, the database and the backups | What it receiveseverything stored, on the server under the provider's responsibility |
| ServiceIdentity system (same owner) | Functionauthentication and permissions | What it receivese-mail and session of whoever uses the system |
| ServiceMessaging platform (same owner) | Functionsending over WhatsApp | What it receivesthe contact's number and the content of the message sent |
| ServiceTranslation service | Functiontranslating the message into the contact's language | What it receivesthe message text — not the records or the history |
| ServiceExternal copy storage | Functionkeeping the encrypted backup outside the main provider | What it receivesan encrypted file, unreadable at the destination |
None of these services receives the data for its own use, and no commercial data is sold, assigned or used for advertising — neither by Stonen nor as part of the arrangement with them. Opening a Stonen screen makes the browser talk to nobody else: the typeface is served by the system's own server. Until 22 September 2026 it came from Google, which handed the IP address of whoever opened the system to a third party outside Brazil; a technical review found it, recorded it here, and the dependency was removed the same day.
For how long
- Data about people who use the system — for the duration of the contract, plus a short wind-down period.
- Customer records and commercial history — for the duration of the contract. Deletion happens on the client company's instruction.
- Technical access records — short rotation, in days, with no analytical use.
- Backups — tiered retention: some daily, some weekly, some monthly.
Deletion follows a reversible-first pattern: a record is marked before it is finally removed. This exists because a deletion made by mistake, with no way back, is a greater harm than the one it solves. Exact retention periods are one of the points legal review has to settle.
How to send a request
Requests for access, correction or deletion can be sent through the company you have a commercial relationship with, or directly to stonen@cert4all.com.br.
Requests involving a client company's data are carried out on that company's instruction, because the data is theirs.
The formal data protection officer channel, the response deadline and the response template are part of the legal review that is not yet complete. Until then the commitment is to forward and answer — not a contracted deadline.
Page last updated September 22, 2026.