GranaBot

Privacy Policy

Last updated: May 27, 2026

This Policy describes how GranaBot collects, uses, stores and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Lei nº 13.709/2018) and applicable international standards.

1. Data Controller

Name: Pablo Augusto
Email: pabloaugustocm@gmail.com
Service: GranaBot (@granabotbr_bot on Telegram)

2. Data We Collect

Data Source Purpose
Telegram ID and username Telegram Identify and isolate your account
Financial data (amounts, descriptions, categories) Messages you send to the bot Log expenses, generate reports and alerts
Email and payment data Stripe (payment processor) Manage subscription and issue receipts
Language preference Your choice in the bot Display the interface in the correct language

We do not collect location, contacts, photos or any information beyond what is strictly necessary to provide the Service.

3. Legal Basis

  • Performance of contract — to provide the finance tracking service you subscribed to.
  • Legitimate interest — to improve the Service and ensure its security.
  • Legal obligation — when required by law or a competent authority.

4. How We Use Your Data

  • Identify your account and keep your data isolated from other users;
  • Process expense, income and recurring-bill records;
  • Generate reports, budget alerts and daily reminders;
  • Process monthly subscription charges;
  • Respond to support requests.

We do not use your financial data for advertising, behavioural profiling or sale to third parties.

5. Data Sharing

Your data is shared only with:

We do not sell, rent or transfer your data to third parties for commercial purposes.

6. Storage and Security

Data is stored in a SQLite database hosted on a private server. Access is restricted to the GranaBot system. We apply reasonable technical measures to protect your information against unauthorised access.

Despite our efforts, no system is 100% secure. In the event of a material incident, you will be notified as required by applicable law.

7. Data Retention

Your data is retained for as long as your account is active. After subscription cancellation:

  • Data remains available for 30 days for review or export;
  • After that period it is permanently deleted, unless a legal retention obligation applies.

You may request early deletion at any time via email.

8. Your Rights

Under the LGPD and applicable privacy law, you have the right to:

  • Confirm the existence of and access your data;
  • Correct incomplete, inaccurate or outdated data;
  • Request anonymisation, blocking or deletion of unnecessary data;
  • Data portability to another service provider;
  • Withdraw consent at any time;
  • Receive information about third-party sharing.

To exercise any of these rights, contact us at pabloaugustocm@gmail.com. We will respond within 15 business days.

9. Cookies and Tracking

The Telegram bot does not use cookies. This web page may use strictly necessary technical cookies for functionality, but does not use tracking or advertising cookies.

10. International Data Transfers

Stripe and Telegram may process data outside Brazil and the European Union. Both companies have adopted adequate safeguards under the LGPD and GDPR frameworks.

11. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Policy periodically. The "last updated" date at the top indicates the current version. Material changes will be communicated by email in advance.

13. Contact

Questions, requests or privacy complaints:
📧 pabloaugustocm@gmail.com

Brazilian users may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD): www.gov.br/anpd.