Privacy Policy
Last updated: . Version 2026-10-09.
This policy explains what personal data BroadTools processes on the app.broad.tools website, in your account and in the apps, why, who receives it, how long it is kept and how you can exercise your rights under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018). This is a translation: if the two versions differ, the Portuguese version prevails.
In short
- We do not sell data and we do not use audience analytics tools or advertising cookies.
- Your card number goes straight to Mercado Pago or Stripe. We never see or store it.
- Corvus Intercom audio goes through our server only to be mixed and delivered in real time. It is not recorded.
- In Rune Captioner, speech recognition is done by your browser. The audio does not go through our servers.
- Emails you send to support are read by an AI model from Anthropic, which prepares a draft reply. A person reviews everything before it is sent.
1. Who is the controller
The data controller is BroadTools (Broadtools Ltda, CNPJ 69.442.064/0001-49), with its registered office at Curitiba/PR, Brazil.
Data protection officer (DPO): contato@broad.tools. Use this email to contact us about privacy and to exercise your rights.
2. What data we process
Account
- Name, email and, if you provide it, your company name.
- Password: stored only as a hash (salted scrypt). No one, not even BroadTools, can read your password.
- Account country (Brazil or abroad), set by the region the account was created from, to show prices in reais or US dollars. For this we estimate the country from the IP address with a local database, without sending the IP to third parties.
- Website language (Portuguese or English), account creation and last sign-in dates, and the email you use on Mercado Pago, if different from the account email.
- The version of the Terms and Policy you accepted and when (at sign-up and at each purchase).
Team
- Company alias and, for each user the owner creates: login (name.alias), name (optional), hashed password, enabled apps, whether it is active and last access.
Licenses and computers
- Key, app, plan, status, expiry date and history of renewals and moves.
- When a desktop app is activated: a computer identifier, the computer name (as shown on the network), the operating system and version, the app version, the IP address and the dates of activation, last contact and release.
- The computer identifier is a code created by hashing the number the operating system gives to the installation (such as the Windows MachineGuid). If that is not available, the code is derived from the computer name, the system and the system user. It is not the serial number or the network card address.
- The app sends this data on activation and every time it confirms the license again. It is used to enforce 1 computer per key, show the computer in My licenses, stop the same computer from repeating the trial and prevent fraud.
Update checks
Desktop apps ask whether there is a new version by sending the app, the installed version and the system (Windows or Mac). This is not stored in the database; the request is only kept in the server access logs.
Payments
- Plan, amount, currency, partner code used, status and dates of each charge, and the fees charged by the payment provider.
- The notification Mercado Pago or Stripe sends us about each payment. It may include the payer's name and email, the tax ID (CPF or CNPJ) given to Mercado Pago, the payment method, the card brand and the last digits of the card.
- We never receive the full card number or the security code. For the monthly subscription in Brazil, the card form belongs to Mercado Pago, loaded from its own website, and the details go straight to it.
Account history
We record the main account events: sign-up, acceptance of the terms, license issued, computer activations and releases, attempts with an invalid key (with the first 8 characters typed and the IP), password reset requests, renewals, cancellations and notices sent. This is used for security, fraud prevention and so support can understand what happened.
Access logs
For each request, the server logs the IP address, date and time, the method and address of the page requested and the response. The code in password reset links is removed before logging.
Browser apps
- Corvus Intercom: station audio goes through our server in real time, in small chunks, to be mixed and delivered to the other stations of your intercom. It stays only in memory while it is transmitted and is never recorded or stored. We store the intercom configuration (station names, channels, groups, links, PIN and the Companion API key) and the panel sessions. Your browser asks for permission to use the microphone. Audio input and output choices stay on the device.
- RF Manager: we store the events, frequencies, equipment, venues and files (such as floor plans) you save, linked to your company, with the email of who created and who changed them.
- RF Planner: we store the plans saved in your account (devices, event venue, spectrum scans) and the report PDF. Spectrum scans, together with the event position rounded to about 1 km, also go anonymously (without account, email or event name) into a measurement base we use to improve the TV channel signal prediction.
- PatchPlanner: we store the planners saved in your account (name, content and dates). A copy is also kept on your device so it works offline. When you delete a planner, its content is removed from the server.
- Rune Captioner: speech recognition is done by your browser (Chrome or Edge), which uses the browser maker's speech service (Google or Microsoft) under its own policy. The audio does not go through BroadTools servers. Translation uses the browser's built-in translator. Only when you turn on "Send to other computers" do the caption text and appearance go to our server to reach the output links; they stay only in memory, are not recorded and are removed after 3 hours without updates. If you choose a Google Fonts typeface, the browser downloads the font from Google, which receives your IP.
- CalcLED: calculations stay on your device only. Nothing is sent.
- Over Timer live link: when you create a link for your client to follow, the app sends the timer state (title, time, messages, next item and timing report) to the server only to pass it on to whoever opens the link. We store the link code and name.
Emails
- We send automatic service emails: welcome, trial key and access, purchase approved, password reset link and expiry notices. We do not send marketing emails today.
- We keep the emails you send to support@, contato@ and financeiro@ and our replies.
What we do not collect
We do not use Google Analytics, advertising pixels or any other tracking tool. We do not collect your location beyond the country estimated from the IP; the only position stored is the event venue you enter in RF Manager or RF Planner. We do not ask for sensitive data.
3. Why we use it and legal basis
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Create and maintain the account, deliver licenses and apps, save your projects, send service emails and provide support | Account, team, licenses, app data, emails | Performance of a contract (item V) |
| Charge, issue tax documents and keep accounting records | Payments, account | Performance of a contract (V) and legal obligation (II) |
| Enforce 1 computer per key and 1 trial per computer, prevent fraud and abuse, protect accounts and servers | Computers, IP, account history, access logs | Legitimate interest (IX) and performance of a contract (V) |
| Keep access logs as required by the Brazilian Internet Civil Framework | IP, date and time of access | Legal obligation (II) |
| Answer support faster with an AI draft reviewed by a person | Email received, account summary | Performance of a contract (V) and legitimate interest (IX) |
| Improve the TV channel signal prediction in RF Planner and RF Manager | Spectrum scans and event position (anonymous, ~1 km) | Legitimate interest (IX) |
| Understand sales and usage to improve the apps (internal reports) | Payments, licenses | Legitimate interest (IX) |
| Defend rights and comply with orders from authorities | Whatever is needed in each case | Regular exercise of rights (VI) and legal obligation (II) |
| Marketing email, if we ever send it | Name and email | Consent (I), with an opt-out at any time |
When we rely on legitimate interest, we process only what is needed and you can object, as explained in the section on your rights.
4. Who we share it with
- Mercado Pago (purchases in Brazil) and Stripe (purchases from abroad): they receive the purchase and payer details and also process payment data under their own privacy policies. On the card payment page, the Mercado Pago script may use cookies and device identifiers to prevent fraud.
- Hostinger: hosts the server (VPS in Brazil), the mailboxes and the sending of automatic emails (no-reply@broad.tools), and stores the encrypted backup copy.
- Anthropic: provides the AI model for the support assistant (see the next section).
- Google or Microsoft: only if you use Rune Captioner speech recognition in their browser, and Google also if you choose a Google Fonts typeface in Rune Captioner.
- Discount code partners: we may tell a partner about the sales made with their code (date, app, plan and amount) to calculate their commission, without your contact details.
- Authorities: when required by law or a court order.
- Acquisition or merger: data may pass to the new controller, who must follow this policy.
We do not sell or rent personal data.
5. AI assisted support
Emails received at support@broad.tools, contato@broad.tools and financeiro@broad.tools are processed by an AI model from Anthropic (Claude), through the Anthropic API. The model receives the sender's name and email, the subject, the message text and earlier messages in the thread and, when the email comes from a customer, an account summary: name, company, country, plans, expiry dates, the last 4 characters of the key, the name and system of the activated computer and the latest payments.
With this, the assistant classifies the subject and writes a draft reply. It never sends anything by itself: a person at BroadTools reads, edits and decides whether to send it. It makes no decisions about your account, such as refunds, discounts or exceptions.
Under Anthropic's commercial terms, content sent through the API is not used to train its models. For questions or to object to this processing, contact the DPO at contato@broad.tools.
6. International transfers
Our servers are in Brazil. Some providers process data outside Brazil: Stripe and Anthropic, in the United States and other countries, and Google or Microsoft when you use Rune Captioner speech recognition. Mercado Pago may also process data abroad. These transfers follow article 33 of the LGPD: they are needed to perform the contract with you or are made with contractual data protection safeguards.
7. How long we keep it
- Account, licenses, computers, team and saved projects (RF Manager, PatchPlanner, Corvus Intercom systems): while the account exists. When you ask for deletion, we delete or anonymize this data, except what the law requires us to keep.
- Payments and tax documents: 5 years, as required by Brazilian tax law.
- Access logs: 6 months, as required by the Brazilian Internet Civil Framework (Law 12.965/2014, art. 15). Then we delete them.
- Account history: while the account exists, and for as long as needed to defend rights.
- Support emails and assistant records: for as long as needed to handle the request and defend rights.
- Backups: encrypted, deleted automatically after 30 days.
- Website session: 30 days. Password reset link: 1 hour, single use. Rune Captioner relay captions: memory only, up to 3 hours without updates. Corvus Intercom audio: not stored.
8. Your rights and how to ask
Under the LGPD (art. 18), you can ask at any time for:
- confirmation that we process your data and access to it;
- correction of incomplete, wrong or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- portability of your data to another provider;
- deletion of data processed with your consent and information about the option not to consent and its consequences;
- information about who we share your data with;
- withdrawal of consent and objection to processing based on legitimate interest;
- deletion of your account.
Some changes you can make in your account: password, team and saved projects. For everything else, write to the DPO at contato@broad.tools, preferably from the account email. We may ask you to confirm that you are the account holder. We reply within 15 days.
We do not make automated decisions that affect your interests: the AI assistant only prepares drafts.
If you are not satisfied, you can complain to the Brazilian Data Protection Authority (ANPD), at gov.br/anpd.
9. Security
- Encrypted connection (HTTPS) on the website and in the browser apps.
- Passwords stored with a salted hash (scrypt). Sessions and password reset links stored only as hashes.
- Digitally signed license tokens, limits on sign-in, key and code attempts, and protection against forms posted from other websites.
- Database on a server with restricted access. Daily encrypted backup (AES-256).
- The support assistant only sees the last 4 characters of the key.
No system is 100% secure. If an incident creates a relevant risk for you, we will notify you and the ANPD, as the LGPD requires.
11. Children and teenagers
BroadTools is a professional service for people aged 18 or over. We do not knowingly collect data from children or teenagers. If you learn of such a case, tell the DPO and we will delete the data.
12. Changes to this policy
We may update this policy when the service or the law changes. The date and version at the top change with each update, and relevant changes are announced by email or on the website.
13. Contact
- DPO and personal data requests: contato@broad.tools
- Support: support@broad.tools
- Company: BroadTools (Broadtools Ltda, CNPJ 69.442.064/0001-49), with its registered office at Curitiba/PR, Brazil.