1. How to read this Policy — the two roles of Ligia
Ligia processes data of two groups of people, and Historymakers' role is different in each case. Understanding this distinction is key to this entire Policy.
a) Professional's Data (our Client)
When you register and use Ligia, we process your registration, payment, and usage data. In this case, Historymakers is the Controller — we decide how and why this data is processed.
b) Professional's Patients' Data
When Ligia chats with the Professional's patients, organizes their schedule, or imports chat history, it processes data that belongs to the Professional's service context. In this case, the Professional is the Controller (they decide the purpose — to serve their patients) and Historymakers is the Processor (only processing this data on behalf of the Professional, following their instructions).
This means, in practice: if you are a patient of a professional who uses Ligia and want to exercise rights over your data, the main point of contact is the professional themselves (the controller). Still, we can help — see section 9. The following sections indicate, at each point, which of these two groups they refer to.
2. Data we process
2.1. Professional's Data (Historymakers as Controller)
- Registration: name, email, phone, CPF/CNPJ, professional registration, specialty.
- Payment: data required to charge the subscription, processed by Stripe. We do not store the complete card number.
- Platform usage: settings, access records, technical logs, product usage metrics.
- Communications: messages exchanged with our team (support, onboarding, retention).
2.2. Patients' Data (Historymakers as Processor, on behalf of the Professional)
This data is entered or imported by the Professional, or generated in the conversations that Ligia conducts on their behalf:
- Contact and identification: name, phone/WhatsApp number, and other data the patient provides.
- Conversation content: messages exchanged between the patient and Ligia, including audios.
- Imported history: previous WhatsApp chats of the Professional, imported with their authorization.
- Scheduling: appointments, times, status.
- Health data: eventually present in conversations. These are sensitive personal data and are processed under the responsibility of the Professional, who is the Controller (see section 6).
3. Why we process data and the legal basis
3.1. Professional's Data (Controller: Historymakers)
| Purpose | Legal basis (LGPD) |
|---|---|
| Provide and operate the contracted service | Execution of contract (art. 7, V) |
| Billing and subscription management | Execution of contract (art. 7, V) |
| Comply with fiscal and legal obligations | Legal obligation (art. 7, II) |
| Support, onboarding, and relationship | Execution of contract / legitimate interest (art. 7, V and IX) |
| Improve product and security | Legitimate interest (art. 7, IX) |
| Send service-related communications | Execution of contract / legitimate interest |
| Marketing (when applicable) | Consent (art. 7, I) |
3.2. Patients' Data (Processor: Historymakers; Controller: the Professional)
We process this data exclusively to operate the service on behalf of the Professional — serving, scheduling, confirming, reminding, billing, and organizing. The applicable legal basis for this processing is defined and ensured by the Professional as Controller (see section 6). We do not use this data for our own purposes.
4. What we DO NOT do with data
- We do not sell personal data.
- We do not share Patient data for third-party marketing purposes.
- We do not use Patient data for Historymakers' own purposes beyond operating the service.
- We do not use conversation content to train our own AI models.
6. Health data and minors' data
6.1. Health data
Ligia may process health data present in conversations. These are sensitive personal data. As Processor, Historymakers processes them only to operate the service, under the responsibility of the Professional, who is the Controller and must ensure the appropriate legal basis (art. 11 of the LGPD — usually healthcare tutela or consent).
6.2. Minors' data
The service may involve minor patients (for example, in child psychology, speech therapy, or pediatrics). The processing of this data is the responsibility of the Professional (Controller), who declares to have obtained the specific consent of at least one of the parents or legal guardian, or other applicable legal basis, in the form of art. 14 of the LGPD.
6.3. The account holder (the Professional/Client) is always over 18 years old and civilly capable. Ligia is not intended to be contracted by minors.
7. International data transfer
Some of the providers listed in section 5 are based or process data outside Brazil (for example, in the United States). This constitutes an international data transfer. These transfers occur based on the LGPD provisions (arts. 33 to 36), notably for contract execution and through contractual guarantees with the providers that ensure a level of protection compatible with Brazilian law.
8. Information security
We adopt technical and administrative measures to protect data against unauthorized access, loss, or improper alteration, including:
- encryption of data in transit;
- role-based access control and principle of least privilege;
- segregation of testing and production environments;
- audit logging and audit trails;
- selection of providers with recognized security standards.
No system is absolutely immune to incidents. In the event of a security incident that may result in relevant risk to data subjects, we will communicate with the affected individuals and the ANPD when required, and — in the case of Patient data — we will notify the Professional (Controller) without unjustified delay.
9. Rights of data subjects
The LGPD guarantees data subjects rights such as: confirmation and access, correction, anonymization or deletion, portability, information about sharing, and revocation of consent.
How to exercise:
- •If you are a Professional/Client (data under our controllership): contact us directly at dpo@ligia.app.
- •If you are a Patient of a professional who uses Ligia: the controller of your data is the professional who treats you, and they are the primary point of contact. Still, if you contact us, we will assist in forwarding your request or serve you within our role as Processor.
10. Data retention and deletion
| Category | Retention period |
|---|---|
| Conversations and Patient data (under operation) | During the term of the contract + 30 days after cancellation, for export; thereafter, deletion or return to the Professional |
| Professional's registration and tax data | Up to 5 years after the end of the relationship (tax/legal obligation) |
| Payment transaction records | Up to 5 years (tax/legal obligation); card details remain with Stripe |
| Access and application logs | 6 to 12 months (security and Brazilian Internet Civil Framework) |
| Data subject to deletion request | Deleted after the request, except what the law requires to retain |
When the Professional cancels, Patient data is not retained indefinitely: after the 30-day window for export, it is deleted from production systems, except for legal retention obligations.
12. Data Protection Officer (DPO)
Questions, requests, or complaints about privacy and data protection:
Officer (DPO): dpo@ligia.app
Historymakers Ltda. — CNPJ 05.032.212/0001-74
Av. Anita Garibaldi, 850, office 809b — CEP 80540-180 — Curitiba/PR — Brazil
You may also file a complaint with the National Data Protection Authority (ANPD).
13. Changes to this Policy
We may update this Policy to reflect changes in the platform, legislation, or processing practices. Relevant changes will be communicated, and the date of the last update will always appear at the top of the document.