Security and compliance, taken seriously.
This page summarizes how MaxSDR handles data and protects the operations of the companies that hire us.
What is not implemented does not appear here. If you need a guarantee you didn't find, ask before you sign: the honest answer may be that we don't do it yet.
LGPD (Brazilian data protection law)
- The customer is the data controller for their contacts (LGPD, Art. 5, VI); MaxSDR acts as the processor, handling that data only under the customer's instruction (Art. 5, VII).
- International transfer: processing and storage take place on servers in the United States, with the customer's authorization set out in the contract (LGPD, Art. 33).
- Portability: customers can export their data — contacts, conversations, and settings — at any time, even while the subscription is suspended.
- Deletion: customers can request deletion of their account and associated data at any time.
- Full details are in the Privacy Policy.
The 6 Laws
Six principles that outrank any customer request and are enforced in the product itself.
Honesty
Dashboard metrics reflect what actually happened — no inflated results.
Safety
If there are signs of risk to the customer's WhatsApp account, outbound sending pauses automatically and the customer is notified.
Qualified leads
Invalid contacts, or numbers without WhatsApp, never enter the sending queue.
No indiscriminate outreach
There is a cap on contacts per person and a minimum interval between them. We do not do mass blasting.
Humanization
Message pace and length close to a human conversation, adapted to each customer's style.
Unique copy per lead
Every message is written for that person — no copy-pasted text sent to a whole list.
Infrastructure
- Large-scale managed cloud in the United States, with automatic scaling.
- Secrets and credentials stored encrypted in a managed vault — never in plain text.
- Each customer company is isolated from the others, with access rules enforced at the data layer as well.
Responsible sending
Sending pace follows the health of the customer's WhatsApp account, with an automatic pause when there is a sign of risk. This is not a guarantee of zero blocking — no platform can offer that. It is an active protection mechanism.