Privacy Policy & LGPD
Updated October 3, 2026
This policy explains how DevSkin, as data controller, handles personal data collected on this Monalisa ERP corporate website, in compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
1. Who the controller is
DevSkin, the developer of Monalisa ERP, is the controller of the personal data collected by this site. The privacy contact channel is listed at the end of this policy.
2. What data we collect
Contact form: name, email, phone (optional), company, job title (optional), number of stores, industry and the message you write.
Technical data: IP address and browser information logged by our servers for security and abuse prevention.
This site does not use advertising cookies or third-party tracking tools. Your light or dark theme preference is stored only in your browser.
3. How we use it
To reply to your message, schedule and run demos and send commercial proposals you requested.
To protect the site against spam and abuse.
4. Legal bases
Consent (art. 7, I) for replying to your contact, recorded when the form is submitted.
Pre-contractual steps at the data subject's request (art. 7, V) and legitimate interest (art. 7, IX) for site security.
5. Sharing
Form data is recorded in DevSkin's commercial environment and may be synced with DevSkin CRM, operated by DevSkin itself. We do not sell personal data.
We may share data with infrastructure providers that host our systems, under confidentiality obligations, or when required by law.
6. Retention
We keep contact data while there is a commercial relationship or until you request deletion, subject to legal obligations.
7. Your rights
You may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing and withdrawal of consent (LGPD art. 18).
To exercise your rights, write to the email below. You may also contact Brazil's National Data Protection Authority (ANPD).
8. Data processed within Monalisa ERP
When a company subscribes to Monalisa ERP, it is the controller of its customers', employees' and suppliers' data, and DevSkin acts as processor under the contract. The product provides purpose-based consent, data subject reports and revocation propagated to integrations.
9. Security
We use encrypted connections (HTTPS), access control and audit logging to protect data.
10. Changes and contact
This policy may be updated; the date at the top shows the current version. Questions and data subject requests: