Sponsored messages
Lukre is free and may send sponsored messages through WhatsApp to the number provided at signup. These messages will be identified as advertising and may promote partners’ products or services.
Controller and purposes
LUKE DIAS DA FONSECA LTDA, CNPJ 57.590.496/0001-18, is the controller for Lukre. We process your name, email, WhatsApp number, country, language, timezone, protected credentials, consent, members and the records, messages, audio and receipts you supply to operate your account, organize finances, verify identity and provide support. To apply the credit limit, we record usage and cost per household for each reply (credits used and processing cost).
Legal bases and security
Processing needed to provide the service is based on contract performance; fiscal records meet legal obligations. Waitlist processing relies on consent, which you may withdraw. Fraud prevention and service protection rely on legitimate interests while respecting your rights. Necessary cookies maintain sessions, form security and language. Google Analytics measurement cookies are only set if you accept them in the cookie notice; without that, the site sends only anonymous, cookieless measurements. You can change your choice at any time under “Cookie preferences” in the footer. We use no advertising trackers.
Providers and sharing
Stripe processes payments and holds full card details. Lukre retains billing identifiers, payment records, payer name and tax identification when supplied, card brand and last 4 digits. Meta/WhatsApp carries messages. The configured language model (LLM) provider, accessed through OpenRouter, receives content needed to interpret messages and receipts. Cloudflare delivers the site and protects the connection. Google Analytics measures visits to the site and to the signup and account pages (pages viewed, signup and payment steps, plan chosen) for up to 14 months; it receives no name, email, phone number, messages or financial records, and is not used in the dashboard. Langfuse, in the European Union, monitors service quality (failures, response time and cost): it receives masked conversation content, with names, phone numbers, CPF, CNPJ, emails, addresses and card and account numbers replaced before sending, and each household appears only as a pseudonym. Langfuse receives no attachments: photos, PDFs and audio stay on our server, and only the text extracted from them is sent, also masked. Providers may process data outside Brazil; applicable safeguards are used for international transfers.
Retention
Data is deleted 90 days after cancellation or suspension, counted from the access block, with export available before deletion. This also applies when courtesy access ends or deletion is requested. Inactivity does not delete data. Reactivating before the deadline restores your history. The owner receives notices at the block and 7 days before deletion. Payment records required for fiscal and legal obligations are retained.
Your rights
You may request confirmation of processing, access, correction, portability where applicable, sharing information, review of automated decisions, consent withdrawal and deletion. Delete your account in /conta; use the support link on /senha for other requests or lost access. We verify identity before disclosing data. Acceptance records this version and the date; revisions receive a new published version.