AllMedical

Privacy Policy

AllMedical - Financial intelligence for physicians

Last updated: June 15, 2026

1. Who we are

ALL CONTABILIDADE & SERVICOS LTDA, enrolled with CNPJ under no. 64.127.472/0001-92, is the controller of personal data processed in the AllMedical services.

Address: Rua João Alfredo, 2017, Galeria Manhattan Center, Sala 303, Centro, Petrolina/PE, CEP 56302-080, Brazil.

Privacy channel: privacidade@allmedical.com.br

Data Protection Officer: Helio Widson Alves Pinheiro.

2. Scope of this policy

This Policy explains how we collect, use, store, protect and share personal data on the website, app, sales flow, onboarding, payment flows, support and provision of accounting, tax and administrative services.

Processing follows the Brazilian General Data Protection Law (LGPD - Law no. 13.709/2018), applicable privacy principles and information security good practices.

3. Data we may process

3.1 Registration and identification data

  • Name, CPF, CNPJ, date of birth, nationality and marital status.
  • Email, phone, WhatsApp and residential or professional address.
  • CRM, specialty, workplace and professional data needed for the services.

3.2 Accounting, tax and document data

  • Identification documents, proofs, contracts, powers of attorney and corporate documents.
  • Invoices, revenue, financial transactions provided by the client and documents needed for bookkeeping or tax assessment.
  • Company, partner, business activity, municipal registration, digital certificate and ancillary obligation data.

3.3 Payment and subscription data

  • Subscribed plan, subscription status, billing history, checkout identifiers, payment portal and billing events.
  • Data processed by payment providers such as Stripe and Asaas. AllMedical does not store the full credit card number.

3.4 Technical and browsing data

  • IP address, session identifiers, access logs, device, browser, language, pages visited and security events.
  • Cookie preferences, language, consent, authentication and feature usage.

4. Purposes and legal bases

  • Contract performance and pre-contractual measures: registration, eligibility review, onboarding, company opening/migration, invoice issuance and support.
  • Legal and regulatory obligations: bookkeeping, tax returns, ancillary obligations, document retention, authority requests and accounting routines.
  • Exercise of rights: preservation of records needed to defend AllMedical, clients or third parties.
  • Legitimate interest: fraud prevention, platform security, product improvement, operational metrics and client relationship.
  • Consent: non-essential cookies, marketing actions when required and optional preferences.

5. Data sharing

We may share personal data only when needed and within the purposes above, including:

  • Public agencies, the Brazilian Federal Revenue Service, municipalities, commercial registries, professional councils, banks and competent authorities.
  • AllMedical Portal and backend, used for authentication, operational data, storage and technical application services.
  • Portal payment providers such as Stripe and Asaas, used for checkout, subscriptions, billing, payment portal and webhooks.
  • Cloudflare, used for DNS, proxy, TLS, WAF, protection, performance, technical logs and secure routing.
  • AllMedical web/app VPS at 2.24.210.118 and isolated email/API VPS at 187.77.249.180.
  • Communication, support, transactional email, analytics and operational management tools needed for the service.

We do not sell personal data or rent contact lists.

6. Cookies, analytics and similar technologies

We use essential cookies for authentication, security, language, session and website operation. Analytics and advertising cookies, such as Google Analytics 4, Meta Pixel and Microsoft Clarity, should only be enabled according to project configuration and applicable consent preferences.

We may also use third-party resources such as YouTube in youtube-nocookie.com mode, Cloudflare Web Analytics/Browser Insights and support tools when needed for experience or security. See the Cookie Policy for details.

7. Retention and deletion

We retain personal data for as long as needed to provide services, comply with legal obligations, preserve rights and support audits. Accounting, tax and corporate documents may be retained for applicable legal periods, including after account or contract termination.

When retention is no longer necessary, data will be deleted, anonymized or blocked, subject to technical feasibility and legal obligations.

8. Security

We adopt technical and organizational measures proportional to risk, including encryption in transit, access controls, environment segregation, logs, backups, firewall, Cloudflare protection, least-privilege policies and operational monitoring.

No digital environment is absolutely immune to incidents. If a relevant personal data incident occurs, we will take appropriate measures and, when applicable, notify data subjects and competent authorities.

9. International transfers

Some providers used by AllMedical may operate infrastructure outside Brazil. In these cases, we seek to use suppliers with contractual commitments, security controls and mechanisms compatible with the LGPD.

10. Data subject rights

You may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of automated decisions, withdrawal of consent and objection when applicable.

To exercise your rights, send a request to privacidade@allmedical.com.br. We may request additional information to confirm your identity and protect your data.

11. Minors

AllMedical services are intended for professionals and companies. We do not intentionally seek to collect data from minors.

12. Updates to this policy

We may update this Policy to reflect legal, technical, operational or business changes. The version published on this page is the current version.

13. Contact

Privacy: privacidade@allmedical.com.br
Support: contato@allmedical.com.br
WhatsApp: +55 (87) 98877-6608

If you believe your request has not been properly addressed, you may also seek guidance from the Brazilian National Data Protection Authority (ANPD).