Legal document
Tablia Servicos Tecnologicos Ltda. values the privacy and protection of the personal data of its users, customers and other individuals who interact with our services. This Policy explains what personal data we may process, why we process it, with whom we may share it and what your rights are.
Last updated: 4 de setembro de 2026
This document was originally written in Portuguese. In case of conflict between translations, the Portuguese version prevails.
Tablia Serviços Tecnológicos Ltda., registered under CNPJ 53.734.413/0001-66, is a technology company that offers solutions to automate quoting processes, product lookup and customer service for building material stores.
Our platform can receive product lists in various formats, interpret that information with the help of artificial intelligence technologies, match it against the store's catalogue and inventory, and assist in preparing quotations.
Depending on the situation, Tablia may act as a controller or as a processor of personal data. This distinction is important and is explained below.
The responsibility for processing personal data depends on who determines the purpose and the essential means of the processing.
Tablia acts as a controller of the personal data it collects and uses for its own purposes, including, as applicable:
In these situations, Tablia determines the purposes and essential means of the processing and is responsible for responding to data subject rights requests.
When a person uses the platform to request a quotation from a store that has contracted Tablia, the store is normally the controller of that person's personal data.
In this context, Tablia acts as a processor, processing data on behalf of the store and in accordance with its instructions. This may include:
In this situation, Tablia does not freely determine the purpose of the processing. It processes the data to deliver the service contracted by the store.
The relationship between Tablia and the store may be supplemented by a Data Processing Agreement (DPA), which sets out the responsibilities and instructions applicable to the processing of personal data.
If you are a customer of a store and have used Tablia to request a quotation, the store you are negotiating with is, as a rule, the controller of your data.
The data processed depends on how you use Tablia.
When you simply browse the website, we may process technical information related to navigation, especially when consent has been given for audience analysis tools. Depending on the settings adopted, the following may be processed:
The cookies used on the website are described in our Cookie Policy.
When you use our forms or contact channels, we may process:
We may also record technical information related to the submission, such as date and time, IP address and browser information, when necessary for security, abuse prevention or proof of certain interactions.
When you use the platform on behalf of a store, we may process:
We may also process store registration information, such as business name, address, phone, WhatsApp, description, logo and information necessary for account setup and operation.
When you use Tablia to request a quotation from a store, we may process, depending on the information provided:
Identification and contact data: name; company name, when applicable; phone or WhatsApp; email; CPF or CNPJ, when provided; other contact information voluntarily provided.
Request-related data: product list; quantities; units of measure; product descriptions; codes or references provided by the customer; submitted files; additional information included in the request.
Quotation-related data: identified products; matches found in the store's catalogue; products not found; quotation versions; changes made; negotiation status; information about approval, rejection or substitution of the quotation.
Technical data: date and time of operations; quotation identifier; records necessary for platform security and operation.
Tablia allows product lists to be submitted in various formats, including PDF, images, spreadsheets, documents, text files and text entered directly on the platform.
These files may contain information beyond the product list, such as a person's name, a construction site address, a company name or other information included by the user.
Tablia uses the submitted content to deliver the quotation functionality, including item interpretation, product identification and information organisation.
We recommend that users do not include personal data that is not necessary for the purpose of the quotation.
The platform may process information provided by stores, such as product code, description, alternative names, price, stock, availability, unit of sale, commercial terms, delivery information and other information related to products sold by the store.
This information is, in many cases, business data of the company and not personal data. When commercial information is associated with an identified or identifiable natural person, it may be considered personal data and will be processed in accordance with this Policy and applicable legislation.
Tablia uses this information primarily to deliver the services contracted by the store, including product identification, stock lookup and quotation preparation.
Tablia may provide features that allow the store to use WhatsApp or other communication channels to serve its customers. When the store connects its service channel to Tablia, we may process:
When this data is processed on behalf of the store, the store is the controller and Tablia acts as the processor.
The operation of WhatsApp and the processing carried out by Meta are also subject to Meta's and WhatsApp's own policies. This Policy explains the processing carried out by Tablia from the moment information is received or processed by our systems.
Tablia may offer integration with systems used by the store, including ERPs, inventory systems, commercial platforms and other tools.
When a store authorises an integration, Tablia may receive, query, transmit or update information necessary to deliver the contracted features. The scope of the integration will depend on:
Data from third-party systems may also be subject to the privacy policies and terms of those respective systems.
We process personal data only for legitimate, specific purposes that are compatible with the context in which they were collected. The main purposes include:
Platform operation: create and manage accounts; authenticate users; provide features; process requests; prepare and deliver quotations; maintain records necessary for the service.
Service and communication: respond to requests; provide support; communicate information related to accounts, quotations and services; forward messages necessary for delivering a request.
List and product processing: interpret lists; identify products; compare descriptions; match requested products to the store's catalogue; identify items not found; organise information for quotation preparation.
Integrations: connect Tablia to ERPs and other authorised systems; synchronise information necessary for service delivery.
Security: protect accounts and systems; identify unauthorised access; prevent fraud, abuse and irregular use; investigate incidents; maintain platform integrity.
Service development and improvement: identify issues; evaluate performance; improve features; develop new capabilities; enhance the user experience.
Legal obligations: comply with legal and regulatory obligations; respond to orders from competent authorities; regularly exercise rights in judicial, administrative or arbitration proceedings.
Tablia uses the legal bases provided for in the LGPD according to the purpose and context of each processing activity. These may include:
| Purpose | Applicable legal basis |
|---|---|
| Account creation and management | Performance of contract or preliminary procedures |
| Delivery of contracted services | Performance of contract |
| Quotation processing | Performance of contract |
| Service and support | Performance of contract, preliminary procedures or legitimate interest |
| Security and abuse prevention | Legitimate interest |
| Compliance with legal obligation | Compliance with legal or regulatory obligation |
| Regular exercise of rights | Regular exercise of rights |
| Audience analysis via cookies | Consent or other applicable legal basis |
| Marketing communications | Consent or other applicable legal basis |
When we use legitimate interest, the processing will only be carried out when compatible with the legislation, taking into account the data subject's expectations and their fundamental rights and freedoms.
Consent, when used, may be revoked by the data subject at any time, subject to the consequences and limitations provided for by law.
Tablia uses artificial intelligence technologies to automate certain steps of the quoting process. These features may include:
List interpretation: the technology can interpret files, images or text submitted by the user to identify products, quantities and other information relevant to the quotation.
Product matching: Tablia can compare the requested product with products in the store's catalogue, considering meaning, description, characteristics and other available information.
Result organisation: the systems can sort or present possible matches to facilitate the store team's work.
The use of artificial intelligence does not mean that all sales-related decisions are made automatically. The store maintains control over the quotation and can review, change, accept or reject the results presented by the platform.
Tablia does not use these features to:
Where applicable, the data subject may request information about automated processing and exercise the rights provided for in the LGPD, subject to trade and industrial secrets.
Data provided to Tablia for the execution of platform features is not used by Tablia to train its own artificial intelligence models, except when there is specific information and authorisation or another adequate legal basis for that purpose.
When we use third-party services for artificial intelligence processing, the processing will be subject to the contracts, settings and policies applicable to those providers.
Tablia seeks to configure and contract these services in a manner compatible with the purposes for which the data is sent.
Tablia may use artificial intelligence, infrastructure and other technology service providers located in Brazil or abroad. These providers may process information necessary for list interpretation, document processing, product identification and matching, platform operation, storage, security and sending of communications.
The list of providers may be updated as Tablia's technology evolves. The replacement of a provider does not, by itself, change the purposes stated in this Policy.
Some providers used by Tablia may process personal data outside Brazil. When this occurs, Tablia will adopt the mechanisms provided for in the LGPD and applicable regulations to legitimise the international transfer, taking into account the characteristics of the processing and the providers involved.
Personal data will be kept for the period necessary to fulfil the purposes for which it was collected. The retention period may vary according to:
When the data is no longer necessary, it will be deleted or anonymised, unless its retention is necessary to comply with a legal obligation, for the regular exercise of rights, or under another hypothesis permitted by law.
Tablia adopts technical and administrative measures designed to protect personal data against unauthorised access and accidental or unlawful situations. These measures may include:
Access to information is limited to the people and systems that need it to perform their functions. Despite the measures adopted, no system connected to the internet can be considered completely immune to risks.
Tablia maintains procedures to identify, assess, contain and handle security incidents that may involve personal data. When an incident occurs that may pose a risk or relevant harm to data subjects, Tablia will adopt the measures provided for in applicable legislation and regulations, including communication to the ANPD and data subjects, when required.
Some Tablia features may generate specific links for accessing a quotation. When a quotation is made available through a shareable link, anyone with access to the link may view the information made available through it, according to the feature settings.
We recommend that the user share the link only with people who should have access to the quotation.
Tablia may use contact data to send communications necessary for the provision of services, including information about the account, quotations, requests, service changes, security, support and information related to contracting.
When we send marketing communications, we will observe applicable legislation and provide appropriate mechanisms for the user to opt out. Opting out of marketing communications does not prevent the sending of communications strictly necessary for contract performance or service delivery.
Tablia's services are primarily directed at businesses, stores, professionals and individuals involved in product purchasing, selling and quoting processes. Tablia does not direct its services at children and does not intentionally seek to collect personal data from children.
If we identify that personal data of a child has been collected inappropriately, we will take reasonable measures to assess the situation and, where appropriate, delete that information.
Tablia does not, as a rule, request sensitive personal data for the use of its features. Users should avoid including sensitive personal information in lists, files, messages or other platform fields that is not necessary for the intended purpose.
If sensitive personal data is voluntarily included in content submitted to the platform, it may be processed together with the content to deliver the requested feature, subject to the applicable legal bases and other requirements.
You should provide Tablia with third-party personal data only when you have authorisation or another adequate legal basis to do so. This is especially important when a person submits lists, spreadsheets, documents, contacts, customer information, supplier data, messages or files containing third-party data.
When Tablia acts as a processor, the contracting store is responsible for ensuring that it has an adequate basis for the processing of the personal data it sends to us.
Under the LGPD, you may exercise, subject to applicable legal conditions, rights related to your personal data, including:
Some rights may be subject to legal limitations. For example, certain data may need to be retained to comply with a legal obligation or for the regular exercise of rights.
To exercise your rights or clarify questions about the processing of your personal data, contact us through the channel indicated at the end of this Policy.
We may request additional information to confirm the identity of the requester and prevent personal data from being improperly provided to third parties.
When the request involves data for which Tablia acts only as a processor, we may forward it to the controller store responsible for the processing. In that case, Tablia will provide the cooperation required by the contract and applicable legislation.
If you used Tablia to request a quotation from a particular store, that store may be the controller of your personal data. In that case, requests related to your rights should preferably be directed to the store itself.
Tablia may assist the store in responding to the request, in accordance with its contractual and legal obligations. If you do not know who is responsible, you may contact Tablia through the channel indicated in this Policy.
This Policy may be updated to reflect changes to services, new features, changes in providers, changes in legislation, ANPD guidance, and changes in personal data processing practices.
The most recent version will always be available on the Tablia website, with an indication of the update date. When a change is relevant and requires new communication or consent, we will take the appropriate measures before or at the time of its entry into force.
This Policy is governed by Brazilian law, in particular Law No. 13,709/2018 — the General Data Protection Law (LGPD) — and other rules applicable to data protection and privacy.
Tablia Serviços Tecnológicos Ltda.
CNPJ: 53.734.413/0001-66
Rua Professor Estevão Pinto, 555, Apt. 303A Bloco A, Serra, Belo Horizonte, MG, CEP 30.220-060
Data Protection Officer:
Carolina Porto
Channel for privacy and data protection matters:
privacy@tablia.com.br
For general questions about the platform, contracting or features, please use the contact channel available on the Tablia website.
This Policy should be considered together with:
Tablia may provide additional information about privacy and security according to the contracted service and the specific processing context.