Legislation and scope
Federal rules relevant to the service and their limits.
Updated November 1, 2026
Scope and limits
Current law and official acts take precedence. Manualess organizes business operations through its website and app. This page summarizes federal rules that may apply to current features; it is not an inventory of all laws, legal advice, or a compliance certification. Applicability depends on the workflow, industry, location, and specific relationship. State, municipal, sector-specific rules, and third-party platform terms may also apply.
Personal data and transfers
The LGPD governs personal data processed for accounts, connections, support, diagnostics, and content, according to each purpose and legal basis. Controller or processor status depends on who decides the purposes and means of each operation and must reflect the actual data flow. International transfers require a legal basis and appropriate safeguards under Articles 33–36 of the LGPD and ANPD Resolution No. 19/2024, as applicable. See the Privacy Policy.
Security incidents
When an incident may cause relevant risk or harm to data subjects, the controller must notify the ANPD and affected individuals within 3 business days after learning that personal data was affected, unless another law sets a specific deadline. The controller must record personal data incidents, including those not reported, and keep those records for at least 5 years. The processor must assist the controller under the LGPD and their agreement.
Application access logs
Article 15 of Brazil's Internet Civil Framework requires an application provider that is a legal entity and operates in an organized, professional, and economic manner to keep application access logs for 6 months, under confidentiality in a controlled and secure environment. Decree No. 8,771/2016, as amended by Decree No. 12,975/2026, requires recording the logical source port with the IP address when needed for unique identification. The service's actual architecture and retention must be checked against these requirements.
E-commerce and consumers
For consumer relationships, the Consumer Code and Decree No. 7,962/2013 require clear information about the supplier, service, price, offer terms, restrictions, and support channels. For distance contracts, the withdrawal right in Article 49 of the Consumer Code applies where relevant. The plans page still shows prices and terms as “coming soon”; before enabling a public purchase, disclose the business name, CNPJ, physical and electronic address, total price, recurrence, limits, term, renewal, cancellation, and refunds.
Digital accessibility
Article 63 of Brazil's Inclusion Law requires accessible websites for companies headquartered or represented in Brazil and requires a prominently displayed accessibility symbol. The symbol in the Manualess footer links to this section and does not by itself certify that every page meets applicable guidance. Report barriers through support; the website must be continually assessed with assistive technologies.
Software, content, and platforms
Computer programs are governed by Law No. 9,609/1998 and, where applicable, Law No. 9,610/1998. Third-party components remain subject to their respective licenses. Integrations also depend on each platform's permissions, APIs, and terms; do not use accounts or data without authorization. Mandatory statutory rights remain in force.
Official sources
- Law No. 13,709/2018 (LGPD)
- ANPD Resolution No. 15/2024 — incidents
- Law No. 12,965/2014 (Internet Civil Framework)
- Decree No. 8,771/2016, updated by Decree No. 12,975/2026
- Law No. 8,078/1990 (Consumer Code)
- Decree No. 7,962/2013 — e-commerce
- Law No. 13,146/2015 (Brazilian Inclusion Law)
- Law No. 9,609/1998 — software
- Law No. 9,610/1998 — copyright
- ANPD Resolution No. 19/2024 — international transfers