Privacy policy

We collect only what you provide when creating an account or talking to us (name, contact, business details), to run the system and support you.

We do not sell or share your data with third parties outside the operation of the service. Processors: Supabase (database, São Paulo region), Vercel and Railway (application, US) and UazAPI (WhatsApp connection; Hetzner server, Germany) and OpenAI (AI, US): each receives only what its role needs.

Your business's WhatsApp conversations with your customers (text, audio and photos) are stored for service, history and quoting. Audio is transcribed by AI; photos may be used to generate decoration previews.

Right to be forgotten: your customer can ask you to remove their data, and the panel has a “Forget contact” button that anonymizes the contact and erases messages, audio and photos. To delete your whole account, message us on Instagram @estacaodobalao.

Data lives in Supabase (São Paulo region) with access restricted per business (isolation verified automatically on every release).

We keep a first-party cookie (hp_origem, 90 days) with the channel you arrived through: the course or campaign code and, when there is one, only the address of the site that sent you, never the full page. It tells us which channels work. It does not identify you, is not shared and does not follow you to other sites.

Living document until launch: LGPD as the reference.