This Privacy Policy ("Policy") describes the rules adopted by Autonom.ia Ltda. ("Autonom.ia" or "we") regarding the collection, recording, storage, use, sharing, and deletion ("Processing") of Personal Data, as well as the security and privacy measures we adopt, especially when collected from access to our websites and the contracting of our services and products. Autonom.ia is committed to preserving the privacy of Users and protecting Personal Data collected in compliance with the LGPD and other applicable laws. We recommend reading this Policy carefully. By accessing and using our website and services, you declare that you have read and are aware of this Policy.
01. Purpose
We are committed to safeguarding the privacy and protecting the personal data of our Clients, the End Users who interact with our solutions, and visitors to our website ("you"). This Policy explains how we process your personal data, with the aim of providing transparency regarding such processing. If you have any questions, please contact us via WhatsApp or the email provided in section 13.
02. Definitions
| Term | Meaning |
|---|---|
| Controller | The party responsible for decisions regarding the Processing of Personal Data. |
| Processor | The party that processes Personal Data in accordance with the Controller's instructions. |
| Data Subject | The natural person to whom the personal data refer. |
| Personal Data | Information related, directly or indirectly, to an identified or identifiable natural person. |
| Processing | Any operation performed with personal data: collection, storage, access, use, sharing, and deletion. |
| Cookies | Small text files stored on your device to identify the device and obtain access data, enabling personalized navigation. |
| Client | The party that contracts Autonom.ia's services or represents the contracting party. |
| End Users | Persons who interact with the products and services offered by Autonom.ia, usually customers of our Clients. |
03. Collection and use of personal data
The types of data and how they are collected depend on how you relate to us. For contracting and registration, we collect name, email, phone, company, and data necessary for the service. For support, we use the data you provide. To improve the website, we use navigation data (IP, pages visited). If you are an End User of an Autonom.ia client, data shared with us will be processed according to the Client's guidelines, who acts as Controller. We recommend reading the respective Client's privacy policy.
05. Sharing of personal data
We may share data with: suppliers who assist us in providing services, subject to confidentiality and data protection clauses; public authorities when required by law; and third parties for the protection of rights when necessary. Data may be used for analytics purposes, respecting consent. We seek appropriate contracts with all partners.
06. Meta integrations (Instagram, WhatsApp and ads)
This section applies to the platforms operated by Autonom.ia, including Autonom.ia (agents.autonomia.site and chat.autonomia.site) and Hub2You's Chat2You (chat.hub2you.ai), when a Client connects an Instagram professional account, a WhatsApp Business number or a Meta ad account through Meta's official APIs. Data we receive from Meta: (a) about the connected account: account identifiers, username, name, profile picture and the access token granted by the Client; (b) about conversations: direct messages and attachments exchanged between the Client's account and the people who message it, with those people's identifier, name and profile picture, as made available by Meta. How we use it: solely to display, organize and reply to those conversations inside the Client's workspace on the platform, including through automations and AI agents configured by the Client. We do not sell this data, we do not use it for advertising and we do not share it with third parties other than the service providers needed to operate the service. Use follows the Meta Platform Terms. Meta ads: when the Client connects its ad account (by signing in with Facebook, sharing the account with the partner business portfolio or pasting an access key), we receive from Meta, only for the accounts and assets the Client authorized: identifiers and names of ad accounts, campaigns, ad sets and ads; ad thumbnails; performance figures (spend, reach, impressions, clicks and conversations started); and the chosen Pixel. When the Client authorizes it, we may also receive data about its Pages, Instagram accounts, catalogs and lead form submissions. We use this data solely to show the Client the results of its own ads, next to the conversations and sales recorded in the CRM; to send the Client's own conversion events to Meta (Conversions API) when the Client turns this on; and, when this feature is available and the Client asks for it, to create or change ads on the Client's behalf. We do not use this data for our own or third-party advertising, we do not sell it and we do not use it for any other purpose. Roles: for conversations, the Client is the Controller of the data of the people who message them, and Autonom.ia acts as Processor, handling the data on the Client's instructions. Retention: account data and the access token are stored while the integration is active. Conversation history is kept while the Client keeps their account on the platform or until they request deletion. Ads data is kept while the ads connection is active or until the Client requests deletion. Disconnection and deletion: (1) the account owner can remove the app at any time on Instagram, under Settings > Apps and websites, or on Facebook, under Settings & privacy > Settings > Business integrations; the integration is then disabled and the platform asks to be reconnected. The ads connection can also be turned off in the platform itself, under Campaigns > Meta Ads; (2) when a data deletion request is made through Meta, we delete the stored access token, end the platform's access to the account (the inbox asks to be reconnected) and provide a confirmation code and a URL to check the status of the request; (3) deletion of data, including conversation history, can also be requested at any time by email at comercial@autonomia.site. People who messaged a Client can request deletion directly from the Client or through the same email.
07. International transfers
To fulfill the purposes of this Policy, we may share data with servers or suppliers located abroad. We adopt security measures and require contractual obligations compatible with legislation. You may object to certain transfers by contacting us, but in some cases this may limit the provision of services.
08. Marketing communications
Occasionally we use your contact data to send communications about our products and services. Whenever necessary, we obtain consent. All communications include an opt-out option.
09. Data security
We maintain an information security program to protect your personal data, ensuring confidentiality, integrity, and availability. We adopt appropriate technical, administrative, and physical procedures. Data is stored in a secure environment. If you suspect any compromise, please contact us immediately.
10. Data retention
We store your data for the period necessary to fulfill the purposes. Even after deletion is requested, some data may be retained to comply with legal obligations or protect rights. We consider your right to deletion and objection as described in section 12.
11. Children's and adolescents' privacy
Our website and services are not directed to children or adolescents. If we identify processing of minors' data, we will take measures to delete it. In situations where we act as Processor for Clients, contact the respective Client to exercise your rights.
12. Data subject rights
The LGPD grants: confirmation and access; correction; anonymization, blocking or deletion; portability; information about sharing; information about non-consent; revocation of consent; objection; and review of automated decisions. To exercise these rights, contact us through the channel in section 13. We may request information to verify identity. In some cases, we may have legitimate reasons not to fulfill certain requests. We are committed to responding within a reasonable time.
13. Contact
For questions about this Policy, contact us: WhatsApp +55 11 97180-3011 or by email at comercial@autonomia.site. We have a Data Protection Officer (DPO) available to handle requests related to personal data.
14. Policy updates
We may update this Policy periodically. We recommend visiting this page regularly. Relevant changes will be communicated. Continued use of services after changes means you are aware of the modifications.