Legal
Privacy Policy
Last updated: July 20, 2026
1. About this policy
This policy explains how Atendoa (“we”) processes personal data while operating its AI customer service platform. We follow Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD). It applies to account holders, invited team members, and visitors who talk to assistants published by our customers.
2. Data we collect
Account data: name, email address, and an irreversibly hashed password, plus organization membership and role.
Business content:documents, text, and website pages submitted to create an assistant's knowledge base.
Chat and lead data: messages, response feedback, and contact details that a visitor voluntarily submits.
Technical data: operational records used for security, abuse prevention, and plan limits. Essential cookies and local preferences include login, language, theme, and recent chat session identifiers.
3. Why we use data
- to create accounts, organizations, and team access;
- to generate answers from content provided by the customer;
- to show conversations, usage metrics, and leads in the dashboard;
- to send transactional emails and protect the service;
- to comply with applicable legal obligations.
We do not sell personal data or use customer content for advertising.
4. Our role in customer chats
The business that publishes an assistant is the controller of its visitor conversations and leads. Atendoa acts as its processor, handling that data according to the business's instructions and this policy. Requests about a conversation should first be directed to the business responsible for the website.
5. Service providers and international transfers
We use providers required to operate hosting, databases, file storage, transactional email, and AI models. AI providers receive the visitor's question and relevant knowledge excerpts only to produce the requested answer. Providers may operate outside Brazil; international transfers follow the safeguards required by the LGPD.
6. Retention and security
We retain data while an account is active and as needed for the purposes described here or legal obligations. We use HTTPS, irreversibly hashed passwords, organization-level data isolation, role-based access controls, and abuse limits. Deleted content is removed from active systems within a reasonable period.
7. Your rights
Subject to applicable law, you may request confirmation, access, correction, portability, information about sharing, consent withdrawal, anonymization, or deletion. Contact contato@atendoa.com. We respond within the periods required by the LGPD and other applicable law.
8. Changes and contact
We may update this policy to reflect changes to the service or law. Material changes will be communicated through the dashboard or by email. For questions, contact contato@atendoa.com or read our Terms of Use.