Privacy Policy

Last updated: September 23, 2026

This is an English translation of the original Portuguese document, published so you can read it in your language. If the two versions differ, the Portuguese version prevails: Terms · Privacy.

This Policy explains how Atendize processes personal data when you use our website, subscribe to our customer service and messaging platform, or interact through it. We process data in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).

1. Who we are

A Atendize is the trade name of the company registered in Brazil's national business registry (CNPJ) no. 68.441.582/0001-85 — a customer service, communication and messaging platform for businesses on WhatsApp and other channels. Contact: contato@atendize.com. Data Protection Officer (DPO): contato@atendize.com.

2. Data we process

2.1. From the client company and its users (agents)

• Registration data: name, email, phone, company and login credentials.
• Usage data: access logs, actions in the dashboard, support metrics and technical logs.
• Billing data: what is needed to pay for the subscription (processed by the payment provider).

2.2. From end customers (contacts served)

• Phone number, display name and content of the messages exchanged (text, files, audio, documents).
• Conversation metadata: date and time, delivery and read status, assigned agent, tags and history.

This data belongs to the subscribing company, which is the controller. Atendize processes it solely to operate the service, according to the subscriber's instructions. As processor, the Atendize team only accesses conversation content for support, quality control and supervision of the virtual assistant, in accordance with the Terms of Use, with restricted access and subject to a duty of confidentiality.

3. What we use it for

4. WhatsApp and Meta

The platform integrates with the WhatsApp Business Platform and with the infrastructure of Meta Platforms, Inc. to send and receive messages. When using these channels, message processing is also subject to Meta/WhatsApp policies. When acting as a Tech Provider, we connect and manage, with the client company's authorization, its WhatsApp Business Account (WABA) and its number with Meta. We do not use conversation content for advertising or sell it to third parties.

5. Sharing with third parties

We do not sell personal data. We may share data, strictly as needed, with:

• Meta/WhatsApp — to send and receive messages through the official channels.
• Infrastructure providers (cloud hosting) that store and process data according to our instructions.
• Payment provider — to process subscriptions (e.g., Stripe).
• Artificial intelligence providers — when the client company turns on AI features, to reply to messages and generate suggestions and summaries; the content sent is limited to what is necessary for that feature, and these providers do not use it to train their models, in accordance with the API terms of use.
• OpenAI — when you arrive through our ad on ChatGPT, to measure whether the ad led to a sign-up. We send the click identifier and, when available, the email and phone number converted into an irreversible code (SHA-256 hash) — never the original values.
• Authorities — when required by law or a court order.

6. International transfer

Some providers (Meta, cloud, AI, payments) may process data outside Brazil. In those cases, we apply the safeguards set out in the LGPD to ensure an adequate level of protection.

7. Retention

We keep data for as long as necessary for the purposes above and for the duration of the contractual relationship. Once the account is closed, data may be deleted or anonymized after the applicable legal period, except where retention is mandatory. The client company may request deletion of its contacts' data.

8. Security

We adopt technical and organizational measures to protect data, including role-based access control, encrypted transmission (HTTPS), per-client isolation and audit logs. No system is completely immune to incidents; in the event of a relevant incident, we act in accordance with the LGPD.

9. Your rights (LGPD)

You may request: confirmation of and access to your data; correction; anonymization, blocking or deletion; portability; information about sharing with third parties; and withdrawal of consent. To exercise them, write to contato@atendize.com. If you are an end customer served by a company that uses Atendize, we will forward the request to the responsible company or handle it according to its instructions.

9.1. Data deletion (how to request it)

To request deletion of your data — including data received from WhatsApp, Facebook Messenger or Instagram when you talk to a business that uses the platform — send an email to contato@atendize.com with the subject “Data deletion”, stating the phone number or username used in the conversation. We acknowledge receipt and complete the deletion (or anonymization, where there is a legal duty to retain) within a maximum of 15 days, notifying you when it's done. If the data is under the responsibility of a client company, we forward the request to it and follow up until it is completed.

10. Cookies

Our website uses essential and analytics cookies to function and improve your experience. You can manage cookies in your browser settings.

To find out which channels bring in visitors (for example, Google, ChatGPT or Instagram), we record the page and the source of each visit to the website, without using cookies for this. The IP address is not stored: instead, we keep an encrypted code, used only to count visitors and to link a visit to a sign-up made right afterwards. These records are deleted after 90 days.

When we advertise on third-party platforms, we also use those services' own cookies to know which ads led to sign-ups. This is the case of OpenAI's measurement pixel (ads on ChatGPT), which stores the cookies __oppref (30 days) and __obref (365 days) in your browser. These cookies only store an identifier of the ad click and a random browser reference — they don't store your name, email or phone number.

11. Changes

We may update this Policy. The current version will always be on this page, with the date of the last update at the top.

12. Contact

Questions about privacy and data protection: contato@atendize.com.