Privacy Policy

Brazabot Inc. (“Brazabot,” “we, ” “us,” or “our”) is a Florida business that operates the Brazabot platform, a service that connects members of the Brazilian community in the United States with verified Brazilian-owned businesses and independent professionals (the “Service”). This Privacy Policy describes how we collect, use, disclose, retain, and protect information about visitors to our websites, callers, message recipients, customers, professionals registered on the platform, and other individuals who interact with us (collectively, “you”).

By using the Service, submitting any form on our websites, sending us a message through SMS or WhatsApp, or otherwise providing information to Brazabot, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described in it. If you do not agree, please do not use the Service.

This Policy covers all touchpoints under the Brazabot brand, including our marketing website at brazabot.com, any subdomains, our SMS and WhatsApp messaging flows, our public APIs, our customer support channels, and any product surfaces such as the registration and lead-capture forms. It does not cover websites operated by third parties (for example, a professional's independent website) even when we link to them.

“Personal information” means information that identifies, relates to, describes, or is reasonably capable of being associated with you. It includes name, postal address, email address, telephone number, and other identifiers, as well as commercial information such as the services you request or use.

We collect information in four ways: information you give us directly, information we receive when you communicate with us, information we collect automatically as you use the Service, and information we receive from service providers and integrated third parties.

3.1 Information you provide directly

• Contact form, demo, lead, newsletter, and waitlist submissions — including your full name, email address, phone number, company (when relevant), subject line, the body of your message, and any other field you complete.
• Phone numbers you provide for the purpose of receiving SMS or WhatsApp messages from us. Phone numbers are normalized to E.164 format and stored in our database with the channels you opted in to, the timestamp, and the consent wording you saw.
• Email addresses you provide for transactional messages, support replies, or marketing newsletters.
• Professional registration information for individuals or businesses joining the platform as service providers (full name, WhatsApp number, service category and tags, bio, profile photo or photo URL, city of operation, and similar attributes).
• Customer support records generated when you email us, reply to a message, or open a support conversation. We retain the message history, the channel, and any attachments you send.

3.2 Information collected through SMS and WhatsApp

• The content of messages you send to us through the bot.
• The phone number from which the message originates.
• Approximate location (for example, a city or ZIP code) when you share it for the purpose of being matched with nearby professionals.
• Metadata returned by Twilio, Meta WhatsApp Business, and other carriers — message identifiers, timestamps, delivery status, and whether STOP/UNSUBSCRIBE was sent.

3.3 Information collected automatically

• Browser and device information — browser type and version, operating system, language, time zone, screen size, and device type.
• Connection information — IP address, approximate geo-location derived from your IP, and Internet service provider.
• Usage information — pages viewed, links clicked, referring URL, search terms used on the site, and the date/time of each interaction.
• Cookies and similar technologies — small data files stored on your device. See Section 7 for the details.
• Consent evidence — the exact disclosure text you saw on the form, the page URL, your IP address, your user-agent string, and the timestamp of the submission. We retain this evidence for compliance with the Telephone Consumer Protection Act (TCPA), Federal Communications Commission (FCC) guidance, and the CTIA Short Code Monitoring Handbook.

3.4 Information from service providers and third parties

• Information from messaging providers (Twilio and Meta) such as delivery receipts, opt-out events, and number portability information.
• Information from analytics providers about how visitors arrive at and move through the site.
• Information from CRM and marketing automation tools used to manage your interactions with us.

We use the information described above for the following purposes:

• To operate the Service — to register and authenticate users, to match customers with professionals, to deliver SMS and WhatsApp messages, and to respond to your inquiries.
• To store, analyze, and use your data for business intelligence — your data may be stored in our databases and analyzed in aggregate or at the individual record level to understand demand, surface patterns, measure the performance of our matching, and improve the Service.
• For sales qualification and lead generation — to determine whether you are a good fit for the Service, to prioritize follow-up, to enrich your record with publicly available information, and to introduce you to relevant professionals.
• To contact you regarding products and services — including transactional notifications (account events, appointment reminders, lead assignments, security alerts) and marketing communications (newsletters, product updates, promotional offers) sent over the channels you opted in to.
• To personalize content on the website, in our emails, and inside the bot conversation.
• To prevent fraud and abuse — including rate-limiting, bot detection, identifying suspicious activity, and enforcing our Terms of Service.
• To comply with legal obligations — including responding to lawful requests by public authorities, enforcing our agreements, and protecting our rights and the rights of third parties.

We may combine information collected from different sources to maintain a single, accurate picture of you as a customer, professional, or prospect. We may also de-identify and aggregate information for any lawful purpose.

This section describes the terms that apply when you opt in to receive SMS and/or WhatsApp messages from Brazabot. It supplements, and does not replace, the consent disclosure shown next to the checkbox on each form. Mobile carriers are not liable for delayed or undelivered messages.

• Consent. By providing your phone number and checking the consent box on any Brazabot form, you expressly agree to receive SMS and WhatsApp communications from Brazabot regarding support requests, service updates, appointment reminders, account notifications, and marketing communications. Consent is not a condition of purchase.
• Programs. Brazabot operates one or more SMS and WhatsApp programs to deliver customer support, professional-side lead notifications, account events, and marketing announcements.
• Message frequency. Message frequency varies based on the program and your interactions with Brazabot. You may receive messages on a recurring basis.
• Message and data rates. Standard message and data rates may apply. Check your mobile plan for details. Brazabot does not charge you a separate fee for receiving messages.
• STOP to opt out. You can opt out of SMS communications at any time by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message you receive from us. For WhatsApp, you can reply STOP or block the sender. After you opt out, we will send you a final confirmation message and will stop sending you marketing messages on that channel. You may continue to receive transactional messages required to operate the Service (such as security or account alerts) and you can manage those preferences as described in Section 13.
• HELP for assistance. Reply HELP to any message to receive help information, including how to contact our support team and how to opt out.
• Supported carriers.Messages may be delivered through major US mobile carriers including AT&T, Verizon, T-Mobile, US Cellular, and others.
• Audit log. Each opt-in is recorded with the consent text shown, the page URL where consent was given, the timestamp, your IP address, and your browser user-agent. We use this record to honor your preferences and to comply with carrier and regulator requirements (Twilio Toll-Free Verification, TCPA, FCC guidance, CTIA Short Code Monitoring Handbook).

Parts of the Brazabot Service use artificial intelligence models — including large language models provided by OpenAI and other vendors — to interpret your messages, route conversations, generate replies, and improve the matching experience between customers and professionals. When you interact with the bot:

• The text of your messages may be transmitted to our AI vendors for processing. We use vendors that contractually commit not to train their foundation models on our data.
• We log AI inputs and outputs for safety, debugging, and quality assurance. These logs are retained as described in Section 10.
• Decisions produced by AI are advisory; a human operator may review or override them. AI-generated answers may be inaccurate or out of date. You should not rely solely on AI output for legal, immigration, medical, financial, or other consequential decisions.
• Sensitive categories of information (such as government IDs, medical information, or financial account numbers) should not be sent to the bot. If you do, we will treat them as ordinary inputs unless required otherwise by law.

We use cookies, local storage, and similar technologies to operate the site, remember your preferences (such as your selected language and theme), measure performance, and improve the experience.

• Strictly necessary cookies are required to keep you signed in, to remember your locale, and to prevent abuse. They cannot be disabled without breaking core functionality.
• Analytics cookiesare set by Google Analytics 4 (operated by Google LLC) to measure aggregate site usage. Google Analytics may collect your IP address, device information, pages viewed, time on page, and referring URL. We enable IP anonymization where supported. Google's privacy practices are described at policies.google.com/privacy. You can opt out of Google Analytics by installing Google's opt-out browser add-on.
• Marketing cookies may be set when we run advertising or attribution campaigns. We disclose any third-party advertising partners as they are introduced.
• Do Not Track.Our site does not currently respond to browser “Do Not Track” signals; we treat all visitors consistently under this Policy.

You can control or block cookies through your browser settings. Doing so may break parts of the Service.

We share personal information with service providers who help us operate the platform under written agreements that require them to safeguard the data and use it only for the purposes we specify. Categories of recipients include:

• Cloud and infrastructure providers — for hosting, databases, file storage, content delivery, and observability. Includes (but is not limited to) Amazon Web Services, Vercel, Railway, Fly.io, and Supabase.
• Messaging providers — Twilio Inc. (SMS and WhatsApp delivery) and Meta Platforms, Inc. (WhatsApp Business Platform). These vendors process phone numbers and message content for the purpose of delivering messages and providing delivery receipts and opt-out events.
• AI vendors— including OpenAI, OpenAI's authorized resellers, and other model providers used to power AI features. See Section 6.
• CRM and marketing platforms — used to manage prospect and customer records, send transactional and marketing emails, schedule follow-up, and run campaign analytics.
• Analytics platforms — Google Analytics and similar product analytics tools.
• Customer support tools — ticketing, helpdesk, and shared inbox systems we use to respond to your inquiries.
• Professional services — accountants, auditors, attorneys, and insurance providers under confidentiality obligations.
• Legal, safety, and public-interest disclosures — when we are required to do so by law, valid legal process, or to protect the rights, property, or safety of Brazabot, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of our business, your information may be transferred to the successor entity, subject to commitments at least as protective as this Policy.

When a customer is matched with a professional on the platform, we share with that professional the limited information necessary to make the match (for example, the service requested and a way to reach you), and we share with you the professional's public profile.

Brazabot does not sell your personal information to unrelated third parties. We do not rent, lease, or trade your data with unrelated advertisers or data brokers. We share data only with the service providers and recipients described in Section 8, and only for the purposes described in this Policy.

We keep personal information for as long as we need it for the purposes described in this Policy and as required by applicable laws, including tax, accounting, and telecommunications recordkeeping requirements. As general guidance:

• Account and professional profile data: kept for the life of your account and for up to seven (7) years after deletion or deactivation.
• Lead and contact form submissions: kept for up to seven (7) years from creation.
• Consent records and opt-out logs: kept for a minimum of four (4) years from the date of consent or the date of opt-out, in line with TCPA statute of limitations and Twilio Toll-Free Verification audit retention guidance.
• Message logs (SMS, WhatsApp, email): kept for up to two (2) years for support, dispute resolution, and quality monitoring purposes.
• Analytics data: typically retained according to the analytics vendor's default retention (commonly 14 months for Google Analytics).
• Backups: data residing in backups is rotated out within ninety (90) days of the underlying record's deletion in production.

When retention is no longer required, we delete or de-identify the information.

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption in transit using TLS 1.2 or higher.
• Encryption at rest for production databases and backups, where supported by the underlying cloud provider.
• Role-based access control to internal systems; least-privilege defaults.
• Multi-factor authentication for administrative access.
• Centralized logging, monitoring, and alerting.
• Vendor due diligence for service providers that process personal information.

No method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we work continuously to maintain commercially reasonable safeguards.

Depending on where you live, you may have the following rights with respect to your personal information. Florida residents and residents of other US states with comprehensive privacy laws (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) have additional statutory rights, which we honor subject to the requirements of those laws.

• Right to access — to request a copy of the personal information we hold about you and information about how we use it.
• Right to correct — to ask us to correct inaccurate or incomplete information.
• Right to delete — to ask us to delete personal information, subject to exceptions (for example, when we need to keep the data to comply with a legal obligation or to defend a legal claim).
• Right to opt outof targeted advertising, “sales” (as defined by applicable state law), and profiling that produces legal or similarly significant effects.
• Right to data portability — to receive your information in a portable, machine-readable format.
• Right to appeal — to appeal a denial of one of the above requests.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

You can exercise these rights by emailing us at privacy@brazabot.com. We will verify your identity before responding to a substantive request. If we deny your request, you may appeal by replying to our decision.

You can manage the messages you receive from Brazabot at any time:

• SMS: Reply STOP to any message. You will receive a final confirmation and we will stop sending you marketing SMS on the originating phone number. To re-subscribe, reply START or fill out the consent form again.
• WhatsApp: Reply STOPto opt out of marketing messages, or use WhatsApp's built-in block feature to stop all messages from our number.
• Email:Use the “unsubscribe” link at the bottom of any marketing email, or email privacy@brazabot.com.
• Phone calls (if applicable): tell the caller you would like to be placed on our Do Not Call list. You may also register your number with the US National Do Not Call Registry at donotcall.gov.
• Analytics: See Section 7 for instructions on opting out of Google Analytics.

Opting out of marketing messages will not stop transactional messages required to operate your account (for example, security alerts or service-impacting notifications) unless you ask us to close your account.

The Service is intended for individuals at least eighteen (18) years of age. We do not knowingly collect personal information from children under thirteen (13) and do not direct the Service to children under thirteen. If you believe we have collected information from a child under thirteen, please contact us so we can delete it.

The Service is operated from, and directed to users in, the United States. If you access the Service from outside the United States, you understand and agree that your information will be transferred to, stored, and processed in the United States. By using the Service you consent to that transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date at the top of this page and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

If you have questions about this Policy or our privacy practices, or to exercise any of the rights described above, contact us at: