Privacy Policy

1. General Information

DisparaChat is committed to protecting the privacy of users of its digital marketing automation and social media management platform.

2. Information Collection

Account Data:

• Full name and email address (required)
• Payment information (optional, as needed)

Social Media Data:

When users connect platforms like WhatsApp or Telegram (available for use in client automations), the service collects:

• Access tokens and API credentials
• Profile engagement metrics

Automation Data:

• Messages processed through automation
• Contact/lead capture information
• Campaign history
• Chatbot settings and workflows

3. Use of Information

The platform uses collected data for:

• Service delivery
• Transaction processing
• Social media automation
• Performance reports
• Platform improvement
• Technical support
• Legal compliance

4. AI Integration

The service integrates with third-party AI providers, including:

• OpenAI
• Anthropic's Claude
• Google Gemini
• DeepSeek
• Grok
• OpenRouter
• Mistral
• ElevenLabs

Data processing follows each provider's privacy policies.

5. Data Sharing

Limited sharing occurs with:

• Service providers
• Social media APIs
• Authorized integrations
• When legally required

6. Security Measures and Incident Response

Protection Measures:

Implemented protections include:

• Encryption: Data in transit and at rest is protected with state-of-the-art encryption (TLS/SSL and AES-256)
• Access controls: Multi-factor authentication and role-based access controls (RBAC)
• Continuous monitoring: Intrusion detection systems and real-time log analysis
• Regular backups: Automatic daily backups with 30-day retention
• Periodic audits: Quarterly security reviews and penetration testing
• Data isolation: Data segregation between different users and environments

Security Incident Response:

In the event of a security incident or data breach, DisparaChat follows this protocol:

• Detection and Containment: Immediate identification of the threat and isolation of affected systems
• Investigation: Complete analysis of the incident to determine scope and impact
• Notification: Affected users will be notified within 72 hours as per LGPD/GDPR
• Remediation: Fixing vulnerabilities and restoring security
• Documentation: Complete record of the incident and actions taken
• Reporting to Authorities: Communication to competent authorities when legally required

Reporting Channel:

To report security incidents, use the email [email protected] with the subject "URGENT - Security Incident".

7. User Rights

Users can:

• Access their personal data
• Correct incorrect information
• Delete their data
• Restrict processing
• Data portability
• Opt out of marketing

Protection and Limitations:

To ensure security and prevent fraud, the exercise of these rights is subject to:

• Panel Access (Primary): For speed and security, the right to portability/access should be exercised primarily through the "Export Data" tools (Contacts/Conversations) available in the platform panel.
• Identity Verification: We reserve the right to request unequivocal proof of account ownership before releasing any data.
• Administrative Costs: Free requests are limited to one per year. For additional, repetitive, or manifestly unfounded requests, DisparaChat may charge a reasonable administrative fee.
• Data Scope: The right of access applies to data provided by the user (raw/exportable format). It does not include trade secrets, internal platform logic, or proprietary DisparaChat information.

8. How to Request Data Deletion

DisparaChat offers two ways to delete your personal data:

Deletion via Platform:

You can delete all your data directly through the platform:

• Access your profile on the DisparaChat platform
• Go to the "Account Settings" section
• Click on "Delete All Data"
• Confirm the deletion

Deletion via Email:

Alternatively, you can request data deletion by contacting us:

• Email: [email protected]
• Subject: "Data Deletion Request"
• Required information: Full name and registered email

Deletion Deadlines:

• Data removal will be processed within 24 hours of the request
• You will receive an email confirmation when the deletion is complete
• Backup data will be removed within 30 days
• Some data may be retained for a longer period if required by law or for audit purposes

Important: Data deletion will include all information associated with your account, including conversation history, contacts, campaigns, and settings. This action is irreversible.

9. WhatsApp Business Integration

DisparaChat uses the official WhatsApp Business API (provided by Meta) to offer automation and conversation management features.

Message history on COEX connections

Data Collected via WhatsApp Business:

• Messages sent and received through the WhatsApp Business API
• Contact phone numbers
• Conversation metadata (timestamps, delivery status)
• User's WhatsApp Business profile information

WhatsApp Data Usage:

Data collected via WhatsApp Business is used exclusively to:

• Facilitate communication between you and your customers
• Automate responses and service flows
• Generate performance reports and analytics
• Improve service quality

Important: DisparaChat is in compliance with Meta Platform's Terms of Service and WhatsApp Business API Usage Policies.

10. Prohibitions and Commitments

In compliance with Meta's policies and data protection regulations, DisparaChat expressly declares that:

Data Sale Prohibition:

DisparaChat DOES NOT sell, rent, or trade personal data of users or their contacts to third parties under any circumstances.

Surveillance and Eligibility Analysis Prohibition:

DisparaChat DOES NOT use collected data for:

• Surveillance of users or their contacts
• Behavioral monitoring for credit, insurance, or employment eligibility
• Creation of discriminatory profiles
• Unauthorized location tracking
• Any form of invasive or discriminatory use

Legitimate Use:

All data is used exclusively for providing contracted services, improving the platform, and fulfilling legal obligations.

11. Regulatory Compliance

The organization is in compliance with LGPD (General Data Protection Law - Brazil), GDPR (General Data Protection Regulation - European Union), and Meta's Platform Terms.

12. International Data Transfer

DisparaChat uses infrastructure services (cloud computing) and artificial intelligence (OpenAI, Anthropic, Google) located primarily in the United States.

By using our services, you acknowledge and agree that your data may be transferred and processed outside your country of residence. To ensure the security of these transfers, we require our suppliers to comply with:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• EU-US Data Privacy Framework (DPF)
• Security measures equivalent to those required by LGPD and GDPR

13. Pricing and Refund Policy

Details about plans, features, and pricing are available on our Pricing Page.

14. Data Controller

15. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember your preferences, and measure the effectiveness of our campaigns.

Essential cookies

Required for the site's basic operation, such as storing your chosen language and your own cookie decision. They cannot be disabled and do not feed advertising.

Meta Pixel (Facebook and Instagram)

Only with your consent do we load the Meta Pixel, a Meta Platforms tool that lets us measure the results of our ads and present more relevant content across Meta's platforms.

Data sent to Meta while the Pixel is active:

• Pages visited on this site and the time of access
• IP address, browser type, operating system, and screen resolution
• Relevant interactions, such as starting a signup or contacting support
• Cookie identifiers assigned by Meta
• Public content shown on the page, such as the title, button labels, and plan prices, when Meta's automatic event detection is enabled

How to control this

The Pixel is only activated if you choose Accept all in the cookie notice. If you choose Essentials only, no data is sent to Meta — the script stays loaded but blocked, transmitting nothing. To revisit your decision, clear this site's data in your browser: the notice will appear again on your next visit. In addition, whenever we begin using cookies for a new purpose, the notice reappears automatically so you can decide again — and tracking stays suspended until you make that new choice.

Meta acts as an independent controller of the data it receives through the Pixel. Its processing is governed by the Meta Platforms privacy policies.

16. Contact and Incident Reporting

General Contact:

Security Incident Reporting:

If you identify any security incident, data breach, or suspicious activity, contact us immediately:

• Security Email: [email protected]
• Subject: "URGENT - Security Incident"
• Response Time: Our team will respond within 24 business hours