Privacy Policy

Integra Consultoria e Tecnologia LTDA, registered under CNPJ 63.158.412/0001-74 ("we", "our", or "company"), is committed to protecting the privacy of users of our AI-powered telephone answering platform. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with Brazil's General Data Protection Law (LGPD - Law No. 13,709/2018).

1. Data We Collect

1.1 Data provided by you

• Full name and contact information (email, phone number)
• Business identification data (CNPJ, company name)
• Payment information (securely processed via Stripe)
• Conversation content and call recordings for AI training
• Documents and knowledge bases uploaded to the platform

1.2 Data collected automatically

• IP address and device information
• Platform usage data (logs, call metrics)
• Cookies and similar technologies (see our Cookie Policy)
• Approximate geolocation data

2. Purposes of Data Processing

We use your personal data for:

• Service delivery: To provide and operate our AI voice agent platform
• Continuous improvement: To enhance user experience and the quality of our services
• Communication: To send notifications, updates, and technical support
• Billing: To process payments and manage subscriptions
• Security: To detect and prevent fraud and malicious activity
• Legal obligations: To comply with regulatory and legal requirements

3. Legal Basis (LGPD)

Personal data processing is carried out based on the following legal grounds under Brazil's LGPD:

• Contract performance: To provide the contracted services
• Consent: For the use of recordings in AI training
• Legitimate interest: For service improvement and security
• Legal obligation: To comply with regulatory requirements

4. Data Sharing

We may share your data with:

• Infrastructure providers: Google Cloud Platform (our cloud provider)
• Payment processors: Stripe for financial transactions
• AI providers: Language and voice models for call processing
• Telephony providers: Twilio for SIP connections
• Google Calendar: When authorized by the user via OAuth 2.0, we access Google Calendar event data (titles, times, and attendees) to check availability and schedule meetings. Calendar data is accessed only in real-time during calls and is not stored on our servers. Access tokens are encrypted with AES-256-GCM. Users can revoke access at any time in their organization settings.
• Authorities: When required by law or court order

All our partners are subject to data protection agreements and operate in compliance with Brazil's LGPD and equivalent international regulations. Our use of Google Calendar data complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data to third parties. Data obtained via Google APIs is not used for targeted advertising, data brokerage, credit assessment, AI model training, or any purpose unrelated to the application's functionality.

5. Data Security

We implement robust technical and organizational measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Infrastructure in certified data centers (Google Cloud)
• Role-based access control (RBAC)
• Continuous monitoring and intrusion detection
• Regular backups and disaster recovery plan
• Periodic security audits

6. Your Rights (LGPD)

As a data subject, you have the following rights guaranteed by Brazil's LGPD:

• Access: Request a copy of your personal data
• Correction: Correct incomplete or outdated data
• Deletion: Request the deletion of unnecessary data
• Portability: Receive your data in a structured format
• Revocation: Withdraw consent at any time
• Information: Know with whom your data is shared
• Objection: Object to processing based on legitimate interest

To exercise your rights, please contact us at: contato@useintegra.com.br

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, including:

• Account data: While the account is active + 5 years after closure
• Call recordings: 90 days or as configured by the client
• System logs: 12 months for security purposes
• Tax data: 5 years as required by tax legislation

8. International Transfer

Your data may be processed on servers located outside Brazil (primarily in the United States, where our AI and cloud providers are based). We ensure that such transfers are carried out with adequate safeguards, including standard contractual clauses approved by the ANPD (Brazil's National Data Protection Authority).

9. Data of Minors

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through your registered email or a notice on the platform. We recommend reviewing this page regularly.

11. Contact

For questions about this policy or about the processing of your data: