Privacy Policy

• Account: name, email, company and job title, provided at sign-up.
• Workspace content: brands, competitors and prompts you set up for monitoring.
• Payment: billing details. Card data is processed directly by Stripe and never stored by us.
• Site and platform usage: pages visited, browser, device, IP address and access date and time, collected through cookies and analytics tools.

We do not collect sensitive data, government IDs or health data.

We use data to provide the contracted service, authenticate your access, bill your subscription, provide support, keep the platform secure, understand site usage in aggregate and, with your consent, send marketing communications. We do not sell personal data and we do not use customer data to train AI models.

When you connect First Answer to an AI assistant, you authorize access via OAuth and can revoke it at any time. The connector receives only the parameters of each request and returns only data from your workspace. We do not log the IP address or parameters of connector calls, and we do not access your conversation history with the assistant, which is governed by the assistant provider's privacy policy (for example, OpenAI's).

• Amazon Web Services (AWS): hosting and storage.
• Stripe: payment processing.
• Google Analytics and Google Search Console: site traffic and usage analytics.
• Public authorities: when required by law or court order.

Some of these providers process data outside Brazil, mainly in the United States, with the safeguards required by article 33 of the LGPD.

We follow our Data Retention Policy (FA-SEG-POL-002):

• Account and workspace data (registration, monitored prompts, collected responses, reports): for the contract term and up to 6 months after it ends, with export available during that period.
• Platform usage data (analytics): 24 months.
• Access and audit logs: 12 months.
• Application technical logs: 90 days.
• Backups: 35 days, on a rolling cycle.
• Contract and tax records: 5 years after the contract ends.

After that, data is deleted or anonymized.

You can access, correct, export or delete your data, learn who we share it with, withdraw consent, disconnect the MCP connector and file a complaint with Brazil's data protection authority (ANPD). To exercise any of these rights, email [email protected].

Data Protection Officer (DPO): Rodrigo Beckmann, [email protected]. We may update this policy; material changes will be announced by email or in the platform.