Privacy Notice

Updated on September 30, 2026

What we do with your information

We have done our best to explain clearly and simply which personal data we will need from you and what we will do with each of them. That's why we've set out the most important points below, which can also be read in full detail in our Privacy Notice.

We are also always available to answer any questions you may have through the website https://persint.ai, by phone at +55 11 95502-3610, and by email at contato@persint.ai.

For matters specifically about Users' personal data, we have a dedicated channel: privacidade@persint.ai.

Who is responsible for data processing?

We are the controller of the processing of personal data relating to our clients. That is, once the contracting company chooses to use our services, and for the ongoing delivery of analysis, follow-up and development of the contracted solution, we will request some information and make decisions in order to provide our service in the best and safest way possible.

We are the processor of personal data of third parties entered into our solutions by the contracting company. That is, we process data based on the decisions of our clients, who are the controllers.

The User is fully responsible for determining the purposes of the data that will be processed within the scope of our services, for defining the most appropriate legal bases for such processing, and for informing data subjects in advance that their data will be shared with Persint. The User must not share any data or information with Persint without the knowledge and/or specific consent (where applicable) of the data subject and/or their legal representative. Likewise, the User will be responsible for requesting or managing the deletion of personal data shared with us while the contract is active, and must respond directly to data subjects' requests, with Persint following the User's documented instructions.

In addition, there are some processors and/or sub-processors engaged by Persint who may process personal data, such as legal advisors, developers, technology partners and server providers, among others. Sub-processors may only access Users' personal data to enable the part of Persint's solution they provide, following the same rules set out here.

How will we keep your data secure?

Persint cares deeply about the security of your personal data. That's why it implements the measures recommended by Brazil's National Data Protection Authority (ANPD) in its Guidance for Small Processing Agents, which includes a variety of security technologies and procedures to help protect your information, including but not limited to (i) encryption in transit; (ii) protection of stored data according to the provider's resources; (iii) least-privilege and role-based access control; (iv) secure authentication; (v) protected credential management; (vi) code review; (vii) version control; (viii) monitoring and audit logs; (ix) backups; and (x) incident response procedures.

What data do you need to give us to start Persint's service?

Persint is a digital environment through which we provide specialized services, combining human consulting and proprietary technology. The contracted services, specifics and rules for accessing the digital environment will be defined in the contract signed between the Parties.

The following information will be required to register for and use Persint's services:

To register the Contracting Company: corporate name, trade name, phone, email, billing address, billing details, full name and CPF number of the legal representative, and information about the sales operation needed to carry out the project, such as service channels, tools used, sales team structure and sales processes.

To register Administrator, Supervisor and Salesperson Users: full name, phone numbers, email, position or role, access profile and authentication credentials (login, hashed password and session token).

For what purposes do we use your personal data?

All of your data is processed for specific purposes and in accordance with the General Data Protection Law (LGPD). We may process this information to:

Provide our service;

Provide support and customer service;

Send communications about the account, support, billing and requested services;

Respond to requests about our services and products. We do not use email for marketing campaigns or newsletters.

To better understand what we do with the information, our Privacy Notice includes a table of personal data, legal bases and purposes.

Who do we share your personal data with?

We will share your data with third parties only where strictly necessary, in the cases mentioned in the Privacy Notice, with the lawful consent of the data subject, and by court order or legal requirement.

Will your access logs be collected?

When you enter our platform, we collect your access logs, that is, the set of information on the date, time and IP address of use of a given internet application from a given source logical port. This information will be kept by Persint, confidentially, in a controlled and secure environment, for a minimum of 6 (six) months, under Law No. 12,965/2014 and article 7, II, of Law No. 13,709/18.

Will personal data be collected indirectly?

In addition to access logs, we may also collect some information indirectly, as described in the Cookies and similar technologies section of this Notice.

Will communication records be stored?

We will also store the conversations you have with us through our communication channels, as this will improve the service you receive, make it more efficient and serve as evidence/proof of the service provided.

Messages may also be used by Persint to evaluate, improve and train artificial intelligence models. This use is distinct from the processing needed to respond to conversations. Where it involves personal data, it will observe the applicable legal basis and, when necessary, specific consent. For third-party data processed on behalf of the Contracting Company, Persint will follow the controller's documented instructions. When defining its own training purposes, Persint will act as the controller of that processing.

What are your rights?

Even if you have already provided us with your personal data, you have the full right to request from the controller, at any time: confirmation that your data is being processed; access to your data; correction of your data; anonymization of your data; blocking or deletion of unnecessary or excessive data or data processed in breach of the Law; portability of your data to another provider; deletion of your data, except data required by law; information about whom the controller has shared data with; information about the possibility of not giving consent and the consequences of refusing; and to change your mind and withdraw your consent.

Contents of the Privacy Notice

Date the text was made available
Explanation of technical or foreign-language terms
Processing agents
Information security
Data collection
Processing of personal data
Cancellation of the platform, access accounts and deletion of data
Rights of the personal data subject
Changes to the privacy notice
Privacy contact channel
Contact on general matters
Cookies and similar technologies

Privacy Notice

Before accessing the Persint platform, it is important that you read and understand this Privacy Notice. When a purpose requires consent, it will be requested in a specific, free and informed manner.

This platform, named Persint, is owned and maintained by PERSINT TECNOLOGIA LTDA., registered under CNPJ no. 68.674.262/0001-75, located at Avenida Brigadeiro Luís Antônio, nº 5083, Jardim Paulista, São Paulo/SP, CEP 01402-002, Brazil.

This document provides information on the collection, use and storage ("processing") of data provided by Users and complies with Law No. 12,965/2014 (Internet Civil Framework) and Law No. 13,709/18 (General Data Protection Law).

1. Date the text was made available

1.1. This document was drafted and made available on September 30, 2026.

2. Explanation of technical or foreign-language terms

2.1. The meanings of technical terms and English-language terms are set out below:

AI Agent / Workflow: a custom-built automated configuration that performs specific steps of customer service, triage or support for the client's sales operation.

API (Application Programming Interface): a programming interface that allows technical integration between the Platform and third-party systems (such as messaging channels, CRMs and data tools).

CRM (Customer Relationship Management): a customer relationship management system that the contracting company may already use, which the Platform can integrate with without replacing it.

Controller: a natural or legal person, under public or private law, responsible for decisions regarding the processing of personal data.

Cookies: small text files saved on the user's computer that can be retrieved by the website that sent them during browsing. They are mainly used to identify and store information about Users.

Encryption: a set of principles and techniques for encoding writing, making it unintelligible to those who do not have access to the agreed conventions.

Personal data: information relating to an identified or identifiable natural person.

Sensitive personal data: personal data on racial or ethnic origin, religious belief, political opinion, membership of a trade union or a religious, philosophical or political organization, data on health or sex life, and genetic or biometric data, when linked to a natural person.

Contracting Company: companies that contract Persint's services through an Agreement signed between the Parties.

Data Protection Officer: a person appointed by the controller and processor to act as a communication channel between the controller, data subjects and the National Data Protection Authority (ANPD).

Artificial Intelligence (AI): a set of technologies that enable automated processing of conversations, data and information to support business decisions and tasks, without replacing human decision-making.

IP (or Internet Protocol): a unique identifier for each computer connected to a network.

Processor: a natural or legal person, under public or private law, who processes personal data on behalf of the controller.

Lead: a potential sales contact, generated or recorded in the sales processes supported by the Platform.

Source logical port: the number complementing an IP address that identifies exactly which application or device initiated a network connection. Without it, multiple users sharing the same public IP appear identical, making it essential data for tracing the authorship of internet access.

Data processing: any operation carried out with personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

User(s): those who use Persint's services.

2.2. Types of platform Users:

2.2.1. Administrator User or Company Representative: a User profile with powers to manage the account, other Users, permissions, integrations, settings and billing.

2.2.2. Supervisor User: a User profile with an operational view, following authorized conversations, leads, opportunities and metrics.

2.2.3. Salesperson User: a User profile with access to the conversations and opportunities assigned to them, supported by AI in carrying out authorized sales activities.

2.2.4. These Users are collectively referred to simply as Users.

3. Processing agents

3.1. We are the controller of the processing of personal data relating to our clients. That is, once the contracting company chooses to use our services, and for the ongoing delivery of analysis, follow-up and development of the contracted solution, we will request some information and make decisions in order to provide our service in the best and safest way possible.

3.2. We are the processor of personal data of third parties entered into our solutions by the contracting company. That is, we process data based on the decisions of our clients, who are the controllers.

3.2.1. The User is fully responsible for determining the purposes of the data that will be processed within the scope of our services and for defining the most appropriate legal bases for such processing.

3.2.2. The User is fully responsible for informing data subjects in advance that their data will be shared with Persint, and must not share any data or information with us without the knowledge and/or specific consent (where applicable) of the data subject and/or their legal representative. Likewise, the User will be responsible for deleting the personal data they enter into the platform while the account is active and must respond directly to data subjects' requests, with Persint only following the User's instructions, where applicable and necessary.

3.2.3. In addition, the Contracting Company must establish data protection compliance processes, which include, but are not limited to, preparing the essential documents and processing data in accordance with the law, the rules published by the National Data Protection Authority (ANPD) and the rules relating to its activities.

3.2.4. Accordingly, the Parties undertake to respect and act in accordance with the duties imposed on processing agents by Law No. 13,709/2018, each being liable solely for its own actions, with the innocent Party having a right of recourse in cases of non-compliance and penalties, including judicial ones and those imposed by the ANPD.

3.3. Some sub-processors are necessary for the platform to provide certain features. They will therefore have access to Users' data for the following purposes:

3.3.1. OpenAI: processing content to provide artificial intelligence features.

3.3.2. Meta/WhatsApp and other communication providers: transmitting and processing messages and data from connected accounts.

3.3.3. Communication channel integration providers: authorized technical connection between channels and the Platform.

3.3.4. Google: processing data from connected services when authorized by the client.

3.3.5. Email delivery providers: sending messages about the account, support, billing and requested reports.

3.4. Our engagements always prioritize the secure processing of Users' information. Therefore, once these companies have access to this data, they become responsible for the security, processing and appropriate sharing of this information, and may not disclose it for other purposes, in breach of current legislation or this Privacy Notice, under penalty of being liable for all sanctions, especially civil and criminal ones and those imposed by the National Data Protection Authority.

3.5. International transfer: Personal data processed by Persint may be transferred to servers located outside Brazil, specifically in the United States, to ensure the proper provision of the services offered.

3.5.1. These transfers are carried out in compliance with Law No. 13,709/18 (LGPD) and ANPD Resolution CD/ANPD No. 19/2024, safeguarded by appropriate protection mechanisms for international data transfers, including the Standard Contractual Clauses approved by the ANPD. In addition, we adopt appropriate security measures whenever we carry out such transfers, ensuring compatible levels of protection for personal data.

4. Information security

4.1. Persint cares deeply about the security of your personal data. That's why it implements the measures recommended by the National Data Protection Authority (ANPD) in its Guidance for Small Processing Agents, which includes a variety of security technologies and procedures to help protect your information.

4.1.1. In addition, we have effective measures and controls to prevent or reduce Information Security risks, with an approach based on the field's Principles, in order to prevent, detect, respond to and quickly recover from a threat, protecting the confidentiality, integrity and availability of technology assets and information. Measures include, but are not limited to, (i) encryption in transit; (ii) protection of stored data according to the provider's resources; (iii) least-privilege and role-based access control; (iv) secure authentication; (v) protected credential management; (vi) code review; (vii) version control; (viii) monitoring and audit logs; (ix) backups; and (x) incident response procedures.

4.1.2. However, Users are also responsible for safeguarding the secrecy and confidentiality of their information. In this context, the User undertakes to hold Persint harmless from any liability for damages, losses and/or any consequences that may arise from access to or use of the information shared with Persint by third parties, whether authorized or not, when it is shown that such access did not occur through Persint's sole fault.

4.2. All access logs, the set of information on the date, time and IP address of use of a given internet application from a given source logical port, will be kept by Persint, confidentially, in a controlled and secure environment, for a minimum of 6 (six) months, under Law No. 12,965/2014 and article 7, II, of Law No. 13,709/18.

4.3. Persint is committed to preserving the stability, security and functionality of the platform through technical measures compatible with international standards and by encouraging good practices. However, no service available on the internet is fully guaranteed against illegal intrusions. Where unauthorized third parties unlawfully break into the system, Persint will make its best efforts to find those responsible for the unlawful act, but is not liable for the damage they cause.

5. Data collection

5.1. The following information will be required to register for and use Persint's services:

5.1.1. To register the Contracting Company: corporate name, trade name, phone, email, billing address, billing details, full name and CPF number of the legal representative, and information about the sales operation needed to carry out the project, such as service channels, tools used, sales team structure and sales processes.

5.1.2. To register Administrator, Supervisor and Salesperson Users: full name, phone numbers, email, position or role, access profile and authentication credentials (login, hashed password and session token).

5.2. Contact history: Persint stores information about all interactions with Users, through the platform or email, WhatsApp messages, chat or online support on the website and in the operating environment, as this will improve the service you receive, make it more efficient and serve as evidence/proof of the service provided.

5.2.1. Messages may also be used by Persint to evaluate, improve and train artificial intelligence models. This use is distinct from the processing needed to respond to conversations. Where it involves personal data, it will observe the applicable legal basis and, when necessary, specific consent. For third-party data processed on behalf of the Contracting Company, Persint will follow the controller's documented instructions. When defining its own training purposes, Persint will act as the controller of that processing.

5.3. Information we collect indirectly: in addition to access logs, we may also collect some information indirectly, through Cookies or other similar technologies, including IP address, browser type, device, pages visited, browsing time, access logs, usage events, integration metadata and technical security information, as described in the Cookies and similar technologies section of this Notice.

5.4. AI maturity assessment: we collect name, corporate email, company, phone and, when provided, position, industry, revenue range, team size, CRM used, previous initiatives, and the assessment's answers and results. This data is used to generate and provide the report, send it to the requester, handle the request and guide follow-up by Persint's authorized team.

5.5. Authorized integrations: we may process access and refresh tokens, account identifiers, permissions, URLs and connection settings needed to connect and maintain authorized channels and services. This integration data is distinct from the session token used to sign in to Persint.

6. Processing of personal data

6.1. The personal data below is processed for the purposes and on the legal bases indicated below. Processing necessary to perform the contract is distinct from other purposes, such as training AI models, which must observe the applicable legal basis and specific consent when necessary.

Type of personal data: User's first and last name
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Used to identify and verify the User. This is essential personal data so that we can contact the User to handle their requests and provide targeted answers.

Type of personal data: User's email / mobile phone
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Registration validation and login, communication about the account, support, billing and requested services. We do not use email for marketing campaigns or newsletters.

Type of personal data: Company data (corporate name, CNPJ, address)
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Formalizing the contract, and qualifying and identifying the Contracting Company.

Type of personal data: Legal representative's data - name, CPF, email
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Formalizing the contract, and qualifying and identifying the Contracting Company's legal representative.

Type of personal data: Position or role and assigned access profile
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Necessary to define the User's permission controls according to their profile (Administrator, Supervisor or Salesperson) and to organize the operation.

Type of personal data: Authentication credentials (login, hashed password and session token)
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Necessary to ensure secure authentication and access control to the Platform.

Type of personal data: Billing data, invoices and transfer receipts
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Issuing invoices (Nota Fiscal), identifying charges and reconciling payments. Payment is currently made exclusively by bank transfer.

Type of personal data: Conversation history
Legal basis: Necessary to serve the legitimate interests of the controller or a third party (Art. 7, IX, Law No. 13,709/2018).
Purpose: Creating a history about the User, making communication easier, resolving questions more effectively and improving the User's experience with the services provided by Persint.

Type of personal data: Access logs (IP - Internet Protocol - date, time and source logical port of access)
Legal basis: Compliance with a legal or regulatory obligation by the controller (Art. 7, II, Law No. 13,709/2018).
Purpose: Compliance with article 15 of Law No. 12,965/2014, which requires Persint to keep the respective internet application access logs, confidentially, in a controlled and secure environment, for 6 (six) months.

Type of personal data: Platform usage and connected device data, such as browser type, device, pages visited, browsing time, access logs, usage events, integration metadata and technical security information.
Legal basis: Necessary to serve the legitimate interests of the controller or a third party (Art. 7, IX, Law No. 13,709/2018).
Purpose: Used for internal metrics to monitor and analyze trends, usage and activities, and to detect, prevent and address technical and security issues.

Type of personal data: Data that may be shared by the User (name, phone, email of the Contracting Company's end user or lead, messages, audio, transcriptions, interactions, opportunity data, calendar, catalog and other content the Contracting Company authorizes).
Legal basis: In this case, Persint is the Processor of the data and the legal bases must be defined by the Controller.
Purpose: In this case, Persint is the Processor of the data and the purposes for which it will be used must be defined by the Controller.

Type of personal data: AI maturity assessment (contact details, operation information, answers and results)
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Generating and providing the assessment and its report, sending it to the requester and following up on the requested service.

Type of personal data: Credentials and metadata of authorized integrations
Legal basis: Necessary for the performance of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).
Purpose: Connecting and maintaining authorized communication channels and services, according to the permissions granted by the client.

Type of personal data: Message content used to evaluate, improve and train AI models
Legal basis: The legal basis applicable to the purpose and to Persint's role in the processing, including specific consent when necessary; for data processed as a processor, according to the controller's documented instructions.
Purpose: Messages may also be used by Persint to evaluate, improve and train artificial intelligence models. This use is distinct from the processing needed to respond to conversations. Where it involves personal data, it will observe the applicable legal basis and, when necessary, specific consent. For third-party data processed on behalf of the Contracting Company, Persint will follow the controller's documented instructions. When defining its own training purposes, Persint will act as the controller of that processing.

7. Cancellation of the platform, access accounts and deletion of data

7.1. Cancellation of access accounts by Persint: Persint may, at its sole discretion, block, restrict, disable or prevent any User's access to the platform whenever inappropriate conduct is detected.

7.2. Cancellation of access accounts by the User: to cancel the services and request deletion of the access account, the User must send a request to contato@persint.ai.

7.2.1. As Persint is a provider of specialized services contracted through a commercial proposal and a specific contract signed with the Contracting Company, the conditions for cancellation, any penalty, minimum term, prior notice and refund of amounts relating to deployment already carried out will follow what was agreed in the respective proposal or contract.

7.3. When the purpose of the data processing has ended, or upon a deletion request sent to privacidade@persint.ai, the data will first be reviewed to check whether any legal or regulatory grounds authorize or require it to be kept. Once this review is complete, the data will be permanently and irreversibly deleted, except: (i) data that must be kept by law or applicable regulation; (ii) data necessary for the regular exercise of rights in judicial, administrative or arbitration proceedings; and (iii) access logs, which will be kept confidentially, in a controlled and secure environment, under Law No. 12,965/2014 — observing, in all cases, the legally required minimum retention period.

8. Rights of the personal data subject

8.1. The personal data subject has the right to obtain from the controller, regarding the data it processes, at any time and upon request:

8.1.1. Confirmation that data is being processed.

8.1.2. Access to the data.

8.1.3. Correction of incomplete, inaccurate or outdated data.

8.1.4. Anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of Law No. 13,709/2018.

8.1.5. Portability of the data to another service or product provider, upon express request, in accordance with the national authority's regulations, subject to commercial and industrial secrets.

8.1.6. Deletion of data processed with the data subject's consent, except in the cases provided for in Law No. 13,709/2018.

8.1.7. Information on the public and private entities with which the controller has shared data.

8.1.8. Information about the possibility of not giving consent and the consequences of refusing.

8.1.9. Withdrawal of consent.

8.2. If Persint receives a request from data subjects to exercise their rights, the Controller User will be responsible for responding directly to the data subject.

9. Changes to the privacy notice

9.1. Persint may unilaterally add and/or modify any clause contained in this Privacy Notice. The updated version will apply to use of the platform from its publication. Continued access to or use of the platform after publication will confirm Users' acceptance of the new Privacy Notice.

9.2. If the change requires the User's consent, they will be given the option to freely, unequivocally and knowingly accept or refuse the new text.

9.3. If the User does not agree with the change, they may withhold consent for specific acts or may fully terminate their relationship with Persint. However, such termination will not release the User from fulfilling all obligations assumed under previous versions of the Privacy Notice.

10. Privacy contact channel

10.1. Persint provides a dedicated channel for privacy and personal data protection matters, via email at privacidade@persint.ai.

10.2. Through this channel, data subjects, suppliers and authorities can send questions and requests about the processing of personal data and the exercise of rights.

10.3. If the communication concerns third-party data entered into the platform by the User, the User must provide their own communication channel for that purpose.

10.4. Persint has a specific text governing the license of use, rights, duties, warranties and general provisions: the Terms of Use. All of these documents are an inseparable part of this Privacy Notice.

11. Contact on general matters

11.1. Persint provides the following channels to receive any communications Users wish to make: the website https://persint.ai, phone +55 11 95502-3610, and email contato@persint.ai.

Cookies and similar technologies

We use cookies and similar technologies for authentication, security, conversation continuity, and language and appearance preferences. We also collect browsing and usage events to analyze how the website and platform are working.

These technologies may process session identifiers, IP address, browser and device type, pages visited and interaction events. Conversation history and assessment data are processed for the purposes described in clauses 5 and 6.

You can manage cookies and local storage in your browser settings. Deleting or blocking necessary features may require you to sign in again or affect preferences and the continuity of service.

For the full list, categories, responsible entities and retention periods of cookies, see our Cookie Policy.

Acknowledging this Notice does not replace specific consent when it is required for a given purpose.