Privacy policy

Account data: name, email, password (stored encrypted), phone when provided and language, for you and the people on your team.

Company data, when you provide it: legal name, CNPJ and address, used for billing and issuing tax documents.

Payment data: payments are processed by Stripe (card) or Banco Inter (Pix and boleto). We do not store the full card number; we only receive the confirmation and summary data, such as brand and last digits.

Customer service content: messages, audio, photos, videos and documents exchanged through the connected WhatsApp, plus CRM contacts, tags, notes, tasks and deals.

Pixel data, when you install it on your website: visit source, campaign, pages visited and purchases, tied to the contact when they message you on WhatsApp.

Usage and technical data: access logs (IP, date and time), browser and actions taken in the panel.

Providing the service: receiving and sending messages, organizing customer service, running the chatbot, generating AI suggestions and summaries and showing where contacts came from (performance of contract).

Billing subscriptions, issuing tax documents and meeting legal and regulatory obligations.

Keeping the site secure and preventing fraud and abuse, such as sending spam (legitimate interest).

Sending account communications, such as confirmations, billing notices and changes to the terms. Marketing communications only with your consent, which you can withdraw at any time.

For the data of contacts who talk to your company and of website visitors measured by the pixel, your company is the controller and IntegraWhats is the processor. We process that data only to provide the service, following your instructions.

Your company must have a legal basis for that processing, such as the contact’s consent, disclose the use of the pixel in your own website’s cookie notice and respond to data subjects’ requests. If one of your contacts reaches out to us, we will forward the request to your company.

Messages, files and contacts are kept in private storage, separated per company. Only people on your team can access them, according to each one’s role. We do not publish your customer service content or share it beyond the providers listed in this policy.

We only share data with providers that need it for the service to work, always limited to what is necessary:

Technical provider of the WhatsApp connection: carries messages between the connected number and the panel.

Anthropic (United States): receives the part of the conversation needed for the AI copilot to suggest replies, summarize or flag objections.

Stripe: processes card payments. Banco Inter (Brazil): processes Pix and boleto.

Amazon Web Services: sending system emails.

The AI provider does not receive your registration or payment data. We may also share data when required by law or by an order from a competent authority. We do not sell personal data.

Some providers are located outside Brazil, mainly in the United States. In these cases, the transfer is made to perform the contract with you and with contractual data protection safeguards, under article 33 of the LGPD.

We keep the data while your account exists. You can request deletion of your account and data, including conversations and contacts, at contato@integrawhats.app.

After deletion, we remove the data and files, except what the law requires us to keep: tax and financial records for the legal period and access logs for at least 6 months (Brazilian Internet Civil Framework). Backups are overwritten on regular cycles.

We use encrypted connections (HTTPS), hashed passwords, private storage for files, data separation per company, role-based access control and encrypted integration keys.

No system is infallible. If a security incident with relevant risk occurs, we will notify the ANPD and the affected people, as required by law.

On the IntegraWhats site, we use essential cookies for the site to work: session, request forgery protection, language and display preferences. They do not require consent.

With your permission in the cookie notice, we also use visit and campaign measurement tools. Without permission, they are not loaded. You can change your choice at any time through the cookies link in the footer.

The pixel you install on your own website follows your website’s consent rules, which are your company’s responsibility.

Under article 18 of the LGPD, you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about who we share it with, information about the possibility of not consenting and withdrawal of consent.

Requests are made at contato@integrawhats.app. We may ask for confirmation to make sure it is you. We respond within 15 days. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

The officer in charge of personal data processing can be reached at contato@integrawhats.app.

This policy may be updated. The date of the last revision appears at the top of the page, and relevant changes are announced by email or on the site.