Privacy notice

Who is responsible

Appfy.ai (CNPJ 62.608.663/0001-40) is the controller of your personal data: the company that decides how it is used. The contact for any privacy question or request is Appfy's founder, Alexsandro Freitas, at info@appfy.ai.

Appfy's team is one founder and five AI employees working under his direction. Zoe, who answers in the chat, is one of the AI employees: an AI, not a person.

What this notice covers

This notice covers this site: the qualification form, the scheduling of the free conversation, the link to WhatsApp and the chat with Zoe. It does not cover WhatsApp itself or other sites you reach from here.

What we collect

• Your contact details: name, work email and WhatsApp number with country code.
• Your answers in the form: for example, company name and site, your role, what the company does, size and revenue ranges, what you are looking for, your goal, the timing, the budget range and who else takes part in the decision.
• Answers are saved step by step after you accept this notice. If you stop before the end, we keep what you have already answered.
• The record of your consent: which version of this notice you accepted, and when.
• Scheduling: the time you choose, or the days and periods you prefer, and any note you add.
• Technical data: a salted hash of your IP address (a one-way code; we don't store the address itself), the page and language you used and, when present, the address of the page that sent you here and the campaign tags in the link (UTM).
• The chat with Zoe: the messages you send and her replies, linked to a random session code that your browser keeps only while the tab is open, and to your form if you have started it.

We don't ask for sensitive personal data (such as health, religion, political opinion or biometrics), documents, passwords or your customers' data. Please don't write them in the form's open fields or in the chat.

Why we use it

• To prepare and hold the free conversation you asked for, including its scheduling.
• To contact you about this request, by email or WhatsApp.
• If you stop the form before the end: to send at most one helpful reminder, and only if you agreed to it. If you say no, we stop on every channel.
• To answer your questions in the chat.
• To keep the site secure and prevent abuse, for example by limiting repeated messages.

We don't use your data for advertising, and we don't build marketing profiles from it.

Legal bases under the LGPD

• Your consent (LGPD, art. 7, I), given before the form saves anything. You can withdraw it at any time; withdrawing doesn't affect what was done before.
• Procedures before a possible contract, at your request (LGPD, art. 7, V): preparing and holding the conversation and the scheduling you asked for, and answering your questions in the chat.
• Our legitimate interest in keeping the site secure (LGPD, art. 7, IX), only for the salted IP hash used to limit abuse.

How long we keep it

• If the request doesn't become a project: up to 12 months after your last activity. Then we delete or anonymize it.
• Chat messages: 30 days.
• The session code in your browser: until you close the tab.
• If the request becomes a project, the data the contract needs follows the contract and the law.
• The consent record: for as long as we need to show that consent was given.

Who processes it with us

• Amazon Web Services (AWS), in the us-east-1 region, in the United States: hosting of the site, the database and the functions that receive the form and the chat.
• Amazon Bedrock, an AWS service: runs the AI model that writes Zoe's replies from your chat messages.
• When online scheduling is turned on, Google Calendar (Google) receives the meeting time and the details needed for the invitation.

Your data is therefore stored and processed in the United States. We share it with no one else, except when the law or an authority requires it.

If you choose to continue on WhatsApp, you send the message yourself, and WhatsApp handles it under its own terms.

What we don't do

• We don't sell or rent your data.
• These pages have no advertising trackers, analytics cookies or third-party pixels.
• The chat makes no decisions about you. Any decision about a proposal is made by a person: the founder.

Your rights

Under article 18 of the LGPD, you can ask us at any time for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data that is unnecessary, excessive or processed against the LGPD;
• portability of your data to another provider;
• deletion of the data processed with your consent;
• information about whom we share your data with;
• information about the possibility of not consenting, and what happens if you don't;
• withdrawal of your consent.

You can also object to processing that doesn't comply with the LGPD, and ask for a review of decisions made only by automated means.

How to ask: write to info@appfy.ai from the email you used, saying what you need. A person handles every request. We may ask you to confirm your identity before acting. We reply as soon as possible, within 15 days. You can also complain to the ANPD, Brazil's National Data Protection Authority.

If you don't consent, the form doesn't start and nothing from it is saved. You can still read the site and use the chat.

Security

Connections to this site are encrypted (HTTPS), and only authorized people can open the records of requests.

Children and adolescents

This site is meant for companies and the people who represent them. It is not directed at children or adolescents.

Changes to this notice

When this notice changes, we update the version and the date at the top. If the purpose of use changes, we ask for your consent again before using your data for it.