1. Introduction
4Brand.ai ("we," "our" or the "Platform") is committed to protecting the privacy of all users. This Privacy Policy describes how we collect, use, store and share your personal information.
As an international technology company, we follow high data-protection standards, in line with Brazil's General Data Protection Law (LGPD), the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
By using our services, you agree to the collection and use of information as described in this policy. We do not collect data beyond what is necessary to provide our services.
2. Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Identification | Name, email, phone | Create and manage your account |
| Profile | Company, job title, industry | Personalize your experience |
| Usage | AI conversations, preferences | Provide AI services |
| Technical | IP address, browser, device | Security and optimization |
| Payment | Billing data (through a payment gateway) | Process transactions |
| Financial (Partnership) | Tax ID (CPF) and Pix key | Verify identity and pay rewards from the Partnership Program (when you take part) |
Important: We do not store full credit card data. All payments are processed by PCI-DSS certified gateways.
3. How We Use Your Data
- Provide services: operate the platform, process conversations with AI agents and deliver personalized results.
- Improve the experience: analyze usage patterns to improve features and the interface.
- Communication: send important notices, service updates and, with your consent, marketing materials.
- Security: detect and prevent fraud, abuse and unauthorized activity.
- Compliance: meet applicable legal and regulatory obligations.
Your conversations with AI agents are used solely to provide the service you requested. We do not sell or share the content of your conversations with third parties for marketing purposes.
4. Legal Basis for Processing
- Performance of a contract: processing needed to provide the services you signed up for.
- Consent: when you choose to receive marketing communications or turn on optional features.
- Legitimate interest: to improve our services, ensure security and prevent fraud.
- Legal obligation: when required by law or by competent authorities.
5. Sharing of Data
We may share your data in these situations:
- Payment processing: Stripe (credit card) and PJBank (Pix), to process charges and, where applicable, pay rewards from the Partnership Program.
- AI providers: Google (Gemini models) for text and image generation, and ElevenLabs for audio narration, both under confidentiality agreements, processing only what is needed to deliver the service you asked for.
- WhatsApp: if you connect an AI agent to WhatsApp, messages pass through our integration provider (UAZAPI) solely to run the customer service you configured.
- Hosting and analytics: hosting and analytics providers that help us operate, under data-protection contracts.
- Legal obligations: when required by law, court order, or to protect legal rights.
- Corporate transactions: in a merger, acquisition or sale of assets, with prior notice.
We never sell your personal data to third parties.
6. International Transfers
As a global platform, your data may be transferred to and processed in countries other than your own. We ensure adequate protection through:
- Standard contractual clauses approved by the European Commission.
- Internationally recognized privacy certifications and frameworks.
- Data processing agreements with all partners.
- Encryption of data in transit and at rest.
7. Data Security
- Encryption: TLS 1.3 for data in transit, AES-256 for stored data.
- Restricted access: least-privilege principle for employees and systems.
- Monitoring: intrusion detection and continuous access auditing.
- Backups: encrypted backups with controlled retention.
- Infrastructure: servers in ISO 27001 and SOC 2 certified data centers.
8. Data Retention
- Account data: while your account is active, plus 30 days after deletion for recovery.
- AI conversations: according to your retention settings (default: 12 months).
- Payment data: as required by tax and accounting rules (generally 5 years).
- Access logs: 6 months, for security purposes.
You can request early deletion of your data at any time, subject to legal retention obligations.
9. Your Rights
Under applicable law, you have the right to:
- Access a copy of the data we hold about you.
- Correction of inaccurate or outdated data.
- Deletion of your personal data ("right to be forgotten").
- Portability: receive your data in a structured, interoperable format.
- Objection to processing for marketing or legitimate-interest purposes.
- Restriction of processing in certain circumstances.
- Withdrawal of consent you previously gave.
To exercise your rights, contact support@4brand.ai or use your account settings.
10. Cookies and Similar Technologies
We use cookies and similar technologies for:
- Essential cookies: required for the basic operation of the platform.
- Preference cookies: remember your settings and preferences.
- Analytics cookies: understand how you use our platform (pages visited and where the visit came from), through Google Analytics 4 with Google Consent Mode. This audience measurement is on by default, is not used for advertising, and you can turn it off at any time (see below).
- Marketing cookies: measure the results of our ads, through the Meta Pixel and Google ad signals, only after you choose "Accept all" in the cookie notice.
You can manage your cookie preferences through the consent banner or your browser settings. If you choose "Essential only," no Google Analytics or Meta cookie is stored in your browser and nothing is sent to Meta; Google Analytics receives only basic visit signals, with no cookies and no identifier of yours, used in aggregate.
Audience measurement and legal basis. Audience measurement (Google Analytics) relies on 4Brand's legitimate interest (LGPD art. 7, IX) in understanding how many people visit the site, which pages they view and where they came from, in order to improve content and outreach. It is on by default, used only in aggregate, not used for advertising and not combined with your account data. You can object at any time by choosing "Essential only" in the cookie notice or using the button below; your choice is saved in this browser. Ad measurement (Google Ads and the Meta Pixel) depends on your consent, given by choosing "Accept all."
11. Minors
4Brand.ai is intended for users who are 18 or older, or who have the legal capacity to enter into contracts. We do not knowingly collect data from minors.
If we learn that we collected data from minors without consent from their guardians, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will communicate significant changes through:
- Email notice to registered users.
- A prominent notice on the platform.
- An updated effective date on this page.
We recommend reviewing this policy regularly. Continued use after changes means you accept the updated version.
13. Data Protection Officer (DPO)
We have appointed a Data Protection Officer to oversee compliance with this policy and applicable laws.
DPO contact: email support@4brand.ai · subject: "Data Subject Request"
Questions about privacy? Our privacy team is available to answer any question about your data: support@4brand.ai