1. Introduction
4Brand.ai ("we," "our" or the "Platform") is committed to protecting the privacy of all users. This Privacy Policy describes how we collect, use, store and share your personal information.
We follow Brazil's General Data Protection Law (LGPD). Alignment with the EU General Data Protection Regulation (GDPR) is being implemented.
By using our services, you agree to the collection and use of information as described in this policy. We do not collect data beyond what is necessary to provide our services.
2. Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Identification | Name, email, phone | Create and manage your account |
| Profile | Company, job title, industry | Personalize your experience |
| Usage | AI conversations, preferences | Provide AI services |
| Home page chat (no account) | Messages you type, language, IP address stored only as a non-reversible code (hash) | Answer questions about 4Brand and invitations, and limit abuse |
| Technical | IP address, browser, device | Security and optimization |
| Payment | Billing data (through a payment gateway) | Process transactions |
| Financial (Partnership) | Tax ID (CPF) and Pix key | Verify identity and pay rewards from the Partnership Program (when you take part) |
Important: We do not store full credit card data. All payments are processed by PCI-DSS certified gateways.
3. How We Use Your Data
- Provide services: operate the platform, process conversations with AI agents and deliver personalized results.
- Improve the experience: analyze usage patterns to improve features and the interface.
- Communication: send important notices, service updates and, with your consent, marketing materials.
- Security: detect and prevent fraud, abuse and unauthorized activity.
- Initial language: use the approximate country of your IP address only to choose the language the site opens in on your first visit. We do not store your IP for this. IP Geolocation by DB-IP.
- Compliance: meet applicable legal and regulatory obligations.
- Home page chat: visitors without an account can ask questions in a chat answered by AI. The conversation is linked only to the browser session, with no account and no name. Please do not type personal or payment details in this chat.
Your conversations with AI agents are used solely to provide the service you requested. We do not sell or share the content of your conversations with third parties for marketing purposes.
4. Legal Basis for Processing
- Performance of a contract: processing needed to provide the services you signed up for.
- Consent: when you choose to receive marketing communications or turn on optional features.
- Legitimate interest: to improve our services, ensure security and prevent fraud.
- Legal obligation: when required by law or by competent authorities.
5. Sharing of Data
We may share your data in these situations:
- Payment processing: Stripe (credit card), Asaas (annual plan in installments) and PJBank (Pix), to process charges and, where applicable, pay rewards from the Partnership Program.
- AI providers: Anthropic (Claude models) and Google (Gemini models) for text generation and customer chat; Google and OpenAI for image generation and editing; and ElevenLabs for audio narration. All of them process only what is needed to deliver the service you asked for, under each provider's terms.
- WhatsApp: if you connect an AI agent to WhatsApp, messages pass through our integration provider (UAZAPI) solely to run the customer service you configured.
- Hosting and analytics: hosting and analytics providers that help us operate, under each provider's data protection terms.
- Legal obligations: when required by law, court order, or to protect legal rights.
- Corporate transactions: in a merger, acquisition or sale of assets, with prior notice.
We never sell your personal data to third parties.
6. International Transfers
Some providers process data outside Brazil (for example, our AI providers and card processor, in the United States). We rely on each provider's data protection terms and encrypt connections in transit. Documentation of transfer safeguards for each provider, including standard contractual clauses where applicable, is being implemented.
7. Data Security
- Encryption: TLS 1.2 or higher on all connections to the platform. Encryption of stored data and backups: being implemented.
- Restricted access: least-privilege principle for employees and systems.
- Monitoring: access logs and automatic failure alerts.
- Backups: daily database backups, with restricted access and 30-day retention.
- Infrastructure: servers at professional hosting providers, with restricted administrative access.
8. Data Retention
- Account data: kept while your account is active.
- WhatsApp agent conversations: automatically anonymized after 12 months.
- Conversations with the platform's specialists: kept while your account is active, as your work history.
- Chat conversations with the 4Brand team (website editor, videos and home page): automatically anonymized after 12 months. You may request deletion earlier.
- Home page chat (visitors without an account): message text is deleted automatically after 30 days.
- Payment data: as required by tax and accounting rules (generally 5 years).
- Access logs: 6 months, for security purposes.
You may request deletion at any time through the e-mail below (section 13), subject to legal retention obligations (for example, payment records).
9. Your Rights
Under applicable law, you have the right to:
- Access a copy of the data we hold about you.
- Correction of inaccurate or outdated data.
- Deletion of your personal data ("right to be forgotten").
- Portability: receive your data in a structured, interoperable format.
- Objection to processing for marketing or legitimate-interest purposes.
- Restriction of processing in certain circumstances.
- Withdrawal of consent you previously gave.
To exercise your rights, contact support@4brand.ai or use your account settings.
10. Cookies and Similar Technologies
We use cookies and similar technologies for:
- Essential cookies: required for the basic operation of the platform.
- Preference cookies: remember your settings and preferences.
- Analytics cookies: understand how you use our platform (pages visited and where the visit came from), through Google Analytics 4 with Google Consent Mode. This audience measurement is on by default, is not used for advertising, and you can turn it off at any time (see below).
- Marketing cookies: measure the results of our ads, through the Meta Pixel and Google ad signals, only after you choose "Accept all" in the cookie notice.
You can manage your cookie preferences through the consent banner or your browser settings. If you choose "Essentials only," no Google Analytics or Meta cookie is stored in your browser and nothing is sent to Meta; Google Analytics receives only basic visit signals, with no cookies and no identifier of yours, used in aggregate.
Audience measurement and legal basis. Audience measurement (Google Analytics) relies on 4Brand's legitimate interest (LGPD art. 7, IX) in understanding how many people visit the site, which pages they view and where they came from, in order to improve content and outreach. It is on by default, used only in aggregate, not used for advertising and not combined with your account data. You can object at any time by choosing "Essentials only" in the cookie notice or using the button below; your choice is saved in this browser. Ad measurement (Google Ads and the Meta Pixel) depends on your consent, given by choosing "Accept all."
Cookie notice count. To improve our cookie notice, we count how many times it is shown and how many times people choose each option, per page and per day. The count is anonymous and aggregated: it stores nothing in your browser, uses no cookie, does not identify you and is not linked to your account. It runs whatever you choose, including "Essentials only", based on 4Brand's legitimate interest (LGPD art. 7, IX) in offering a clear notice.
11. Minors
4Brand.ai is intended for users who are 18 or older, or who have the legal capacity to enter into contracts. We do not knowingly collect data from minors.
If we learn that we collected data from minors without consent from their guardians, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will communicate significant changes through:
- Email notice to registered users.
- A prominent notice on the platform.
- An updated effective date on this page.
We recommend reviewing this policy regularly. Continued use after changes means you accept the updated version.
13. Data Protection Officer (DPO)
Data subject requests (access, correction, deletion, portability, objection) are handled at the e-mail below. The appointment of a Data Protection Officer is being implemented.
Contact: email support@4brand.ai · subject: "Data Subject Request"
Questions about privacy? Our privacy team is available to answer any question about your data: support@4brand.ai