Privacy Policy

Sapiens Technology LTDA

1. Controller and Scope

Sapiens Technology LTDA is the Controller of the personal data processed through the Sapiens Chat and Sapiens API platforms, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018). This Policy explains what personal data we collect, why we process it, for how long, and how you can exercise your rights as a data subject.

2. Personal Data We Collect

We process the following categories of personal data:

  • Registration data: name, e-mail address, and authentication credentials, including data received from social login providers when you choose to sign in with them.
  • Conversation content: the messages, files, and repositories you submit to the platform in order to receive AI-generated responses.
  • Usage and technical data: access logs, IP address, device/browser information, and session cookies, collected for security, fraud prevention, and service reliability.
  • Billing data: subscription plan, transaction history, and payment status, processed on our behalf by payment service providers.

3. Purpose and Legal Basis for Processing (LGPD Art. 7)

We process personal data only for specific, legitimate purposes, based on the following legal bases:

  • Contract execution: to provide the chat and API services you requested, including account management and AI response generation.
  • Compliance with a legal obligation: to meet tax, accounting, and regulatory record-keeping requirements.
  • Legitimate interest: to ensure platform security, prevent fraud and abuse, and improve service reliability, always balanced against your fundamental rights and freedoms.
  • Consent: for optional communications, such as product updates, which you may withdraw at any time.

4. Your Rights as a Data Subject (LGPD Art. 18)

You have full control over your personal data and may exercise the following rights at any time:

  • Confirmation & Access: Confirm the existence of processing and access your stored personal data and chat conversations.
  • Correction: Update or correct incomplete, inaccurate, or outdated registration data.
  • Anonymization or Erasure: Request the anonymization, blocking, or deletion of unnecessary or excessive personal data.
  • Data Portability: Export your conversations and profile data in open, interoperable formats.
  • Information about Sharing: Request information about the public and private entities with which we share your data.
  • Revocation & Account Deletion: Revoke consent and delete your account directly via self-service at /user/profile/delete-account/ with irreversible PII scrubbing.

5. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy or to comply with legal obligations. When you delete your account through self-service, your personally identifiable information is irreversibly scrubbed, except for records we are legally required to retain (such as billing records), which are kept only for the mandatory retention period and then discarded.

6. Data Sharing

We do not sell personal data. Personal data may be shared only with service providers strictly necessary to operate the platform, such as cloud hosting and payment processing providers, under contracts that require confidentiality and compliance with LGPD-equivalent data protection standards. Data may also be disclosed to public authorities when required by law or a valid court order.

7. Information Security

We adopt technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, and disclosure, including encryption in transit and at rest, access controls, and continuous monitoring of our infrastructure.

8. Contact the Data Protection Officer (DPO)

For any inquiries regarding personal data processing, rights requests, or security disclosures, please contact our Data Protection Officer at: privacidade@sapienstechnology.com.