Privacy Policy

1. Who we are

ZexIA Inteligência builds custom software, AI agents and automations for businesses. This policy explains how we handle personal data on our websites and contact channels and in our diagnostics, business proposals, projects and digital integrations.

2. Data we may collect

We may collect data you give us directly, such as your name, email, phone number, company, job title, messages you send through forms, WhatsApp or email, and the information we need to assess a technical or business request. We may also collect technical browsing data, such as the pages you visit, traffic source, interaction events, device, browser and approximate IP address.

3. How we use data

We use data to respond to inquiries, prepare proposals, perform contracts, provide support, improve our websites, measure campaigns, analyze how our content performs and keep our operations secure. In client projects, the data we process depends on the scope agreed with the client.

4. Analytics, tags and pixels

Navigation analytics and marketing tags stay off until you allow them under Privacy in the footer. After that choice, Google Tag Manager and its configured services may measure pages and interactions. Contact clicks indicate intent, not a sale or a delivered message. Conversation content and form fields are not sent to those tags.

Commercial-interest events may trigger internal email alerts. Consented navigation events may appear in a digest without messages, audio or transcripts. A submitted contact form triggers an operational notification so our team can respond, independently of your analytics choice.

5. Cookies and similar technologies

Forms and demos do not require analytics consent. Your choice is saved in this browser and can be changed under Privacy in the footer. Withdrawing permission reloads the page to stop tags already loaded. We also respect Do Not Track and Global Privacy Control. Previously stored vendor cookies can be removed in your browser settings.

6. Data sharing

We do not sell personal data. We may share data with vendors we need to run our operations, such as hosting, analytics, marketing, communication, automation and infrastructure providers. We may also share data when required by law or regulation, or when needed to protect the rights of ZexIA, our clients or third parties.

7. Security and retention

We apply technical and administrative safeguards suited to the risk of the data we process, including access control, separation of credentials and sound infrastructure practices. We keep data for as long as needed to fulfill the purposes described here, meet legal obligations, support audits, defend our rights and keep our operations running.

8. Your rights

Under the LGPD (Brazil’s General Data Protection Law), you may request confirmation that we process your data, access, correction, deletion, portability, information about who we share it with and, where applicable, review of automated decisions. To exercise your rights, contact us at the email address listed in this policy.

9. Client projects

When ZexIA works on client projects, whether it acts as controller or processor may vary depending on the contract and the purpose of the processing. Data, integrations, webhooks, automations and AI models must follow the approved scope, the applicable legal bases and the client’s policies.

10. Website demos (chat and voice)

The site offers two optional demos of an AI agent: a text conversation (chat) and a voice conversation. You do not need either one to use the site.

In the chat, the messages you type are sent to OpenRouter, which forwards them to a language model provider to generate the reply. We ask that each request use only providers that neither store the content nor use it to train models.

For the voice conversation, your browser asks for microphone access only after you consent. The audio goes straight from your browser to OpenAI, which transcribes your speech and generates the replies, and it never passes through ZexIA’s servers. The interface uses a 180-second deadline from opening, and you can leave at any time. Voice is only available with server supervision, which keeps a durable record of the deadline and asks OpenAI to end the call independently of the browser. This check runs periodically and allows for processing time: connection or service failures can delay termination, so this is not an exact cutoff at 180 seconds. New calls are blocked when supervision is unavailable. For this control, we store technical call identifiers and pseudonymous identifiers, without audio or transcripts; these records are deleted after 7 days from confirmed termination, while unresolved records are retained until investigated.

ZexIA does not record the messages, the audio, the transcripts or the CRM record shown during the demo. The site’s technical logs keep only data such as the time, the request outcome, the model used and the number of tokens, without the content of the conversation. To limit abuse, we use a pseudonymous identifier derived from your IP address (never the IP itself), which is deleted within 7 days. When it is enabled, the Cloudflare Turnstile bot check also receives a token from your browser.

Processing by OpenRouter, the model providers and OpenAI is governed by those services’ own policies. Do not share personal or confidential data in the demos.

11. Contact

For privacy questions, data subject requests or anything related to the LGPD, contact us at contato@zexia.ai.