LegalEN

Privacy Policy

How we handle personal data in the NixZap platform.

Portuguese (BR)
Document summary

Effective date

Effective date: August 15, 2026

Last updated

Last updated: August 15, 2026

This Policy explains how NixZap collects, uses, shares, stores, and protects personal data.

It applies to our website, apps, and platform, including the official WhatsApp Business Platform integration and automation and artificial intelligence features.

01

Who we are and how to contact us

NixZap is operated by Nixcenter Servicos e Comercio Digital LTDA (CNPJ 47.628.765/0001-34).

Our channel for privacy and data-subject rights is contato@nixzap.com.br.

The platform is designed for business use, but individuals may subscribe.

02

Controller and processor

NixZap acts as controller for data needed to administer accounts, contracts, billing, security, support, and its own operations.

For messages, contacts, lists, and other data entered or connected by a customer, the customer normally acts as controller and NixZap acts as processor under documented instructions and the contract.

Customers are responsible for informing their own data subjects, defining an applicable legal basis, and securing all required rights, consents, and opt-ins for WhatsApp communications.

04

Data we collect

We collect only what is needed to operate the platform.

  • Account data: name, email, phone, company, workspace, and authentication identifiers.
  • Usage and security: access and audit logs, settings, IP address, device, session events, and support records.
  • WhatsApp business account data: business portfolio, WhatsApp Business Account (WABA), business profile, connected numbers, phone number ID, templates, permissions, and integration status.
  • WhatsApp contacts and users: phone number, identifiers supplied by WhatsApp, available name or profile data, and consent or preference records maintained by the customer.
  • Communications: message and media content, sender and recipient, timestamps, templates, replies, sent, delivered, read, or failed status, and webhook events.
  • Billing data: plan, invoices, and payment history, when applicable.
05

How we use data

We use data to deliver the service, keep it secure, and improve the product.

  • Create and maintain your account and access.
  • Connect and administer authorized WhatsApp Business Platform accounts, numbers, and templates.
  • Send, receive, route, and record messages and their status, and run customer-configured automation and AI agents.
  • Customer support and service communications.
  • Prevent fraud, abuse, spam, and security incidents.
  • Measure usage, bill customers, diagnose issues, and improve service reliability.
  • Meet legal and regulatory obligations and exercise legal rights.
  • Send product or marketing communications when allowed, with an opt-out.
06

Automation and AI agents

Some features use AI to suggest replies or automate workflows.

You are responsible for the content you submit and the contacts you use.

Avoid submitting sensitive or confidential data in conversations.

07

Sharing with third parties

We share data only as needed to operate the platform, follow customer instructions, and meet legal obligations.

Recipients may include Meta Platforms and WhatsApp to provide the WhatsApp Business Platform; Supabase and other cloud, database, storage, and media-delivery providers; AI providers when customers enable those features; and payment, support, communications, and security providers.

These third parties process data under their applicable terms or agreements. We may also share data during a corporate reorganization or when required by law, court order, or competent authority.

08

Storage and location

Our primary database is hosted in Brazil via Supabase.

Meta, WhatsApp, and other providers may process data in countries where they or their service providers operate. We use contracts, safeguards, and international-transfer mechanisms required by applicable law.

09

Security

We apply technical and organizational measures to protect personal data.

No system is 100% secure, but we work to reduce risks.

10

Retention and deletion

We keep account and contract data while the relationship is active and afterward for the period needed for legal obligations, audits, fraud prevention, and the exercise of legal rights.

Messages, contacts, media, and operational metadata are retained according to customer settings, the contract, and customer instructions, plus limited technical periods needed for delivery, security, backups, and recovery.

When the applicable period ends or a valid request is completed, data is deleted or anonymized unless retention is required or permitted by law.

11

Your rights

You may request confirmation, access, correction, anonymization, restriction or deletion, portability, sharing information, review of automated decisions, and withdrawal of consent, as applicable.

To exercise your rights, use the public deletion instructions or contact contato@nixzap.com.br. When a NixZap customer controls the data, we may route or support the request through that controller.

12

Cookies and measurement technologies

We use cookies and local storage that are strictly necessary to operate the website and platform, maintain security, authenticate sessions, and save preferences.

With your consent, the institutional website and checkout also use non-essential technologies to measure audiences, identify campaign sources, and evaluate conversions. These technologies are managed through Google Tag Manager and may involve Google Analytics 4, Google Ads, Meta, TikTok, LinkedIn, and OpenAI Ads.

At checkout, and only after your consent, your normalized email may be converted to a SHA-256 hash and sent exclusively to OpenAI Ads for conversion matching. We do not send plaintext email, phone number, CPF, name, address, or payment-card data. The hash is pseudonymized data and remains protected under applicable law.

You may accept, reject, or change your preferences at any time. Refusal or withdrawal prevents new non-essential measurement and does not block browsing or checkout completion. Strictly necessary cookies remain active.

13

Children and minors

NixZap is not intended for minors under 18 without legal representation.

If we identify improperly collected data from minors, we may delete it.

14

Changes to this policy

We may update this Privacy Policy from time to time.

The current version will always be available on this page.

15

Contact and legal information

Legal name: Nixcenter Servicos e Comercio Digital LTDA.

CNPJ: 47.628.765/0001-34.

Address: Av. Paulista, 1765, 7º andar, Conj. 72, Bela Vista, São Paulo/SP, CEP 01311-930, Brasil.

Contact: contato@nixzap.com.br | (11) 91087-7345.