Privacy Policy

1. Data Controller

Camile AI Tecnologia Ltda.
Rua Santa Cruz, 2187, Vila Mariana
São Paulo - SP, CEP 04121-002, Brasil
CNPJ: 46.526.609/0001-08
Email: privacy@camileai.com
For data protection inquiries, you may contact our Data Protection Officer at dpo@camileai.com.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your name, email address, company name, phone number, and billing information.
• Profile Information: Profile photo, job title, and preferences you choose to provide.
• Communications: Information you provide when contacting our support team, including correspondence and call recordings (with your consent where required).
• Content: Data, text, documents, images, or other content you upload or input into our platform for processing.

2.2 Information Collected Automatically

• Usage Data: Log data, IP address, browser type, operating system, pages visited, features used, API request details, and interaction patterns.
• Device Information: Device type, unique device identifiers, operating system version, and mobile network information.
• Cookies and Similar Technologies: Information collected via cookies, web beacons, and similar tracking technologies. Please see our Cookie Policy for details.

2.3 Information from Third Parties

• Authentication Providers: If you use SSO, we receive information from your identity provider (such as name and email address) as configured by your organization.
• Payment Processors: Payment information is processed by our payment processors. We do not store full payment card details.
• Integrations: Data from third-party services you connect to our platform (e.g., Slack, Zendesk) is processed in accordance with your authorization settings.

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve our platform and services, including processing your requests and generating AI responses.
• Account Management: To manage your account, process payments, send invoices, and provide customer support.
• Security and Fraud Prevention: To detect, prevent, and respond to security incidents, unauthorized access, fraud, and abuse.
• Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of others.
• Communication: To send service announcements, technical updates, security alerts, and administrative messages.
• Product Improvement: To analyze usage patterns, perform research, and improve our platform's functionality and user experience (using anonymized or aggregated data where possible).
• Marketing: With your consent where required, to send promotional communications about our products and services. You may opt out at any time.

4. Legal Bases for Processing (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you (e.g., providing services, account management, billing).
• Legitimate Interests: Processing for our legitimate business interests, such as service improvement, security, and fraud prevention, provided these do not override your rights.
• Consent: Processing based on your voluntary consent (e.g., marketing communications, optional cookies). You have the right to withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party vendors who process data on our behalf, such as cloud infrastructure providers, payment processors, customer support platforms, and analytics services. All providers are bound by contractual data protection obligations.
• Integration Partners: Third-party services you choose to connect to our platform, subject to your authorization.
• Legal Authorities: Law enforcement, government agencies, or courts when required by applicable law or to protect our legal rights.
• Corporate Transactions: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to continued protection under this Privacy Policy.
• Affiliates: Affiliated companies under common control, for purposes consistent with this Privacy Policy.

We do not sell your personal data to third parties. See our Subprocessors page for a current list of our service providers.

6. International Data Transfers

Camile AI operates globally. Your data may be transferred to and processed in countries other than your own. When we transfer personal data from the European Economic Area, the United Kingdom, or Brazil to countries not deemed adequate by the relevant authorities, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (where applicable)
• Other lawful transfer mechanisms recognized under applicable data protection laws

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account data: Retained for the duration of your account plus 90 days after closure, after which it is securely deleted unless retention is required by law.
• Usage data: Retained for up to 12 months in identifiable form, after which it is aggregated or anonymized.
• Support communications: Retained for up to 3 years after the last interaction.
• Backup data: Retained in accordance with our backup retention policy and securely deleted thereafter.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request restriction of processing of your data.
• Right to Data Portability: Request transfer of your data to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us at privacy@camileai.com. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption at rest and in transit, access controls, security monitoring, and regular security assessments. See our Security page for more details.

10. Children's Privacy

Our services are not directed to individuals under the age of 18 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete such information. If you believe a minor has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via email and/or a prominent notice on our platform. The date of the latest revision is indicated at the top of this page. We encourage you to review this Policy periodically.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Data Protection Officer: dpo@camileai.com
Privacy Team: privacy@camileai.com
Postal Address: Rua Santa Cruz, 2187, Vila Mariana, São Paulo - SP, CEP 04121-002, Brasil
CNPJ: 46.526.609/0001-08