Privacy Policy

Last updated: March 2026

New Way Soluções Digitais Ltda. ("New Way", "we", "us"), CNPJ 17.738.064/0001-97, is the data controller for personal data processed by the yapt. platform ("Platform"). This Policy describes how we collect, use, store, and share your data, in compliance with the Brazilian General Data Protection Law (LGPD — Law 13,709/2018) and applicable international privacy regulations.

1. Data We Collect

1.1 Data you provide

  • Name, email, phone number, and company (registration)
  • Payment data (processed by a third-party gateway)
  • Content of messages sent/received on the Platform

1.2 Automatically collected data

  • IP address, browser, device, and operating system
  • Pages visited, clicks, and session duration
  • Cookies and similar technologies (see section 10)

2. How We Use Your Data

  • Provide and improve the Platform's services
  • Process and qualify leads using artificial intelligence
  • Send transactional communications and, with your consent, marketing messages
  • Comply with legal and regulatory obligations
  • Prevent fraud and ensure security

3. Artificial Intelligence

The Platform uses AI models for sentiment analysis, lead qualification, response suggestions, and automations. Models process conversation content at runtime and do not retain data after processing. No personal data is used to train third-party models.

4. Data Sharing

We share data only with:

  • Infrastructure providers: Supabase (database), Cloudflare (CDN)
  • AI providers: OpenAI, Google (Gemini) — conversation content at runtime only
  • Communication providers: Meta (WhatsApp Business API), Google (email)
  • Authorities: when required by law or court order

5. Security

We adopt technical and organizational measures to protect your data, including: encryption in transit (TLS) and at rest, role-based access control (RBAC), Row Level Security (RLS) on all multi-tenant data, continuous monitoring, and audit logs.

6. Retention

We retain your data for as long as your account is active or as needed to fulfill legal obligations. Conversation data is retained for up to 2 years after account closure, unless otherwise required by law.

7. Your Rights

You have the right to:

  • Confirmation and access to your processed data
  • Correction of incomplete or outdated data
  • Anonymization, blocking, or deletion of unnecessary data
  • Data portability
  • Withdrawal of consent
  • Information about third-party data sharing
  • Objection to processing, where applicable

8. International Transfers

Some of our infrastructure and AI providers have servers outside Brazil. In these cases, we ensure that transfers are carried out with an adequate level of protection, in accordance with the LGPD and applicable international standards.

9. Automated Decisions

The Platform performs automated decisions, such as lead qualification and conversation routing. You may request a review of any automated decision by contacting our DPO.

10. Cookies

We use essential cookies for the Platform's operation and analytical cookies to improve the user experience. You can manage your cookie preferences in your browser settings.

11. Sub-processors

Current list of sub-processors: Supabase Inc. (database), Cloudflare Inc. (CDN and protection), OpenAI LLC (language processing), Google LLC (Gemini AI and email), Meta Platforms Inc. (WhatsApp Business API), Resend Inc. (transactional email).

12. DPA (Data Processing Agreement)

For enterprise customers, we offer a DPA upon request. Contact our DPO to request one.

13. Changes

We may update this Policy periodically. We will notify you of significant changes via email or on the Platform.

14. Contact

To exercise your rights or ask questions:

  • DPO: dpo@newway.com.br
  • Address: New Way Soluções Digitais Ltda., São Paulo/SP, Brazil