Privacy Policy

This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails.

Your privacy matters to us. Learn how we process your personal data.

Who we are and which apps this policy applies to

  • Apps: Tailor.ia Studio (iOS, App Store, and Android, Google Play, identifier com.tailor.ia.studio) and Tailor.ia Genius (Android, Google Play, identifier com.tailor.ia.genius), in addition to the tailor.ia.br website and the other Tailor.ia apps and platforms.
  • Developer: Tailor.ia, a FFID brand.
  • Legal entity responsible: FULFILLING INTELIGENCIA E DESENVOLVIMENTO LTDA, CNPJ 30.533.081/0001-56 (Brazilian corporate taxpayer ID).
  • Address: Rua Coronel José Eusébio, 95, casa 13, Higienópolis, São Paulo - SP, CEP 01239-030, Brasil.
  • Privacy contact (DPO): [email protected]

In the Tailor.ia Studio app we process: the agent account (name, e-mail, company and profile); customer service and CRM data (conversation messages, contacts, leads, deals, notes and activities); attachments (photos, videos, documents and audio captured by the camera, gallery, files or microphone, always through a user action); and the device token for notifications (Google Firebase and Apple Push). Biometrics and preferences stay on the device only: the app receives just "approved" or "denied". Tailor.ia Studio does not collect location, phone contacts or data for advertising tracking. The app's artificial intelligence features are described in section VII.

In the Tailor.ia Genius app we process the user's account data (name and e-mail used to log in), the content the user records in tickets (texts, attachments and comments), the device identifier for sending notifications, and technical usage and crash data to keep the app running. This data is used only to provide the service contracted by the user's company, is not sold, and is subject to the security, sharing, retention and rights rules described below. To request deletion of your account and data, write to [email protected].

Your privacy is very important to us, FULFILLING INTELIGENCIA E DESENVOLVIMENTO LTDA., a private legal entity registered under CNPJ No. 30.533.081/0001-56, hereinafter referred to as "FFID", owner of the Tailor.ia brand. Likewise, it is also very important to us to be transparent about how we collect and process your personal data ("information relating to an identified or identifiable natural person"). Accordingly, the main purpose of this policy is for you to know about:

  • IOur role as a personal data processor
  • IIOur role as a personal data controller
  • IIIWhich personal data we process
  • IVThe purposes and legal bases for processing
  • VWhen and where we store personal data
  • VIThe security practices we adopt
  • VIIWith whom and for what purpose we share personal data
  • VIIIYour rights as a personal data subject
  • IXGeneral Provisions
  • XFacebook/Instagram Policy
  • XICookies and Similar Technologies
  • XIIConsent and Cookie Management
  • XIIIData from Google services
  • XIVHow long we keep your data

This policy covers the personal information collected when using the FFID customer service management platform ("FFID Platform"), thereby covering the use of personal data: a) of those who access our website; b) of the User (any person authorized by the FFID Customer to operate the FFID Platform on its behalf); and c) of third parties who use the channels integrated by FFID's services to interact with the company that contracts the use of the FFID Platform from FFID ("Customer").

I. Our role as a personal data processor

The personal data processor is the natural or legal person, governed by public or private law, that processes personal data on behalf of the controller.

Our services are aimed at legal entities. Therefore, when we make them available under a contract with our Customer, the controller of the personal data collected through the FFID Platform will be the Customer itself.

II. Our role as a personal data controller

The personal data controller is the natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data.

Although in the vast majority of cases we act as a processor in the processing of personal data, in some situations we act as a controller.

III. Which personal data we process

We collect the personal data that you provide through any of the tools integrated by the FFID Platform or that you provide directly in any of the company's communication channels.

IV. The purposes and legal bases for processing

When we act as a processor, we process data on behalf of the Customer and according to its instructions; the legal basis is defined by the Customer, as the controller. When we act as a controller, we use the bases below (Law 13.709/2018, the LGPD, Brazil's General Data Protection Law, art. 7):

  • • Performance of a contract: creating and maintaining the user's account, enabling customer service, the CRM, the sending of messages and attachments, and app notifications.
  • • Consent: sending data to artificial intelligence providers through the features described in section VII, which only occurs after the user authorizes it in the app. Consent can be withdrawn at any time in Conta › Compartilhar com IA (Account › Share with AI).
  • • Legitimate interest: account security, fraud prevention, error logging and improving how the platform works.
  • • Compliance with a legal or regulatory obligation: retention of access logs required by the Marco Civil da Internet (Brazil's Internet Civil Framework) and responding to competent authorities.

V. When and where we store personal data

Data is stored from the moment it is collected and kept for the period described in section XIV. It is hosted on servers of cloud providers contracted by FFID, Google Cloud and Amazon Web Services (AWS), which may be located in Brazil or abroad.

When there is an international transfer, it follows art. 33 of the LGPD, with providers that offer data protection equal or equivalent to that of this policy. The app's biometrics and preferences stay only on the user's device and are not sent to our servers.

VI. The security practices we adopt

  • • Communication between the app, the website and the servers is always encrypted (HTTPS/TLS).
  • • Access through individual login, with the option of unlocking by biometrics on the device.
  • • Data separation by customer company: each user can only access their own company's data, according to the profile the company has defined.
  • • Internal access restricted to the people who need the data to provide the service, with access logging.
  • • Contracts with suppliers that require confidentiality and data protection.

VII. With whom and for what purpose we share personal data

We do not sell personal data. We share only what is necessary to provide the service:

  • • WhatsApp/Meta: to deliver the conversation messages.
  • • Amazon Web Services (AWS): cloud storage of attachments.
  • • Google Firebase and Apple: sending notifications to the device.
  • • microlink.io: receives only the address of the links sent in conversations, to generate the preview.
  • • Artificial intelligence providers (OpenAI, Google Gemini and OpenRouter): described below.
  • • Authorities: when there is a legal obligation or court order.

Artificial intelligence features

In Tailor.ia Studio, the "Responder com Auria" (Reply with Auria) and "Enviar para a IA" (Send to AI) features send the text of the message chosen by the user (which may contain the end customer's name, phone number or other data), the request written by the user and conversation identifiers to FFID's servers, which forward them to the AI provider configured in the company's assistant: OpenAI, Google (Gemini) or OpenRouter. The data is used exclusively to generate the suggested reply or process the message.

Nothing is sent unless the user triggers the feature and gives permission in the app, which can be withdrawn at any time in Conta › Compartilhar com IA (Account › Share with AI). These providers process data outside Brazil; FFID requires them, by contract, to provide data protection equal or equivalent to that described in this policy and in the LGPD (art. 33).

VIII. Your rights as a personal data subject

We respect your rights as a personal data subject and, when we act as a controller, we guarantee that at any time you may request:

  • • Confirmation that your personal data is being processed
  • • Access to the personal data we process about you
  • • Correction of incomplete, inaccurate or outdated personal data
  • • Anonymization, blocking or deletion of unnecessary or excessive data
  • • Portability of data to another service provider
  • • Deletion of your data processed with your consent
  • • Information about data sharing
  • • Withdrawal of consent

IX. General provisions

If you have any questions about this Privacy Policy or any matter related to the protection of your personal data, you can contact us by e-mail:

[email protected]

X. Facebook/Instagram Policy

For more information about integration with Meta platforms: Read on Facebook

XI. Cookies and Similar Technologies

We at FFID use cookies and similar technologies (pixels, local storage and device identifiers) to provide a more efficient, secure and personalized experience on our websites and applications. Cookies are small files stored on your device when you visit our services, allowing us to remember preferences, keep sessions active, measure performance and improve features.

The use of cookies may involve the processing of data such as online identifiers, pages visited, time spent, browsing events, language preference and technical information about the device/browser. Strictly necessary cookies are used on the basis of legitimate interest and/or performance of a requested functionality; analytics, functional and advertising/remarketing cookies are used on the basis of consent, where applicable.

Categories of cookies

  • Strictly necessary — enable essential features, such as authentication, security, fraud prevention and load balancing. Without them, the service may not work properly.
  • Performance/Analytics — collect aggregated information about usage and performance, helping us understand which pages and features are used most and improve the product.
  • Functional — remember your preferences (language, region, layout) and improve features such as forms, search and accessibility.
  • Advertising/Remarketing — allow us to measure campaigns and display relevant content/offers based on anonymous or pseudonymized interactions, where permitted.

Third-party cookies

We may also integrate third-party tools (for example, traffic analysis, social media, CRMs and advertising platforms). These third parties may set cookies and collect data under their own policies and legal bases. We recommend that you consult the privacy policies of the respective providers for more information.

XII. Consent and Cookie Management

When required, we will ask for your consent for non-essential categories (analytics, functional and advertising/remarketing). You can withdraw or change your consent at any time by adjusting your browser's cookie preferences or through the management options available in our services, when enabled.

Blocking strictly necessary cookies may compromise essential features. To manage cookies, see the help pages of your browsers (Chrome, Firefox, Safari, Edge) and clear cookies/data as desired. If you need additional support, contact our DPO at [email protected].

In regions that require consent banners, we will display controls for accepting, rejecting and choosing by category where applicable.

XIII. Data from Google services

When you authorize integrations with Google services, we process only the data strictly necessary to enable the requested features:

  • Google Calendar — we use availability information (free/busy) to facilitate scheduling and time synchronization. We do not access the content of events, descriptions, guest lists, attachments or sensitive data.
  • Google Login (OAuth) — we capture name and e-mail for authentication and for creating and managing your account. Access tokens are stored with security controls and renewed as needed.

The applicable legal basis may be consent, performance of a contract or legitimate interest, as the case may be. The data is used exclusively for the purposes described, kept for the time necessary to run the features, and is not shared with third parties, except when required by law or to comply with contractual obligations with the provider itself.

You can revoke access at any time in your Google account settings and request deletion of the linked data by contacting our DPO.

XIV. How long we keep your data

If you are an active customer, we will keep your personal data for as long as our contractual and/or commercial relationship lasts. After it ends, we may retain data in a controlled environment for up to 5 years, when necessary to comply with legal obligations, for the regular exercise of rights, audits and fraud prevention.

For prospective customers with no contractual/commercial relationship, we will keep the data only for the period necessary for the stated purpose (for example, commercial contact), discarding it when there is no applicable legal basis. Technical logs and metrics may be retained for periods compatible with security, monitoring and continuous improvement.

We observe the principles of necessity, adequacy and data minimization. You can request information about data retention or deletion at [email protected].

This Privacy Policy will be governed by and construed exclusively in accordance with the laws of Brazil, especially the General Data Protection Law (Federal Law 13.709/2018).