Privacy Policy

Effective as of February 1, 2026

1. Introduction ↑ Contents

When you use PutType's services, you are entrusting us with your information. We understand this is a significant responsibility and we work to protect that data and put you in control.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and what your rights are, in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).

2. Information We Collect ↑ Contents

2.1 Registration information. When you create an account, you provide us with your name, email, and password. For paid plan subscribers, we may also collect address and tax identification number (CPF/CNPJ) as required for issuing tax documents and complying with tax obligations.

2.2 Content created by the subscriber. We collect and store content you create on the platform, including knowledge entries (questions and answers), conversational flows, integration settings, and other operational data for your bot.

2.3 Data generated in conversations. When end users interact with your bot, the platform may collect and process messages, information automatically identified during the conversation (such as emails, phone numbers, names, and other data provided by the end user), session metrics, and operational indicators.

2.4 Payment data. PutType does not store credit card data. Payment processing is handled by a PCI-DSS certified third-party processor. We only receive transaction confirmations and identifiers necessary for subscription management.

2.5 Automatic information. We collect unique identifiers, browser type and settings, operating system preferences, and approximate location information (based on IP).

2.6 When logged out. When you are not logged in, we may store information linked to browser identifiers to maintain preferences between sessions (such as light/dark theme).

3. Legal Bases for Processing ↑ Contents

Your personal data is processed based on the following legal bases, pursuant to Article 7 of the LGPD:

Performance of contract (Art. 7, V) — for providing the contracted services and managing your account.
Legal or regulatory obligation (Art. 7, II) — for issuing invoices, retaining tax data (CPF/CNPJ, address), and reporting to tax authorities.
Consent (Art. 7, I) — for sending marketing communications and using non-essential cookies.
Legitimate interest (Art. 7, IX) — for continuous service improvement, platform security, and fraud prevention.

4. How We Use Information ↑ Contents

4.1 Service provision and maintenance. Ensuring proper platform operation, tracking outages, and troubleshooting issues.

4.2 Product evolution. We use aggregated and anonymized data to develop new features, improve existing resources, and understand usage patterns.

4.3 Operational intelligence. We process conversation data to generate metrics, sentiment analysis, satisfaction indicators, and operational trends made available to the subscriber within the platform.

4.4 Communication. We use your email for support, operational notifications, service updates, and, with consent, marketing communications.

4.5 Security. Detecting, preventing, and responding to fraud, abuse, and security risks.

4.6 Tax obligations. We use registration data (CPF/CNPJ, address) for issuing tax documents and complying with tax obligations with competent authorities.

4.7 Advertising.

We do not display personalized ads based on personal data.
We do not share personal information with advertisers.
We do not use content from your bot conversations for advertising purposes.

5. Cookies and Tracking Technologies ↑ Contents

PutType uses cookies and similar technologies for:

Essential cookies: maintaining authenticated sessions and basic platform functionality.
Preference cookies: storing settings such as visual theme (light/dark) and language.
Analytics cookies: collecting aggregated usage data for service improvement.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.

6. Information Sharing ↑ Contents

6.1 With consent. We share personal information when we have your explicit authorization.

6.2 Integrations configured by the subscriber. When you configure integrations with third-party services through the platform, the necessary data is transmitted to those services according to your configuration. PutType acts as a processor in this context, and the subscriber is responsible for ensuring compliance with the privacy policies of integrated services.

6.3 Payment processors. We share necessary data with PCI-DSS certified payment processors to facilitate financial transactions. These processors are not permitted to use your data for their own purposes.

6.4 Legal obligations. We may share information to comply with applicable legislation, court orders, requests from competent authorities, or to protect legitimate rights.

6.5 Aggregated data. We may share non-personal, aggregated, and anonymized information for statistical or research purposes.

7. Security ↑ Contents

We adopt technical and organizational measures to protect your data, including:

Data encryption in transit (TLS/SSL);
Restricted, role-based internal access control;
Continuous monitoring against threats and unauthorized access;
Periodic backups with integrity protection;
Passwords stored with irreversible cryptographic hashing.

No system is completely immune to vulnerabilities. If we identify a security incident that may pose relevant risk or harm, we will notify affected data subjects and the National Data Protection Authority (ANPD), as provided by the LGPD.

8. Data Retention ↑ Contents

8.1 Operational data. Data generated during platform use (conversations, sessions, metrics) is retained for the period defined in the contracted plan. Retention periods are described on the plans page.

8.2 Registration data. Retained while the account is active and for the period necessary after closure to comply with legal obligations.

8.3 Tax data. Data required for tax compliance (CPF/CNPJ, address, transaction records) is retained for the applicable legal period, regardless of account deletion.

8.4 Post-deletion retention. After account deletion, PutType may retain certain data for the period necessary to comply with legal, tax, or regulatory obligations, as well as for the regular exercise of rights in administrative or judicial proceedings, as authorized by Article 16, items I and IV, of the LGPD.

8.5 Backups. Backup copies may contain data for a limited additional period, being deleted according to the regular backup rotation cycle.

9. Data Management and Deletion ↑ Contents

You can review and update your personal information at any time through your profile on the platform.

Account cancellation: When you cancel your account, access to services will be deactivated. Your operational data (bots, knowledge entries, conversations) will be deleted according to the retention cycle.

Definitive deletion: Complete deletion of personal data may be requested at any time. PutType will fulfill the request within 15 (fifteen) business days, except for cases of retention authorized by Article 16 of the LGPD:

Compliance with legal or regulatory obligation (item I);
Exclusive use by the controller, with third-party access prohibited, provided data is anonymized (item IV).

Browser settings allow independent control over locally stored cookies.

10. International Transfers ↑ Contents

Your information may be processed on servers located outside Brazil, maintaining adequate protections as provided by the LGPD. When necessary, we adopt standard contractual clauses and ensure that international service providers offer a level of protection compatible with Brazilian legislation.

11. Data Subject Rights (LGPD) ↑ Contents

In compliance with Article 18 of Law No. 13,709/2018 (LGPD), you have the right to:

Confirmation of the existence of data processing;
Access to personal data being processed;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of unnecessary or excessive data;
Data portability to another service provider;
Deletion of data processed with consent, subject to legal exceptions (Art. 16);
Information about data sharing with third parties;
Information about the possibility of not providing consent and its consequences;
Withdrawal of consent at any time.

To exercise any of these rights, contact our Data Protection Officer through the channels provided in Section 15 of this policy.

12. Children's Data ↑ Contents

PutType's services are not intended for individuals under 18 years of age. We do not intentionally collect personal data from children or adolescents. If we become aware that data from a minor has been collected without appropriate consent, we will promptly delete it.

13. Controller and Processor ↑ Contents

For LGPD purposes, PutType acts as controller of the personal data of subscribers (registration data, payment data, and platform usage data).

Regarding the personal data of end users who interact with bots created by subscribers, PutType acts as processor, processing data according to the instructions and settings defined by the subscriber (who is the controller of their own customers' data).

14. Changes ↑ Contents

This Privacy Policy may be updated periodically to reflect changes in our services, data processing practices, or applicable legislation. The current version will always be available on this page with the date of the last update.

Substantial changes will be communicated by email or platform notification with reasonable advance notice.

15. Data Protection Officer and Contact ↑ Contents

In compliance with Article 41 of the LGPD, PutType has designated a Data Protection Officer (DPO) who can be contacted for inquiries, requests, or complaints related to personal data processing.

Email: privacy@puttype.com

View our Terms of Service →

PutType Privacy Policy

PutType Privacy Policy