Privacy Policy

1. Data Controller

Fab Automations, a legal entity established in Brazil, is the controller of data collected through our customer service automation platform. We are responsible for defining the purposes and means of processing personal data that we collect and process on behalf of our commercial clients.

2. Personal Data We Collect

The types of data collected vary according to the settings made by our clients and the connected channel. In general, we process:

• Identification information of the end customer provided via WhatsApp, Instagram, Telegram, or other integrated messengers (e.g., name, nickname, phone number, and profile picture made available by the channel).
• Message content exchanged with the business, including texts, media, attachments, and metadata shared by users with their consent or as permitted by official APIs.
• Platform usage and telemetry data, such as access logs, IP addresses, automation logs, performance metrics, and configuration preferences.
• Contact and billing information from our commercial clients, such as company name, tax ID, address, email, and payment details.
• Audio recordings, files, and other content sent to the FabBot assistant, processed by third-party AI models to generate responses, summaries, and documents.

3. Processing Purposes

We use personal data to:

• Deliver, operate, and improve customer service automation features across multiple channels, including flow creation, automatic responses, and monitoring dashboards.
• Enable sending, receiving, and routing of messages via Meta APIs (WhatsApp Business Platform and Instagram Messaging API) and other connected channels securely and in compliance with platform policies.
• Provide technical support, commercial assistance, billing, fraud prevention, and information security.
• Comply with legal and regulatory obligations, including requests from competent authorities.
• Process interactions with the FabBot AI assistant, including response generation, meeting summaries, document and image creation, calendar management, and client organization.

4. Legal Basis

We process personal data based on the following principles: execution of contracts with our clients, compliance with legal or regulatory obligations, regular exercise of rights, legitimate interest in maintaining and improving our services, and consent, when necessary, obtained by our clients from end data subjects.

5. Sharing and Third-Party Processing

We share personal data only with:

• Messaging platforms and integrated social networks (Meta and Telegram), as authorized by the official APIs used by the client.
• Essential service providers for operations, such as cloud providers, monitoring, hosting, secure payment processing, and AI model providers (e.g., OpenAI) powering the FabBot assistant.
• Public authorities or regulatory bodies, when required by law or court order.

We require contracts and confidentiality obligations to ensure that third parties process data with the same level of protection adopted by Fab Automations.

6. Retention and Deletion

We retain personal data only for the time necessary to fulfill the purposes set out in this Policy and applicable legal obligations. Clients can request deletion or anonymization of chat records at any time through platform settings or support channel. After contract termination, residual data may be retained for the legally required period to protect Fab Automations' rights.

7. Information Security

We implement technical and administrative measures aligned with market best practices to protect personal data, including encryption in transit, role-based access control, auditing, and continuous monitoring. We conduct periodic assessments to ensure compliance with Meta, Telegram, and other partners' policies.

8. Data Subject Rights

Data subjects may exercise rights provided by LGPD, such as access, correction, anonymization, deletion, portability, information about sharing, and consent revocation. Requests can be directed to the contracting business or directly to Fab Automations, as applicable.

9. Use with Facebook (Meta) Products

When integrating WhatsApp Business Platform and Instagram Messaging API, our clients must ensure they have obtained all necessary authorizations from consumers to share data with Fab Automations and Meta. We process such data exclusively to provide the contracted functionalities and do not sell information to third parties. We comply with Meta Platform Policy requirements, including secure storage, deletion when requested, and cooperation with audits.

10. AI Assistant (FabBot)

FabBot is our AI-powered assistant available via WhatsApp and Telegram. When you interact with FabBot, text messages, audio recordings, and files you send are processed by third-party AI models (OpenAI) solely to generate responses and perform the requested features, such as meeting summaries, document and image generation, calendar management, and client organization. Conversation history is temporarily cached to provide context for responses and automatically expires after a period of inactivity. You can clear the context at any time by sending the /new or /novo commands. We do not use your data to train AI models. All processing occurs over encrypted connections and data is handled in accordance with the other provisions of this Policy.

11. International Transfers

Some of our vendors may be located outside Brazil. In such situations, we adopt contractual clauses and safeguards compatible with LGPD requirements and Meta policies to ensure an adequate level of protection for transferred data.

12. Policy Updates

We may revise this Policy periodically to reflect changes in our services, legal requirements, or guidance from partner platforms. We will publish the updated version at this address, indicating the date of the last update.

13. Contact

For questions or requests related to this Privacy Policy, contact our Data Protection Officer (DPO) at   fabrizioelias@fab.dev.br.