Privacy Policy
How Bravo Tecnologia collects, uses, shares and protects personal data — on this website, in our contact channels, and in the WhatsApp customer-service platforms we operate for client companies. Written to be read, not endured.
Who answers for this policy
This policy covers the website bravotecnologia.tec.br, our contact channels and the services we provide, including the customer-service platforms integrated with the WhatsApp Business Platform and the capture of contacts from Facebook and Instagram Pages.
- Legal name
- Adjair Farias Serviços em Tecnologia Ltda
- Trade name
- Bravo Tecnologia
- CNPJ (tax ID)
- 61.807.577/0001-02
- Address
- Alameda Paineiras, 536 — Vila Maria Regina
Juatuba/MG — ZIP 35675-000 — Brazil - Phone
- (31) 98920-7459
- Data Protection Officer
- Adjair Farias — contato@bravotecnologia.tec.br
Officer in charge of personal data processing under article 41 of the LGPD (Brazilian General Data Protection Law, no. 13.709/2018).
Controller or processor, depending on the data
Bravo provides services to other companies. That changes who answers for what — and it is the first thing you need to know in order to exercise your rights in the right place.
When we are the controller
When you talk to Bravo: the website form, e-mail, phone or our business WhatsApp. Here we decide the purposes and means of processing, and it is us you ask for access or deletion.
When we are the processor
When you talk to a client company through a platform we built and operate, such as customer service over WhatsApp or a comment left on its Facebook or Instagram Page. There the controller is that company: it defines purposes, legal basis and retention periods. We process the data on its instructions and never for our own purposes.
If you chatted with, or commented on the Page of, a company served by Bravo, the controller of your data is that company. You may contact it directly or write to us: we forward your request to it and support it so the request is answered within the legal deadline.
Data processed on this website
This website uses no cookies, no analytics, no social pixels and no third-party SDKs. The server's content security policy blocks external resources: nothing here is loaded from outside our own domain.
Contact form
You choose what to fill in. Only name and e-mail are required.
- Name (required)
- E-mail (required)
- Company
- Phone / WhatsApp
- Subject
- Message
Technical records
The minimum needed for the form to work and not become a spam channel.
- IP address, recorded in the message we receive
- SHA-256 hash of the IP, in a temporary file, to cap 5 submissions per hour
- No other browsing log is kept by the application
Why we use it
To answer your message and carry out the commercial discussions you started — which the LGPD treats as preliminary procedures related to a contract (art. 7, V) — and to keep the form safe from automated submissions, on the basis of legitimate interest (art. 7, IX). Delivery runs on our own mail server, with no bulk e-mail intermediary. We do not use your data for advertising and we do not sell it.
Storage in your browser
The site writes a single key to your browser's localStorage, bravo-theme, holding your light or dark theme preference. It stays on your device, is never sent to any server, and disappears when you clear the site's data.
WhatsApp Business Platform
Bravo builds and operates customer-service platforms integrated with Meta's WhatsApp Business Platform for client companies. When you chat with the number of one of those companies, your message travels through Meta's infrastructure and is processed by the platform we operate.
Who controls this conversation
The company that owns the WhatsApp number is the controller of that conversation's data: it defines the purposes, the legal basis and the retention periods, and it is the party that discloses those terms to you. Bravo Tecnologia acts as the processor, handling the data on the controller's instructions, within the limits of the service agreement.
Data processed
- Phone number
- WhatsApp profile name
- Content of messages sent and received
- Attached media: audio, image and documents
- Metadata: date, time, delivery and read status
What it is used for
- Replying to you and continuing the service
- Recording the interaction in the client company's CRM
- Understanding your interest and routing it to the responsible staff member
- Keeping conversation history for whoever takes over
Artificial intelligence processing
This deserves to be said plainly: messages are read and interpreted by automated artificial-intelligence agents, which also transcribe voice messages into text. In practice:
- What you write is processed by an automated system to produce the reply and classify the enquiry.
- Voice messages you send are converted into text by a large language model (LLM) contracted as a service, which means the audio file is sent to that model's supplier.
- The model in use may vary according to the needs of the service provided. Bravo contracts these models from cloud-computing and artificial-intelligence providers and may replace them over time — the suppliers currently in use are described in Who we share data with.
- There is no solely automated decision producing legal effects on you. Service is carried out by people, supported by the agents, and you may ask to speak to a human agent at any time.
- Bravo does not use conversation content to train its own artificial intelligence models.
Conversation records
Conversations are stored in the platform so service can continue, be audited and meet the client company's obligations. The legal basis for that record and its retention period are defined by the controller — the company that owns the number — and disclosed by it, in that company's own privacy policy.
How to stop receiving messages
You can opt out at any time. Just reply in the conversation saying you want it to end — for example, by writing SAIR (Portuguese for "stop"). The automated flow is interrupted and the request is recorded. You may also block the number directly in WhatsApp, which prevents any further message through the app.
WhatsApp is a Meta Platforms service and has its own privacy policy governing the transport of messages: whatsapp.com/legal/privacy-policy.
Facebook and Instagram Pages
Bravo builds and operates platforms that connect a customer company's Facebook Page and Instagram professional account to that company's CRM. When you comment on a post of such a Page, Meta delivers the comment to the platform and it becomes a sales contact for the company.
Who controls that comment
The company that owns the Page is the controller of the data: it defines the purpose, the legal basis and the retention period of the contact generated from your comment. Bravo Tecnologia acts as processor, handling the data on that company's instructions, within the limits of the service agreement.
Data processed
- Your profile's identifier and public name, as provided by Meta
- The content of the comment you posted
- Identifiers of the comment and of the post it was left on
- The caption of the post, used to identify which listing it advertises
- Data of the connected Page: identifier, name, granted permissions, subscribed webhook fields and the access token, stored encrypted
What it is used for
- Recording your interest as a sales contact in the company's CRM
- Identifying, from the caption, which listing the comment refers to
- Routing the contact to the agent responsible for it
- Publishing a single public reply to your comment, as the Page, inviting you to continue the conversation on WhatsApp
What we do not do
- We never hide, edit or delete comments posted by other people.
- We never access Pages the customer company does not administer.
- We publish no other content on the Page, and we reply at most once per person on each post.
- We never use this data for advertising, profiling or resale.
- Your phone number does not come from the comment. It only reaches the company if you choose to start the WhatsApp conversation through the invitation.
Artificial intelligence in this flow
The public reply to your comment is a fixed template, not generated by artificial intelligence. If you accept the invitation and start the WhatsApp conversation, the terms of the WhatsApp Business Platform section apply from then on, including the AI processing described there. The contact recorded in the CRM may also be retrieved by the automated assistants the customer company uses internally, under the same terms.
How long we keep it
Page authorisation session data is discarded after 7 days. The contact generated and the comment that originated it are kept while the customer company's account is active, since they are the record of a sales negotiation, and are deleted when that account is terminated. To request deletion before that, see Data deletion.
Facebook and Instagram are Meta Platforms services and have their own privacy policy, which governs your account and the delivery of the comment: facebook.com/privacy/policy.
Who we share data with
These are the suppliers that process personal data on Bravo's behalf — our sub-processors. We keep this list up to date on this page whenever it changes.
- Meta Platforms
- WhatsApp Business Platform: transport, delivery and temporary storage of the messages exchanged in the channel. United States and other countries where Meta operates.
- Cloud and AI providers
- Google, Microsoft Azure, Amazon Web Services and other cloud-computing services Bravo may contract: hosting and processing of the customer-service platform, and running the language models that transcribe audio and interpret message content. They operate in the United States and other countries.
- Hostinger
- Hosting of the website, of the mail server that delivers contact-form messages, and of the servers and database of the platforms we operate, administered remotely from Lithuania.
- Client company
- When you write through a client's channel, that conversation's data belongs to the client — it is the controller, and receives the content in its own CRM.
- Authorities
- Where required by law, regulation or court order, limited to what is required.
We do not sell personal data and we do not release it for third-party advertising.
International transfers
Meta and the cloud and AI providers process data outside Brazil. Those transfers are made under article 33 of the LGPD and rely on the contractual clauses and data-protection commitments those suppliers undertake in their own data processing terms.
How long we keep it
Every category has a deadline. Once the deadline or the purpose ends, the data is deleted — unless the law requires longer retention.
- Contact form messages
- For as long as the commercial relationship lasts and up to 5 years after the last contact, for the regular exercise of rights.
- Rate-limit records
- Submission-control records expire after 1 hour and are discarded when the server's temporary directory is cleaned.
- WhatsApp conversations
- For the period defined by the controller of the channel. When the service agreement ends, data is returned or deleted on that controller's instructions.
- Contract and tax data
- For the applicable statutory periods, as a rule 5 years.
Security
- All website and form traffic runs over HTTPS with TLS.
- Access credentials are kept out of version control and blocked from public access on the server.
- Access to data is restricted to the people who need it to deliver the service.
- Integrations with suppliers run with the least privilege necessary.
- No system is impenetrable. In the event of a security incident with relevant risk, we notify the ANPD (Brazilian data protection authority) and the affected data subjects, under article 48 of the LGPD.
Your rights
The LGPD grants you, as a data subject, the rights listed in article 18. Exercising any of them is free of charge.
- Confirmation and access — to know whether we process your data and obtain a copy of it.
- Correction — of incomplete, inaccurate or outdated data.
- Anonymisation, blocking or deletion — of unnecessary or excessive data, or data processed unlawfully.
- Portability — to another supplier, subject to ANPD regulation.
- Deletion — of data processed on the basis of your consent.
- Information on sharing — who we share your data with.
- Withdrawal of consent and objection to processing based on another legal basis.
- Review of automated decisions, where they exist.
How to ask
Write to contato@bravotecnologia.tec.br. We answer within 15 days. We may ask for additional information to confirm your identity — that protects you, it is not an obstacle.
If your request concerns a conversation held through a client company's channel, that company is the controller: we forward your request to it immediately and let you know.
You may also file a complaint with the ANPD, Brazil's National Data Protection Authority.
Children and adolescents
Our services are aimed at companies and at people over 18. We do not knowingly collect data from children or adolescents. If we find that we have received such data without proper legal grounds, we delete the record. If you are a legal guardian and believe this has happened, write to contato@bravotecnologia.tec.br.
Changes to this policy
This policy may change when our services, our suppliers or the applicable law change. The last-updated date, shown at the top and just below, always identifies the version in force. Material changes are announced through our service channels before they take effect.
Last updated: 25 August 2026
Questions about your data? Write to us.
Adjair Farias, officer in charge of personal data processing at Bravo Tecnologia. Answer within 15 days.