Privacy Policy
Version 1.4 · Last updated: July 26, 2026
1. Information we collect
We collect information you provide directly, such as name, email, financial data, and payment information when you create your account and use our services. We also automatically collect data through cookies and similar technologies, such as IP address, device identifiers, browser type, pages visited, traffic source (including campaign parameters), and access times. In addition, when a technical failure occurs on the platform, we automatically collect error and performance reports with technical data from the moment of the failure — such as browser and device type, operating system, page accessed, and technical identifiers — exclusively to diagnose and fix the problem. We also record your acceptances of the Terms and Policy — at sign-up, subscription, company creation, and module contracting — with the date, IP address, and the document version accepted, as proof of consent.
2. How we use your information
We use your information to provide, maintain, and improve our services; process transactions and send related notifications (including due-date alerts by email and WhatsApp); answer your questions in the Wisebot assistant; understand site usage and measure the performance of marketing campaigns; monitor errors and the platform's technical performance to maintain stability and fix failures; show relevant ads and run remarketing; and fulfill legal and regulatory obligations. With your consent or based on legitimate interest, we may also use your contact data to send communications and offers about the other WiseData group products (Tools, Agency, Leads, NPS, Balancinho, and the NFS-e Issuer), with the option to unsubscribe at any time.
3. Legal basis for processing
We process your data based on the grounds set out in the Brazilian General Data Protection Law (LGPD, art. 7): performance of the contract, to provide the contracted service; consent, for analytics and marketing cookies, promotional communications, and use of Wisebot; legitimate interest, for security, fraud prevention, error and performance monitoring, and service improvement; and compliance with a legal or regulatory obligation.
4. Cookies and tracking technologies
The list below was identified through a technical audit of our pages; durations are the ones actually applied by the browser. (a) Essential: session and security cookies for your account, plus _chatwoot_session and cw_conversation from our support chat, which keep the conversation open across pages. (b) Campaign attribution, set by us: utm_source, utm_medium, utm_campaign and other UTM parameters, plus first_referrer and last_referrer (30 days), written only when you reach the site through a campaign link or from another website, so we know where the signup came from. (c) Analytics: _ga and _ga_<stream ID> (1 year), from Google Analytics 4, loaded through Google Tag Manager. (d) Marketing and advertising: _fbp (3 months), from the Meta Pixel (Facebook and Instagram); _gcl_au (3 months), from Google Ads; and the LinkedIn Insight Tag cookies, when active. (e) Marketing automation: mtc_id and mtc_sid (session), mautic_device_id (12 months) and mautic_referer_id (about 30 minutes), from our Mautic, which also writes them on the marketing.grupowisedata.com domain. Analytics, marketing and automation cookies are currently loaded when you access the site. You can block them at any time in your browser settings or through the ad controls of Google and Meta, without affecting essential functions.
5. Data sharing and processors
We do not sell your personal data. We share information only with processors that help us deliver the service, always limited to the contracted purpose: hosting (Hostinger); payment processing (Stripe); the Wisebot artificial intelligence (OpenAI and Anthropic); traffic analytics and advertising (Google, Meta, and LinkedIn); and application and server error and performance monitoring (Sentry, by Functional Software, Inc., and Laravel Nightwatch, by Laravel Holdings Inc.), which receive only technical failure reports and performance metrics — never the content of your financial data; and, in the NFS-e issuance module, Focus NFe (Focus NFe LTDA), our technical issuance provider, which processes the tax data, the invoice recipient's data, and the digital certificate solely to issue and transmit the NFS-e to the municipality. We also share data when required by law or court order and to protect our rights. These partners act as processors and, in the case of the AI providers, do not use your data to train their models. We also use VisitorAPI, which receives the IP address of site visitors and returns country, region, language and currency so we can adapt the content shown — without receiving your name, email or account data. Our support chat (Chatwoot) and our marketing automation tool (Mautic) run on WiseData Business' own infrastructure in Brazil: the data they process is not sent to third parties and does not leave the country.
6. International data transfers
Some of our processors — such as Stripe, OpenAI, Anthropic, Google, Meta, LinkedIn, Sentry, and Laravel Nightwatch — process data outside Brazil, including in the United States. In such cases, the international transfer is carried out in compliance with the LGPD, with appropriate contractual and technical safeguards to protect your data.
7. Wisebot and artificial intelligence
Wisebot is an artificial intelligence assistant that answers questions about your finances in natural language — on WhatsApp or inside the app. It works in read-only mode: it queries your data to answer, but it never creates, edits, or deletes entries. To generate answers, relevant and strictly necessary excerpts of your financial data may be sent, via API, to our AI providers (OpenAI and Anthropic), which process this information solely to produce the response and do not use it to train their models. Using Wisebot is optional: if you don't link WhatsApp or use the assistant, none of your data is sent to these providers.
8. Data security
We implement technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, continuous monitoring, and regular backups. No system is 100% secure, but we continuously work to improve our security.
9. Your rights and Data Protection Officer (LGPD)
Under the LGPD, you have the right to: access your personal data; correct incomplete or outdated data; request deletion of your data; revoke consent; request data portability; and obtain information about data sharing. You can also delete your account yourself at any time, in your account Settings in the app. To exercise your rights or ask questions about privacy, contact our Data Protection Officer (DPO) at dpo.finances@wisedatabusiness.com.
10. Children and minors
Our services are intended for people aged 18 and over. We do not intentionally collect data from minors. If we identify such data without the proper consent of a guardian, we will arrange for its deletion.
11. Data retention
We retain your data for as long as necessary to provide our services and comply with legal obligations. After account closure or deletion, your data will be deleted within 90 days, except when retention is required by law. Queries sent to Wisebot are not retained by the AI providers for training purposes.
12. Changes to this policy
We may update this policy periodically. We will notify you of significant changes by email or through a notice on our platform. Continued use of the services after changes constitutes acceptance of the updated policy.
13. NFS-e issuance module and digital certificate
The NFS-e issuance module, available only to companies, processes tax data and third-party data you enter — in particular the service recipient (name or company name, CPF/CNPJ, address, and amounts). In this processing, your company is the Controller of that data; WiseData and Focus NFe act as Processors, limited to issuing and transmitting the invoice to the municipality. The A1 digital certificate and its password, when provided, are stored encrypted at rest (in a private object, with no public access), with restricted and audited access, and used solely to sign and issue the NFS-e. The technical issuance provider is Focus NFe (Focus NFe LTDA, Florianópolis/SC, Brazil); data in this module is processed in Brazil, with no international transfer.
14. Contact
For questions about this policy or the processing of your data, contact us at contato@wisedatafinances.com or through our contact page.