Privacy Policy

Last updated: October 9, 2026

This policy explains how [RAZÃO SOCIAL], [CNPJ / EIN], located at [ENDEREÇO] (“Nevox”, “we”), handles personal data on the nevox.ai website, in the receptionist simulator and on the platform, in line with Brazil’s General Data Protection Law (LGPD) and, for people in the United States, applicable state laws.

1. Who is responsible

[RAZÃO SOCIAL], [CNPJ / EIN], [ENDEREÇO]. Data protection contact: suporte@nevox.ai.

2. What we collect

In the simulator: business name, industry, country, city and website; your name, email and, if you provide it, phone number; your choice about hearing from us; what the AI read from the website you pointed to; and the messages exchanged with the test receptionist. Fields are saved as you type, even if you don’t finish.
Technical data: a cookie holding your simulation key (so you can come back to it), a code derived from your IP address (a hash; the raw IP isn’t stored), your browser, the page you came from and the campaign (utm parameters).
Preferences: language and currency stay in your own browser.
If you subscribe: account and billing details. Payments are processed by Stripe; we don’t store your full card number.
Your customers’ data: once the receptionist is live, the conversations and details your customers send through connected channels. For that data, you are the controller and Nevox is the processor.
Voice: in voice conversations, calls and WhatsApp voice messages with your customers, audio is processed in real time to understand and reply; the recording stays with the voice provider, and the transcript, the caller’s number and the duration are kept in your account.

3. How we use it

To build and show your test receptionist and let you come back to it (steps you requested before a contract).
To recognize returning visitors, avoid duplicate records and measure how the website and simulator are used (legitimate interest).
To prevent abuse, fraud and automated use, including bot checks (legitimate interest and security).
To send you messages about your receptionist, such as reminders and news, only if you tick the contact option (consent). You can opt out anytime through the link in every email.
To send what you asked for, such as the link back to your simulation or the notice that going live has opened.
To provide the service you subscribed to and meet legal and tax obligations.

4. Who we share it with

Only with providers that help us run the service, under contract: Supabase (database), Vercel (hosting), Anthropic (AI for answers and website reading), OpenAI (listening and speaking in WhatsApp voice messages), Retell AI (voice conversations and calls), Telnyx (telephony and email delivery), Elastic Email and Resend (email delivery), Stripe (payments) and Cloudflare (bot checks). We don’t sell personal data.

5. International transfers

Some of these providers process data outside Brazil, mainly in the United States. In those cases we use the safeguards provided by the LGPD, such as contractual clauses.

6. How long we keep it

Simulator data: up to 24 months after your last activity, or until you ask us to delete it.
Account and billing data: while the account exists and then for as long as the law requires.
Voice recordings: up to 90 days with the voice provider. Transcripts: with the conversations, while the account exists.
Access logs: for the period required by law, where applicable.

7. Your rights

You can ask us to confirm we process your data, give you access, correct, anonymize or delete it, port it and tell you who we share it with, and you can withdraw consent, by emailing suporte@nevox.ai. We reply within 15 days. In Brazil, you can also complain to the national data protection authority (ANPD).

People in the United States can request access and deletion the same way. We don’t sell or share personal data for behavioral advertising.

8. Cookies

We use one essential cookie to keep your simulation key (valid for 1 year) and the login cookie for customers. We don’t use advertising cookies.

9. Security

Simulator data is only accessed by our server; access keys and IP addresses are stored only as hashes; connections are encrypted; and provider keys are kept in a vault. No system is 100% secure: if a relevant incident happens, we’ll notify you and the authorities as the law requires.

10. Children

The Service is for businesses and isn’t intended for anyone under 18.

11. Changes to this policy

We may update this policy; the date at the top shows the version. We’ll give notice of important changes.

12. Contact

suporte@nevox.ai