Privacy Policy

This policy explains which personal data CartazAI processes, why, and what your rights are, under Brazil’s General Data Protection Law (Law No. 13,709/2018). The controller is Conex Online, Brasil. If versions differ, the Portuguese version prevails.

1. Data we process

User data: name, email, phone, access profile and password (stored in a form that cannot be read).

Customer company data: company name, CNPJ or CPF, address, contacts and cost centers.

Sign-in with Google, Microsoft or Facebook: we receive the name, email and account identifier. We do not receive your password from those services.

System usage: date and time of sign-ins and actions, IP address and chosen language.

Content: artwork, images, products and text the company creates or uploads.

Billing: invoices, payments and the chosen payment method. Card data is handled by the payment provider and is not stored in CartazAI.

2. Why we use it

To create and maintain the account, provide the service, issue and collect invoices, send system notices (such as confirmation codes and invoices), provide support, keep the service secure and meet legal obligations. The legal bases are performance of the contract, legal obligation and legitimate interest.

3. Who we share it with

With suppliers that operate the service for us: hosting, email delivery and payment. With the sign-in provider you choose. In the artificial intelligence features, the text you type may be sent to the configured AI provider. We do not sell personal data.

4. Cookies

We use only necessary cookies: the sign-in session cookie and those that remember your chosen language and appearance. We do not use advertising cookies.

5. How long we keep it

While the account is active. After cancellation, data is kept until deletion is requested. Once deletion of the record is requested, the account is closed and the data (logins, artwork, images and products) is deleted automatically after 30 days; during that period you can change your mind by contacting us. If an invoice is still open, deletion happens after it is settled. Tax and billing records are kept for the period required by law.

6. Your rights

You can ask for confirmation of processing, access, correction, portability, anonymization or deletion of the data, and information about sharing. The company administrator can ask for the record to be deleted in the Contracts menu. Other requests: contato@conexonline.com.br.

7. Security

Access uses an encrypted connection (HTTPS), passwords are stored hashed and each company sees only its own data. No system is completely immune to failures; in the event of a relevant incident, those affected will be notified.

8. Changes and contact

This policy may be updated; the date of the latest version is shown on this page. Privacy contact: contato@conexonline.com.br.