Kayro
Talk to Kayro
EN
PortuguêsEnglishEspañol
EN
PortuguêsEnglishEspañol

Legal document

Privacy Policy

Last updated: July 29, 2026

1. Who we are

This Privacy Policy describes how DATACADO LTDA, registered under CNPJ no. 62.623.254/0001-13, with its registered office at R. Hungria, 888, Conj. 51 Garage1, São Paulo/SP, CEP 01455-905 (“Kayro”, “we”), processes the personal data of visitors to usekayro.ai and users of the Kayro platform.

We act as the controller of data collected through the website and as a processor when processing data for business customers subscribing to the platform, under Law no. 13.709/2018 (Brazil’s General Personal Data Protection Law — LGPD).

2. Data we collect

We collect only the data necessary to provide our services, communicate with you and comply with legal obligations:

  • Contact information voluntarily provided through website forms: name, email address, phone number, company and message.
  • Platform usage data when you use a Kayro account subscribed to by your organization: identifier, organization, interactions with agents and audit records.
  • Technical browsing data: IP address, browser type, pages accessed and timestamps, collected through server logs for security and diagnostics.

3. Purposes of processing

We process your personal data to:

  • Respond to sales, support and partnership inquiries.
  • Enable access to, operation of and improvements to the Kayro platform.
  • Protect our systems, prevent fraud and investigate incidents.
  • Comply with legal and regulatory obligations and orders from competent authorities.

4. Legal bases

Our processing relies on the following legal bases under the LGPD: (i) performance of a contract or preliminary procedures; (ii) compliance with a legal or regulatory obligation; (iii) legitimate interest, with due regard for the data subject’s rights and freedoms; and (iv) consent, where required and given freely, in an informed and unambiguous manner.

5. Sharing with third parties

We do not sell personal data. We share data only with service providers strictly necessary for Kayro’s operation, under agreements that ensure appropriate security and privacy standards, including:

  • Cloud infrastructure and hosting providers.
  • Transactional email and communication tools.
  • Monitoring, logging and technical analysis services.
  • Public authorities, when required by law or court order.

6. International transfers

Part of our infrastructure may be located outside Brazil. When international data transfers occur, we adopt safeguards compatible with the LGPD, including specific contractual clauses and the selection of providers offering a level of protection equivalent to that of Brazilian law.

7. Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy and meet legal, contractual or accountability obligations. After this period, the data is securely deleted or anonymized.

8. Security

We adopt technical and organizational controls to protect your data, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access control (RBAC), isolation by organization with Row-Level Security (RLS), audit records and regular security assessments.

9. Your rights as a data subject

Under the LGPD, you may request the following at any time:

  • Confirmation that processing takes place and access to your data.
  • Correction of incomplete, inaccurate or outdated data.
  • Anonymization, blocking or deletion of unnecessary data or data processed in violation of the LGPD.
  • Portability of your data to another service provider.
  • Information about entities with which we share your data.
  • Withdrawal of consent, where applicable.

10. Data deletion requests

You may request the deletion of your personal data at any time. Kayro processes deletion requests within 30 days of receipt, in accordance with the LGPD and GDPR.

How to request deletion (end users)

For end users — sales representatives who use Kayro:

  • Disable WhatsApp notifications in your Kayro account settings to stop receiving messages immediately.
  • Send an email to privacy@usekayro.ai with the subject “Data Deletion Request” and your registered email address.
  • Alternatively, contact your organization’s Kayro administrator, who can submit the request on your behalf.

For corporate customers

Contract administrators may request deletion of all data associated with their organization by emailing privacy@usekayro.ai. We process organizational deletion requests within 30 days, subject to legal retention requirements.

What is deleted

  • WhatsApp conversation history stored in Kayro.
  • User profile and authentication data.
  • Personalized analyses and notification preferences.
  • Associated metadata (timestamps, message IDs).

Confirmation

Once deletion is complete, we send a confirmation email to the requester. Some data may be retained as required by law (for example, audit records) for the legally required period, after which it will be permanently deleted.

11. Cookies

Currently, usekayro.ai uses only cookies strictly necessary for the pages to function and for the theme preference (light/dark). If we begin using analytics or marketing cookies in the future, this Policy will be updated and, where required, we will request your consent.

12. Contact and Data Protection Officer (DPO)

Kayro’s Data Protection Officer (DPO) is Paulo Chade.

To exercise your rights or ask questions about this Policy, contact privacy@usekayro.ai. We will respond within the timeframe provided by the LGPD.

13. Updates

This Policy may be updated periodically. The current version is always the one published on this page, indicating the date of the last update. Effective date: July 29, 2026.