Combot · AI Phone

Privacy Policy

How Combot collects, uses and protects your personal data (LGPD).

Last updated: July 15, 2026

1. Who we are

Combot is a WhatsApp service platform developed and operated by its creators ("we"). This Policy describes how we collect, use and protect personal data in accordance with the General Data Protection Law (LGPD — Law No. 13,709/2018).

2. Data we collect

We collect the following categories of data:

Registration data: name, email and password (stored with hashing) of the user who creates the account;

Company data: name, industry and document (CNPJ/CPF) optional;

Usage data: conversations, contacts, messages and service logs processed by the Platform;

Payment data: managed by our payment processor (MercadoPago); we do not store card data;

Technical data: IP address, access logs and browser information for security purposes.

3. How we use your data

We use the data to:

Provide and improve the service;

Communicate about your account, invoices and relevant updates;

Provide technical support and respond to tickets;

Comply with legal and regulatory obligations;

Prevent fraud and ensure security.

We do not sell or share your data with third parties for marketing purposes.

4. Data sharing

We share data only with:

Infrastructure providers (servers, database) essential for the operation of the Platform;

Payment processor MercadoPago for charges and confirmations;

Meta Platforms (WhatsApp Business Platform / Cloud API) for sending and receiving WhatsApp messages, in accordance with Meta's Terms;

AI providers contracted by Combot — to generate automatic responses under the platform's configuration and responsibility;

The client's own systems, when the company enables the integration API/webhooks: in this case, service messages are sent to the systems indicated by it, under its responsibility;

Public authorities, when required by law or court order.

5. Data security

We adopt appropriate technical and administrative measures to protect your data against unauthorized access, alteration, disclosure or destruction. Passwords are stored with secure hashing (bcrypt) and sensitive credentials are encrypted in the database.

6. Data retention

We keep your data while the account is active. After cancellation, data is deleted within 90 days, unless there is a legal retention obligation. You may request early deletion by sending an email to suporte@combot.com.br.

7. Your rights (LGPD)

As a data subject, you have the right to:

Confirm the existence of and access your data;

Correct incomplete, inaccurate or outdated data;

Request the anonymization, blocking or elimination of unnecessary data;

Portability of data to another provider;

Revoke consent, where applicable.

To exercise your rights, contact us at suporte@combot.com.br.

8. Cookies

We use only essential cookies for authentication and session maintenance. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this Policy periodically. We will notify significant changes by email or within the Platform. We recommend that you review this page regularly.

10. Contact

For questions, requests or complaints about privacy:Email: suporte@combot.com.br

Terms of Use · Home page

Privacy Policy | Combot