Dizzi
Falar com a equipe

Privacy Policy

Last updated: October 13, 2026.

This Privacy Policy explains how Dizzi (“we”) handles personal data when providing the Platform, in line with applicable data protection law and, in Brazil, where the company operates, with the General Personal Data Protection Law (Law No. 13,709/2018, “LGPD”). It applies to anyone who visits our site, creates an account or uses the Platform. Please also read the Terms of Use and the Cookie Policy, available in Portuguese at /p/politica-de-cookies.

1. Our roles in data processing

  • As a controller: we process, for our own purposes, the data of site visitors, of people who create an account, of the Customer’s team users and billing data.
  • As a processor: we process, on behalf of and following the instructions of the Customer, the personal data of the Customer’s Contacts (for example, name, phone number, email and the content of conversations) entered or transmitted on the Platform. In that case, the Customer is the controller and is responsible for the legal basis and for transparency toward data subjects. If you are a Contact of a company that uses Dizzi, the right place to exercise your rights is, first of all, that company.

2. Data we process

Data you give us: name, email, phone number, password (stored in protected form), company details, billing information and the content of support requests.

Data generated by use: access logs (IP address, date and time, browser and device), actions taken in the account (audit log), preferences (language, time zone, theme) and plan usage and consumption metrics.

Customer Content data: contacts, conversations, messages, files and other information the Customer transmits through the connected Channels.

Integration data: credentials and access tokens for Channels and third-party services, which we store encrypted.

Payment data: payment is processed by third-party gateways. We do not store your full card details; we only receive confirmation and transaction identification information.

3. Purposes and legal bases

  • Providing the service and performing the contract (creating and maintaining the account, operating the Platform, processing messages, support) — performance of a contract.
  • Billing and issuing documents — performance of a contract and compliance with a legal or regulatory obligation.
  • Security, fraud and abuse prevention, and access logging — legitimate interest and compliance with a legal obligation, including, in Brazil, the Internet Civil Framework (Law No. 12,965/2014).
  • Communications about the service (notices, changes, billing) — performance of a contract and legitimate interest.
  • Improving and developing the Platform, using aggregated or anonymized data whenever possible — legitimate interest.
  • Regular exercise of rights in judicial, administrative or arbitration proceedings.
  • Consent, when required, for example for marketing communications — which you can withdraw at any time.

4. Data sharing

We do not sell personal data. We may share it with third parties strictly to operate the Platform, to the extent necessary, in the following categories:

  • Channel providers: Meta (WhatsApp, Instagram and Messenger), Telegram, SMS and email providers, to deliver and receive messages through the connections the Customer sets up.
  • Artificial intelligence providers: when the Customer uses AI features, the content needed for the reply is sent to the configured provider (for example, OpenAI, Anthropic or Google).
  • Payment providers: gateways such as Mercado Pago, Stripe, PayPal and Paddle, to process charges.
  • Infrastructure and technical services: hosting, file storage, real-time communication (for example, Pusher), transactional email delivery and monitoring.
  • Authorities: when there is a legal obligation, a court order or a request from a competent authority.
  • Corporate transactions: in the event of a merger, acquisition or reorganization, with assurance that the new entity will respect this Policy.

We require our suppliers to apply protection measures consistent with applicable data protection law.

5. International transfers

Some of the suppliers above may process data outside Brazil, including in the United States. In those cases, the transfer is carried out in the situations allowed by applicable data protection law (in Brazil, article 33 of the LGPD), with appropriate safeguards, such as standard contractual clauses or the data subject’s specific consent when required.

6. Storage and retention

  • We keep account data and Customer Content while the account is active.
  • After the account is closed or a deletion request is made, data is deleted or anonymized within 30 (thirty) days, except for data we must keep to comply with a legal or regulatory obligation or for the regular exercise of rights.
  • Application access logs are kept for at least 6 (six) months (article 15 of Brazil’s Internet Civil Framework).
  • Tax and billing data is kept for the period required by law, as a rule 5 (five) years.
  • Backups may keep data for a limited additional period, until they are rotated.

7. Security

We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration or disclosure, including: encrypted connections (HTTPS), encrypted storage of integration credentials, role-based access control, two-step verification, an audit log and separation of environments. No system is completely free of risk; if a security incident occurs that may create a relevant risk or harm to data subjects, we will notify the competent data protection authority (in Brazil, the National Data Protection Authority, ANPD) and the affected data subjects, as required by applicable law.

8. Your rights

Under applicable data protection law (in Brazil, article 18 of the LGPD), data subjects may request the following at any time, by making a request:

  • confirmation that processing exists and access to the data;
  • correction of incomplete, inaccurate or out-of-date data;
  • anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
  • data portability;
  • deletion of data processed with consent;
  • information about the entities we share data with;
  • information about the possibility of not giving consent and its consequences;
  • withdrawal of consent;
  • objection to processing carried out on a basis other than consent, if the law is not followed.

To exercise your rights, write to [email protected]. We will respond within 15 (fifteen) days. We may ask for information to confirm your identity. Platform users can also export their workspace data from the account settings. You may also file a complaint with the competent data protection authority (in Brazil, the ANPD).

9. Children and teenagers

The Platform is intended for people over 18 and is not directed at children. We do not knowingly collect data from minors. If we find improper processing, we will delete the data.

10. Data protection officer (DPO)

The channel for communicating with the person in charge of personal data processing, for data subjects and for the data protection authority, is [email protected].

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced on the Platform or by email. The date of the last update is shown at the top of this page.

12. Contact

If you have questions about this Policy or about how your data is handled: [email protected].