1. Data We Collect

We collect information you provide (name, email, billing data, conversation content) and technical data (logs, cookies, device identifiers) required to operate NWconnect.

2. How We Use Data

Data is used to deliver and personalize the service, send operational communications, and meet legal obligations. We never sell personal data to third parties.

3. Sharing

We only share data with essential processors (hosting, payments, messaging) under agreements that enforce confidentiality and compliance with LGPD/GDPR.

4. Retention & Deletion

We retain information while the account is active or as required by law. You can request deletion at privacy@nwconnect.com.br; backups may persist for a limited time.

5. Security

NWconnect uses TLS encryption, token-based authentication, and continuous monitoring. No system is 100% secure, so we encourage you to follow security best practices.

6. Data Subject Rights

You may request access, correction, portability, or restriction of processing. We respond within the timelines defined by applicable legislation.

7. Cookies

Essential cookies are required for authentication; optional analytics cookies can be disabled in your browser, but some features may degrade.

8. International Transfers

When data leaves Brazil or the EU, we rely on Standard Contractual Clauses and partner due diligence to ensure adequate protection.

9. Instagram & Facebook Messenger Integration

When you connect an Instagram Business account or a Facebook Page to NWconnect, you authorize NWconnect to receive, store, and respond to direct messages (DMs) sent by your customers to those accounts, on behalf of your business. For these channels we collect only: message ID, message content, the sender public ID and public name, timestamp, and message type (text, media, etc.). This data is processed solely to display the conversation in your unified inbox and to deliver the replies you or your team send. We never use Instagram or Messenger data for advertising and never sell it to third parties. You can revoke this authorization at any time by disconnecting your Instagram and Facebook accounts under Settings → Integrations in NWconnect; we immediately stop receiving new messages, though messages already stored remain in your database until you remove them. For full deletion, email privacy@nwconnect.com.br or use the Meta data deletion request flow.

10. Google Calendar & Google Meet Integration

When you connect a Google account to NWconnect, you authorize us to access your Google Calendar using the https://www.googleapis.com/auth/calendar.events scope, plus your basic profile (email and name). We use this access exclusively to: (a) create, update and delete calendar events that correspond to appointments and meetings booked through NWconnect; and (b) generate Google Meet video links for online meetings. We never read your calendar: NWconnect issues no request that lists or retrieves calendar events, and it checks for scheduling conflicts only against appointments booked through NWconnect itself. We store only the minimum necessary: an encrypted refresh token, your calendar ID, your Google account email, and the ID and Meet link of the events we created. We never read, store or process the content of events we did not create, never use Google user data for advertising, and never sell or transfer it to third parties. Artificial intelligence: NWconnect uses third-party AI services (Google Gemini API and OpenAI API, both on paid plans and accessed directly, with no aggregator or gateway) to interpret messages your customers send through our own chat channels. No content of your Google Calendar is sent to those services, and no data received from Google APIs is used, transferred or sold to create, train or improve any foundational or generalized artificial intelligence or machine learning model. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. NWconnect use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke this access at any time under Settings → Integrations in NWconnect, or at https://myaccount.google.com/permissions; we immediately stop syncing and delete the stored refresh token. To request deletion of remaining data, email privacy@nwconnect.com.br.

11. Updates

Policy updates may occur periodically. Users will be notified via dashboard alert or email whenever material changes take place.

12. Contact

Contact privacy@nwconnect.com.br or your assigned DPO contact for any questions or requests.