Privacy Policy

Effective since August 18, 2026.

This is a translation provided for convenience. The Portuguese version is the official one and prevails in case of any divergence.

UNERA is an artificial intelligence customer service platform: it answers a business’s customers on WhatsApp and on the website chat, books appointments and calls someone from the team when needed. This policy explains, plainly, what data this involves, why it exists and what you can demand regarding it.

1. Who is responsible

UNERA is a product of VALORON TECNOLOGIA E INOVAÇÃO LTDA, a Brazilian company registered under CNPJ no. 65.252.369/0001-37, which operates the website unera.com.br and the platform app.unera.com.br and is responsible for the data processing described here. Contact channels are in section 11.

2. This policy speaks to two different people

It is important to separate them, because the data and the rights are not the same:

Whoever subscribes to UNERA — the owner or the team of the business that uses the platform to serve customers. For this data, UNERA is the controller.
Whoever talks to the customer service — the end consumer who messages that business. This data belongs to the subscribing business, which decides why and for what it collects it; UNERA acts as a processor, handling it on the business’s behalf and following its instructions. Requests about these conversations should be addressed to the business you spoke with — and we help the business fulfil them.

3. What data we process

From whoever subscribes

Registration: name, email, phone and password (stored only as a scrambled code, never as plain text).
Business data: industry, opening hours, address, services, prices and everything provided for the AI to learn how to serve customers.
Billing: data needed to issue and reconcile payments, processed by the payment gateway (section 6). UNERA does not store your card number.
Platform usage: access logs, IP address and actions taken in the dashboard — needed for security and auditing.

From whoever talks to the customer service

WhatsApp number, profile name and, when the customer provides them, email and other contact details.
The content of the messages, including the transcription of voice notes and the description of images sent — this is what allows the AI to understand and reply.
Date, time and status of the conversation (answered, waiting, handed over to a person).
Appointments booked: date, time and who they are for.
On the website chat: the pages visited on that website during the conversation, so the AI knows what is being discussed.

4. What we use it for

Understanding and answering messages — the core purpose of the service.
Booking, rescheduling and reminding about appointments.
Showing the conversations in the subscriber’s dashboard, so the team can follow them and take over whenever they want.
Billing, preventing fraud and complying with legal obligations.
Keeping the service running: technical logs, failure diagnosis and security.

We do not sell personal data, we do not share it for third-party advertising and we do not use one business’s customer conversations to benefit another.

5. Google Calendar — what we access and what we don’t

Connecting Google Calendar is optional and serves two purposes: having the appointment booked by the AI show up in the calendar of whoever provides the service, and making sure the AI never offers a time when that person is already busy.

When you authorize it, UNERA is able to:

Create, change and cancel events in your calendar, related to the appointments booked by the customer service;
Check only your availability — the time slots marked as busy or free.

The availability permission does not show the content of your appointments: we do not read the title, description, participants or location of events we did not create. We also have no access to your Gmail, your contacts, your files or any other data in your Google Account.

This data is used exclusively for the functions above. It is not used to train artificial intelligence models, it is not sold and it is not shared with third parties, except as needed to operate the service or when required by law.

UNERA’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to undo it: in the dashboard, under Company → Meetings → Google Calendar → Disconnect; or, at any time and independently of us, at myaccount.google.com/permissions. When you disconnect, we delete the stored authorization. Appointments already created remain in your calendar — they are real appointments, with people expecting them.

6. Who we share it with

Only with those needed for the service to work, and only what is necessary:

Artificial intelligence providers — receive the content of the conversation to generate the reply, the voice note transcription and the image reading.
WhatsApp — the channel through which the message reaches the end customer.
Google — when Google Calendar is connected, within the limits of section 5.
Payment gateway — processes the subscribers’ payments.
Cloud infrastructure — where the platform runs and the data is stored.
Authorities — upon legal order.

Some of these providers operate outside Brazil, which implies an international data transfer, carried out under the LGPD (Brazil’s General Data Protection Law) and limited to what is necessary to provide the service.

7. How long we keep it

Conversations and customer service history: for as long as the business’s contract with UNERA lasts.
Registration and tax data: for the periods required by law, even after termination.
Access logs: for the period set by the Marco Civil da Internet (Brazil’s Internet Civil Framework).
Google Calendar authorization: until you disconnect or revoke it.

Once the contract ends and the legal periods expire, the data is deleted or anonymized.

8. Security

All traffic is encrypted in transit (HTTPS/TLS).
Passwords are stored only as irreversible codes; third-party authorizations, such as Google Calendar’s, are encrypted in the database.
Each business only sees its own data, with separation checked on every request.
Team access is based on roles and permissions, with a record of what was done.

No system is infallible. In the event of an incident with relevant risk, we notify those affected and the ANPD (Brazil’s National Data Protection Authority), as required by law.

9. Your rights

The LGPD guarantees that you may request, at any time:

confirmation that we process your data and access to it;
correction of anything incomplete or wrong;
anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
portability and information about who we share it with;
withdrawal of consent.

We will reply through the channels in section 11. If you are a consumer who talked to a business’s customer service, the request should first go to that business, which decides about this data — copy us and we will support them.

10. Children and adolescents

The platform is intended for businesses and people over 18. We do not knowingly collect data from children; if such a case is identified, the data is deleted.

11. Contact

Questions, requests and exercise of rights: andre36ster@gmail.com, or through the customer service chat right here at unera.com.br.

12. Changes to this policy

When this policy changes, the date at the top changes too. Relevant changes are announced in the dashboard before they take effect.