1. Introduction

IFÁ Insights, responsible for the Ilumia platform (“Ilumia”), respects users’ privacy and is committed to protecting the personal data we collect and process. This Privacy Policy describes how we collect, use, store, share, and protect user information, as well as the choices available for you to manage your data.

By using Ilumia’s services, you acknowledge that you have read and agree to this Privacy Policy. We recommend that you read this document carefully, as it contains important information about how we handle your data. Ilumia is a Brazilian-based company that strives to comply with applicable data protection regulations, including the Brazilian General Data Protection Law (LGPD) and, where possible, the European Union's General Data Protection Regulation (GDPR). However, if you have concerns or do not agree with the terms herein, you may choose not to use our services.

2. Data Collected

• Information Provided by the User: When interacting with Ilumia—whether via WhatsApp or other supported channels—you may send audio files, documents, text, links, and other content. These materials may include personal data such as names, contact details, or sensitive/confidential information. You are solely responsible for the data you decide to share.
• Registration Data: If you create an account or use additional Ilumia features, we may collect your name, email address, phone number, and, when applicable, payment information.
• Usage Data: We may store activity logs related to your use of the services (e.g., timestamps of access, interactions with the platform, IP addresses where applicable, device information, and browsing data on our website or associated applications).
• By submitting personal information involving third parties, the user expressly guarantees that they have the necessary authorizations for such sharing and assumes full responsibility for the legality and legitimacy of this information.

Note: Ilumia may use cookies or similar technologies on its website or web applications to enhance user experience. You may configure your browser to block such features, but this may affect some functionalities.

3. Purposes of Data Processing

• Service Provision: We use user-provided information to enable Ilumia’s functionalities, respond to AI requests, store and organize content, and provide additional features (such as intelligent search and report generation).
• Platform Improvement and Optimization: We may analyze usage data and feedback to improve our services, fix bugs, develop new features, and personalize user experience.
• Communications: We may send notifications or messages related to the services, including maintenance notices, security updates, or new feature announcements.
• Protection and Legal Compliance: We may use user information to comply with legal obligations, prevent fraud, investigate unlawful activities, and ensure platform security.
• Marketing and Outreach: We will only use user data for direct marketing or promotional activities for IFÁ Insights services and events if we have your prior consent or if allowed by applicable legislation. Users may opt out of these communications at any time.

4. Data Sharing

• Infrastructure Providers and Partners: IFÁ Insights may share data with essential service providers (e.g., AWS, Azure, Google Cloud) required to operate the platform and store information, always ensuring robust security and confidentiality standards.
• AI Models (OpenAI and Others): Currently, Ilumia primarily uses AI language models developed by OpenAI, a U.S.-based company. According to OpenAI’s Terms of Service and Privacy Policies, they will not share or use user data beyond what is necessary to provide the service. In the future, IFÁ Insights may use other AI models (LLMs) to improve performance, reduce costs, or enhance privacy. When doing so, we will inform users accordingly and observe privacy restrictions and relevant agreements with such providers.
• Legal Requirements and Obligations: In the event of a legal obligation, court order, or request from competent authorities, IFÁ Insights may share data to comply with legal requirements or protect its rights.
• Business Transfers: If IFÁ Insights undergoes mergers, acquisitions, restructurings, or asset sales, users’ data may be transferred to third parties, subject to this Privacy Policy and prior notice where applicable.

5. Information Security

• Encryption and Secure Storage: We adopt security measures, including encryption, firewalls, and access control, to safeguard user data against unauthorized access, misuse, or improper disclosure.
• Third-Party Environments: While Ilumia is often accessed via WhatsApp and similar apps, we are not responsible for security vulnerabilities in those applications or external infrastructures beyond our control.
• Shared Responsibility: Users must also follow best security practices on their devices and networks, as well as protect any credentials used to access our services.

6. Data Retention

We keep collected data for as long as necessary to fulfill the purposes described in this Privacy Policy or as needed to meet legal requirements, resolve disputes, and enforce agreements. Once these purposes are met, data is either deleted or anonymized, unless there is another legal basis justifying extended processing.

7. Data Subjects’ Rights

Depending on the applicable legislation (e.g., Brazil’s LGPD, EU’s GDPR), you may have certain rights regarding your personal data, such as:

• Confirmation of Processing: The right to confirm whether we process your data.
• Access: The right to request details about which personal data we hold and how it is processed.
• Rectification: The right to correct inaccurate, incomplete, or outdated data.
• Anonymization or Erasure: The right to request anonymization or deletion of unnecessary or excessive data, except where storage is required by law.
• Portability: Where applicable, the right to request the transfer of your data to another service provider.
• Withdrawal of Consent: Where data processing relies on your consent, you may withdraw such consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact us using the channels provided in this Privacy Policy.

For your security and privacy protection, IFÁ Insights may request proof of identity before responding to your requests regarding the rights mentioned above.

8. Handling Data for Children and Adolescents

Our services are not directed at individuals under 13 years of age. If you are a minor, you should use the services only with the consent and supervision of a legal guardian. If we discover that we have collected personal data from children or adolescents without proper authorization, we will take steps to delete the information as soon as possible.

9. Cross-Border Data Transfers

IFÁ Insights may process data on servers located outside of the user’s home country or region (including outside the European Union, the United States, or Asia). As a Brazilian-based company, we strive to align with LGPD and, where feasible, GDPR standards. Nonetheless, by choosing to use Ilumia, you acknowledge that your data may be transferred to and stored in jurisdictions with different data protection laws. We implement necessary security measures and contractual safeguards to ensure that personal data remains adequately protected.

If you do not agree with the possibility of your data being processed or stored outside your country or region, please refrain from using the service. Otherwise, your continued use of Ilumia represents your acceptance of these conditions.

10. Changes to this Privacy Policy

IFÁ Insights reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices or legal requirements. When significant changes occur, we will notify users via official channels (such as email or platform notices). Continued use of Ilumia after the changes are posted will be considered acceptance of those updates.

11. Disclaimer on AI Contextualization

The value of the AI responses provided by Ilumia is directly related to the information you choose to share. If you withhold certain details for privacy or compliance reasons, this may reduce the accuracy or contextual relevance of the AI’s outputs. You have full control over what data you send, and you assume the responsibility for any content you provide. The AI models we use (currently OpenAI, potentially others in the future) apply their own privacy and security standards, which may be outside Ilumia’s direct control.

12. Contact

If you have any questions, requests, or complaints regarding this Privacy Policy or the processing of your data, please contact us:

Email: [email protected]
Website: ailumia.ai

We will do our best to respond and resolve any issues within a reasonable timeframe and in compliance with the applicable laws.