Privacy Policy
Last updated: October 2026
Preliminary version — this document is under legal review and may be adjusted without changing the practices it describes.
1. Who we are
AutoController is a financial management platform for business groups, operated in Brazil. This policy covers the public site (autocontroller.ai) and the platform (app.autocontroller.ai).
2. Data we process
Account data (name, email, role in the organization), financial and accounting data imported by your organization — via a read-only agent installed in your environment — and technical usage records required to operate and secure the service. We also process the contact data sent with demo or free trial requests, described in their own sections below.
3. Purposes and legal bases
We process data to perform the contract with your organization, comply with legal obligations and, with specific consent, for optional purposes such as meeting recording and product telemetry. To answer commercial contact requests, such as a demo request, the legal basis is legitimate interest. We do not sell personal data.
4. Artificial intelligence
AI-generated analyses process your organization's data with safeguards: before anything is sent to the model, the CPF is replaced by a token and the date of birth by an age range; name, e-mail and phone number are sent unmasked, because the experts need them to identify people. Answers go through numeric validation, and every event is kept in an audit trail.
5. Subprocessors
We use infrastructure and AI vendors that process personal data on our behalf, under contract. The complete, up-to-date list — with each vendor’s purpose, processing locations and transfer basis — is on the subprocessors page.
6. Data residency
Platform data is stored in the São Paulo region (sa-east-1), and backups remain in Brazil. Some vendors process data outside Brazil — the AI models, for example; the countries, the basis for each international transfer and your rights are in the International data transfers section of the subprocessors page.
7. Security
Row-level isolation per organization (RLS), encryption at rest and in transit, sensitive personal data encrypted with AES-256-GCM and an append-only audit trail. Details at autocontroller.ai/seguranca.
8. Retention
We keep data for as long as needed to perform the contract and meet legal obligations; records of processing operations are retained for 5 years.
9. Your rights (LGPD)
You may request confirmation of processing, access, correction, portability, deletion and information about sharing, under article 18 of the LGPD. Requests are handled through the DPO channel.
10. Cookies and telemetry
The site loads no third-party analytics without your prior, explicit consent. No telemetry before opt-in.
11. Data Protection Officer (DPO)
The officer in charge of personal data processing is Anderson Souza dos Santos, reachable at dpo@autocontroller.ai.
12. Changes
Material changes to this policy will be published on this page with a new update date.
Free trial requests
This section supplements the policy above for anyone who requests a free trial of the platform. Request data is processed before any account or organization exists, and AutoController is its controller. Once the trial is created, your data as a user of the account follows the rest of this policy.
Request data
Name, email, company, segment and language; phone and job title are optional and kept only if you provide them. We also record the versions of the Terms of Use and of this Policy shown with the request, the time it was sent and the request status. We do not keep in the request the IP address, which is used only transiently to limit the number of requests, nor campaign parameters (UTM) or free text, and nothing is stored on your device for this.
Purposes and legal bases
| Purpose | Legal basis (LGPD) |
|---|---|
| Create the trial account and organization you requested | Preliminary procedures related to a contract, at the data subject's request (art. 7, V) |
| Follow up on this request, to help with onboarding and purchase, contacting by email only a confirmed address | Legitimate interest (art. 7, IX, and art. 10, I). You may object at any time, and an objection is honored by deleting the request |
| Marketing: newsletters, campaigns or any contact not about this request | Not a purpose of this processing: request data is not used for marketing |
Anyone can enter an email address in the form, so the acceptance given there is the record of the request, not an act attributed to the owner of the address. Nothing is created in your name before your own act: through the link sent to your email, you confirm the address, see the company and segment that will be created, set your password and accept the Terms of Use and this Policy. That acceptance is the one recorded as yours.
Retention of request data
Request data is deleted automatically, according to the status of the request. While the trial has not been created, the period counts from the first submission of the request and is not extended by a new submission from the same address; if the trial activation fails, it counts from the failure. Once the trial is created or the request is closed, it counts from that change.
| Request status | Deletion |
|---|---|
| Received, trial not yet created | 30 days from the request, or 90 days from the activation failure |
| Not completed | 30 days from the request, or 90 days from the activation failure |
| Closed by our team | 30 days from when the request was closed |
| Trial created | 180 days from when the trial was created, or earlier if the organization is deleted |
To send the link, we create a sign-in record that is not yet confirmed. If the address is not confirmed within the 7-day activation period, that record is deleted, unless a request is still in progress or an invitation is pending for the same email.
The audit record of the request lifecycle follows the period in the Retention section and contains no name, email, phone, job title or company.
Your rights and the DPO
Anyone who requested a trial, even without ever using an account, may exercise the rights under article 18 of the LGPD (confirmation, access, correction, deletion and objection) through the DPO channel, dpo@autocontroller.ai. The complete statement of the data is provided within 15 days. If you are also a user of a client organization, the response covers both relationships.
Subprocessors and location
The free trial adds no subprocessors beyond those the platform already uses. Request data is stored in the São Paulo region (sa-east-1), and request emails are sent through the same transactional email service the platform already uses, carrying only the recipient's address and the link, with no text typed into the request.
Demo requests
This section supplements the policy above for anyone who requests a demo through the site form. AutoController is the controller of the request data and uses it only to answer that request.
Request data
Name, email, company and language; phone and a context message are optional and kept only if you provide them. We also record the version of this Policy shown with the request, the time it was sent, the request status and, when it is forwarded, the forwarding status, with none of your data in it. Our team may record a short note on the progress of the request, which is kept with it and which you may ask to read. We do not keep in the request the IP address or campaign parameters (UTM), and nothing is stored on your device for this. Do not include sensitive data (health, religion, political opinion) in the message.
Purposes and legal bases
| Purpose | Legal basis (LGPD) |
|---|---|
| Answer your request: get in touch, schedule and run the demo, and follow up on any negotiation that results from it | Legitimate interest (art. 7, IX, and art. 10, I and II). You may object at any time, and an objection is honored by deleting the request |
| Marketing: newsletters, campaigns or any contact not about this request | Not a purpose of this processing: request data is not used for marketing |
Retention of request data
Request data is deleted automatically, according to the status of the request. The period counts from the last status change or the last submission of the request, whichever is more recent. If you ask for deletion, it happens right away, without waiting for the period.
| Request status | Deletion |
|---|---|
| Received, not yet handled | 30 days |
| Being handled | 180 days |
| Closed with a purchase | 30 days |
| Closed without a purchase | 30 days |
When a copy of the request was sent to the customer management system described below, the copy follows the same periods.
The audit record of the request lifecycle follows the period in the Retention section and contains no name, email, phone, company, message or note.
Your rights and the DPO
Anyone who requested a demo may exercise the rights under article 18 of the LGPD (confirmation, access, correction, deletion and objection) through any channel in which they talk to us, including the DPO channel, dpo@autocontroller.ai. Deletion removes at once every request with the same email, demo and free trial alike, and, when there is a copy in the customer management system, it is deleted there too. The complete statement of the data is provided within 15 days.
Subprocessors and location
Request data is stored on the platform infrastructure in the São Paulo region (sa-east-1). When forwarding is active, a copy of the request goes to the customer management system (CRM) we use to answer the request, operated by a contracted supplier that processes the data only on our behalf; supplier, country and transfer basis are listed at autocontroller.ai/suboperadores. To limit the number of requests, the sender's IP address is used transiently as the key of a submission counter that expires with the counting window, and it is not kept in the request.