Privacy Policy
LGPD · Oct 2026.

consultor.app is the controller of the personal data of the platform's Users, under Art. 5, VI of the LGPD (Law No. 13,709/2018).

With regard to personal data of the Users' clients processed within the platform: the User acts as controller and consultor.app acts as processor, under Art. 5, VII and Art. 39 of the LGPD. The User is responsible for defining the purposes and legal bases for that processing.

Privacy and DPO: contact@consultor.app

Provided by the data subject:

• Full name and email address
• Password: stored only as a bcrypt hash; never in plain text and never accessible to any employee of the Operator
• Professional profile (field of work, bio, photo)
• Content created on the platform: methodologies, conversation history with the agent, knowledge base, documents and client data
• Payment data: processed directly by Stripe; consultor.app does not store card numbers, CVV or bank details

Collected automatically:

• IP address and approximate geolocation (city level)
• Device and browser identifiers (user agent, resolution)
• Access and usage logs of the platform (pages, actions, timestamps)
• Essential and analytics cookies (detailed in Section 9)

From integrations authorized by the User:

• Google Workspace: Calendar events, Drive files and Meet links shared by the User
• Slack: messages and channels authorized by the User
• Notion: pages and databases authorized by the User

When the User connects a Google account, consultor.app requests access only to the scopes below, and only after the User authorizes it on Google's consent screen. Without that authorization, no Google data is read.

Data accessed and purpose:

• Google account email address: to identify the User and allow sign-in
• Google Calendar (calendar.events, calendar.events.freebusy): to check free times and read events, and to create, update or cancel events and Meet links for meetings and bookings the User requests on the platform
• Google Drive (drive.file, drive.readonly, drive.metadata.readonly and, in the meetings and workflows integration, drive): to list and read files and folders the User chooses to link to a project, and to create or share files in folders the User indicates, so the User can consult them, organize them and use them as context for the agent within the platform

How we use and protect it:

• We use Google data only to provide and improve the User-facing features described above
• We do not sell Google data, do not use it for advertising and do not transfer it to third parties, except when necessary to provide the requested feature, to comply with the law or with the User's consent
• We do not use Google data to develop, improve or train general-purpose artificial intelligence or machine learning models
• No one at consultor.app reads the User's Google data, except with express consent, for security, to meet a legal obligation or when required for support requested by the User
• Access tokens are stored encrypted and used only on the server

Retention, revocation and deletion:

• The User can disconnect the Google account at any time in Settings → Integrations. On disconnecting, we revoke the token with Google and delete the connection and associated links
• Access can also be removed at myaccount.google.com/permissions
• To request deletion of data obtained from Google, write to the contact given in Section 1

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can connect consultor.app to third-party AI apps, such as Claude, ChatGPT and Cursor, through the MCP protocol. When authorizing, you choose a workspace and whether the app can create, edit and delete. The app then acts with the permissions of your role in that workspace, and nothing beyond them.

• What the AI app accesses: only what consultor.app's tools return in response to requests made in the app, such as clients, deals, contacts, projects, tasks, reports, meetings and methodologies of the authorized workspace.
• What we keep: the authorization record (app, workspace, permissions, date and last use) and the access tokens, only in hashed form. We do not receive or keep the conversations you have in the AI app.
• Activity log: for each call we keep which app and which person made it, the tool used, the data sent by the app (with passwords, tokens, individual tax IDs and card numbers masked), an excerpt of the response, how long it took and whether it succeeded. For changes, we also keep the previous and new value of each field, to show the history and allow undoing. You can see your activity in Settings → AI apps; workspace owners and admins can see everyone's.
• AI app provider: what the tools return is then handled by the provider of the app you connected (for example Anthropic or OpenAI), under its privacy policy.
• Retention and control: the authorization is valid until revoked. You can revoke it at any time in Settings → AI apps, and it also stops being valid if you leave the workspace. Access tokens expire in 1 hour; refresh tokens after 30 days without use.

The Consultor app uses the same account and the same data as the web platform. It only asks for access to device features when you use the corresponding function, and you can deny or revoke each permission in the system settings:

• Microphone: calls, dictation for Consultor AI and meeting recording
• Camera: video calls and photos you attach
• Photos and files: only the items you choose to attach
• Notifications: a device identifier (push token) to alert you to messages, tasks and calls; it is deleted when you sign out

The app records usage events and errors (PostHog) to fix failures and improve the product, with no tracking across third-party apps or websites and no advertising.

Data is shared only with the suppliers needed to operate the platform, listed below. Suppliers marked "when configured" only receive data if the User enables that integration in the workspace.

No personal data is sold, rented or shared with third parties for marketing, advertising or any purpose not described in this Policy.

Some of the suppliers listed in Section 4 process data outside Brazil: most in the United States (for example Vercel, OpenAI, Google, Meta and Stripe) and the DeepSeek and Alibaba (Qwen) AI models in China. These international transfers seek to rely on mechanisms recognized by the LGPD, such as Standard Contractual Clauses, when offered by the supplier.

There is currently no option for data residency restricted to a single geographic region. Questions about a specific supplier can be sent to the DPO.

Data subjects have the following rights, which can be exercised at any time and at no cost:

To exercise any of these rights, send a request to contact@consultor.app. The response time is up to 15 calendar days; most requests are handled within 72 hours.

Delete your account: you can delete the account yourself in the app (Profile → My profile → Delete account) or on the web (Settings → Profile). The steps and what happens to the data are at consultor.app/en/privacy/excluir-conta.

• Active account: data kept for as long as the contract is in force
• After cancellation: 30 days for export by the User; secure destruction within a further 30 days, including backups
• Security logs: retained for 90 days for audit and incident response purposes
• Legal obligations: tax and contractual data and records required by law are retained for the applicable legal period, at least 5 years (Brazilian Civil Code, Art. 206)

Technical and organizational measures in place:

• Encryption in transit (TLS) on all connections
• Encryption at rest offered by the database provider
• Row Level Security (RLS) in Postgres: isolation by workspace
• RBAC with access roles and the principle of least privilege
• Mandatory human approval (human in the loop) before any irreversible action by the AI agent
• Audit trail of the actions carried out by the AI agent

To report security vulnerabilities: contact@consultor.app (responsible disclosure program).

Essential: needed for authentication, session security and the basic operation of the platform. They cannot be disabled without compromising the service.

Analytics: collect aggregated, anonymous data about use of the platform to improve the product. Opt-out is available in the account settings.

Marketing: with your consent, we use the Meta Pixel and the Google Ads tag to measure and target our ads. Without consent, the Meta Pixel is not loaded and the Google tag only sends cookieless signals that do not identify you. To change your choice, clear this site's data in your browser: the cookie notice appears again.

The service is not directed at people under 18 and does not intentionally collect personal data from minors. If the Operator identifies that a minor's data was collected without the consent of their legal guardian, that data will be deleted immediately. To report this: contact@consultor.app.

In the event of a security incident that may entail significant risk or harm to data subjects, consultor.app will notify Brazil's data protection authority (ANPD) and the affected data subjects within 72 hours of confirming the incident, under Art. 48 of the LGPD.

The notification will include:

• The nature and category of the personal data affected
• The estimated number of data subjects involved
• The technical and organizational measures taken to mitigate the effects
• The DPO's contact details: contact@consultor.app

Significant changes to this Policy will be notified by email at least 15 days before the effective date. The earlier version will be available on request to the DPO.

Continued use of the platform after the effective date of the changes constitutes acceptance of the new Policy. If the User does not agree, the User may cancel the account with no penalty before the effective date.