Privacy Policy

Achô Aí (the acho.digital website and the Android app) is run by Pulsolab Tecnologia Ltda, CNPJ 65.025.592/0001-41, with its registered office at Rua Doutor Arlindo Luz, 540, sala 01, Centro, Ourinhos (SP), CEP 19900-011. Pulsolab is the controller of your personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). This policy covers the website and the app.

Our data protection officer is Fabricio Cavalcante Costa de Souza. You can reach them by e-mail at privacidade@acho.digital.

We collect only what the service uses. For each item we give the purpose and the legal basis under art. 7 of the LGPD.

Account. Name, e-mail and password. We keep only a hash of the password, never the password itself. If you sign in with Google, we keep your Google account identifier. For each session we keep the IP address and the browser or device, to keep you signed in and to e-mail you when someone signs in from a new device. We also keep which version of the Terms you accepted and when. If you turn on two-step verification or passkeys, we keep their data, with the codes encrypted. Legal basis: performance of a contract (art. 7, V).

Store. If you list a store, we keep its name, type, description, styles, address or neighborhood, map pin, opening hours, WhatsApp, Instagram, photos, your full name or company name, and the CPF or CNPJ. We use this data to show the store on the map and to check that it exists before we approve it. Legal basis: performance of a contract (art. 7, V) and our legitimate interest in keeping fake stores out (art. 7, IX).

Location. In the app, if you allow it, we read the device's precise location only while you list a store, to place the pin on the map. We do not track your location at any other time. If you choose to show only the area, the pin is rounded to about 1 km before it is saved, and the exact point never reaches our database. Legal basis: performance of a contract (art. 7, V).

Notifications. In the app, we keep the token that Firebase Cloud Messaging gives your device, linked to your account, to send notifications. You can turn them off in Android's settings. Legal basis: performance of a contract (art. 7, V).

What you write. The tasks you create belong to your store or team. Your conversations with the assistant belong to your account, and the messages go to an artificial intelligence provider, which writes the replies. Legal basis: performance of a contract (art. 7, V).

Usage analytics, signed in. While you are signed in, on the website and in the app, PostHog records the screens you open and the actions you take, linked to your account identifier, without your e-mail. We use this to find problems and improve the service. Legal basis: legitimate interest (art. 7, IX). You can turn it off at any time: on the website under Settings, "Privacy" tab; in the app under Settings. The choice applies to all your devices.

Usage analytics, signed out. For people who visit the website without signing in, PostHog, Umami and Google Analytics start only after you accept the cookie notice. If you decline, they do not load. Legal basis: consent (art. 7, I), which you can withdraw at any time.

Error reports. When something breaks, the website, the app and the server send Sentry the technical details of the error: the message, the screen, the browser or the device. In the app, the report carries your account identifier, without your e-mail. On the website, an error also sends a recording of the screen in the moments before it. Error reports do not depend on the cookie notice or on the analytics opt-out. Legal basis: legitimate interest in keeping the service working and secure (art. 7, IX).

Server logs. The server logs requests and what it did with them, with the identifiers of the account and the store involved, for security and to fix faults. Actions taken in a store (such as editing it or sending it for review) go into an audit log with the IP address and the browser. Legal basis: legitimate interest (art. 7, IX).

E-mail and contact. We send verification, password reset, new sign-in and data export e-mails. If an e-mail bounces as invalid or is marked as spam, we keep the address on a block list so we do not send to it again. The contact form sends us your name, e-mail, message and IP address by e-mail. The waitlist keeps only your e-mail. Legal basis: performance of a contract (art. 7, V) and legitimate interest (art. 7, IX).

A store becomes public only after our team approves it. The public page shows the name, type, description, styles, photos, opening hours, WhatsApp, Instagram, neighborhood and map pin. A store that chooses the exact address also shows the address and the exact pin. A store that chooses the area shows only the rounded pin and no address. If you gave a CNPJ, it shows, because it is public company data.

The CPF and the full name or company name are never shown to the public. Neither are the city, state and postal code.

We do not sell your data and we do not use it for advertising. To run the service, these providers process data on our behalf:

• Hosting: the servers Pulsolab rents, which hold the database and the logs.
• Google: sign-in with Google, maps and address search (Google Maps and Places). The text you type into the address search goes to Google.
• Firebase Cloud Messaging, from Google: delivers notifications in the app.
• Bunny.net: stores and serves store photos and data export files.
• Resend: sends e-mail.
• PostHog: usage analytics.
• Sentry: error reports.
• Umami and Google Analytics: visit measurement on the website, only with your consent.
• Anthropic and OpenAI: write the assistant's replies.
• Stripe: processes payments, if you buy a paid plan.

Several of these providers may process data outside Brazil, for example in the United States. In those cases the international transfer follows art. 33 of the LGPD. We also share data when the law or a court order requires it.

• Account and the data linked to it: for as long as the account exists. When you delete the account, we delete it and the data linked to it at once.
• Session: each sign-in lasts 7 days and renews on each day you use the service.
• Items you delete, such as notifications and tasks: they stay in the trash for 30 days, then a daily job deletes them for good.
• Notification token: deleted when the app goes 30 days without renewing it.
• Data export: the download link works for 7 days. After that, we delete the file within minutes.
• Store or team, and what belongs to it: for as long as it exists. When its only owner deletes their account, we delete the store, its public page and its data at once, and its photos within minutes.
• E-mail block list and waitlist: until you ask us to remove you.
• Copies held by providers, such as error reports and usage analytics: they follow each service's own periods.

Under the LGPD (art. 18), you can: confirm whether we process your data and access it; correct wrong data; ask for unnecessary data to be anonymized, blocked or deleted; ask for portability; ask for the deletion of data processed with your consent; learn who we share it with; withdraw consent; and object to processing based on legitimate interest.

You can do much of this yourself in the website's Settings: correct your name on the "Profile" tab; download a copy of everything and turn off usage analytics on the "Privacy" tab; delete the account on the "Danger zone" tab.

Step-by-step instructions to delete the account, including without signing in, are on the page Delete account.

For anything else, write to privacidade@acho.digital. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

All traffic uses HTTPS. We keep only a hash of passwords, and two-step verification codes are encrypted. In the database, each store's data is kept apart by access rules, and only the moderation team sees stores under review.

Achô Aí is for people aged 18 and over. If you know of an account that belongs to a minor, write to us and we will delete it.

We use cookies to keep you signed in and, for visitors who accept them, to measure usage. Each cookie is listed in the Cookie Policy.

When we change this policy, we update the date at the top of the page. If the change matters, we tell account holders before it takes effect.

Questions and requests about your data go to privacidade@acho.digital.