Privacy Policy
Last updated: April 22, 2026
1. Who we are
OmniFlow AI (brand name "VendedorGPT") is a product operated by Duxfit Academias Ltda, a Brazilian company (CNPJ 57.766.895/0001-97), providing WhatsApp Business automation and Meta Ads analytics services built on Meta's Cloud API. Duxfit Academias Ltda is the data controller under Brazilian LGPD and the Meta Platform Terms.
2. Data we collect
- WhatsApp Business Account (WABA) identifiers and phone-number IDs.
- Inbound WhatsApp message content strictly necessary to route and respond to customer inquiries.
- Meta Ads campaign metadata accessed with your authorization (
ads_read,pages_show_list,pages_read_engagement). - Account and authentication data from Meta Login for Business.
3. How we use data
We use data solely to (a) deliver WhatsApp messaging automation, (b) report campaign performance, (c) send conversion events via the Meta Conversions API, and (d) comply with legal obligations. We do not sell or rent personal data.
4. Sharing & Data Processors
Data is shared only with Meta Platforms (as required by the underlying APIs) and with the following infrastructure providers, acting as data processors on our behalf under data-processing agreements:
- Vercel Inc. (USA) — application hosting and serverless execution
- Cloudflare Inc. (USA) — DNS, CDN and WAF
- Supabase Inc. (USA) — database and authentication (when enabled)
We never sell or rent personal data.
5. Retention
We retain operational data for the lifetime of the connected account plus 90 days, then purge it. Message content is retained only as long as required to support the conversation thread.
6. Your rights
You can request access, correction, or deletion of your data at any time. See Data Deletion for the self-service instructions and Meta callback endpoint.
7. Security
All data is encrypted in transit (TLS 1.2+) and at rest. Access is limited to authenticated tenants. Webhook payloads are verified with HMAC SHA-256 against Meta's app secret.
8. Contact
Data controller: Duxfit Academias Ltda · CNPJ 57.766.895/0001-97 · São Paulo, Brazil. Privacy inquiries and LGPD requests: [email protected]. See also Contact.