This policy explains what personal data NukHub processes, why, who we share it with, and how you can exercise your rights under Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD").
1. Who we are
NukHub is a brand of Exodus Serviços de Informação Ltda, CNPJ (Brazilian company ID) 07.868.683/0001-42, headquartered at Av. Onze de Junho, 1291, cj. 131, São Paulo - SP, Brazil ("NukHub", "we").
Contact for privacy matters, including our data protection officer: contato@nukhub.com.br.
2. Who this policy applies to
- Visitors to the nukhub.com.br website.
- Customers: companies that subscribe to the NukHub platform, and the people who use it on their behalf (administrators, supervisors, and agents).
- End consumers: people who chat with a customer company on WhatsApp or Messenger when that company uses NukHub.
3. Our role in each case
For website visitor data and customer account data, NukHub is the controller: we decide how and why this data is processed.
For conversations between a customer company and its consumers, NukHub is the processor: we process that data on behalf of the customer company, which is the controller and decides what it is used for. If you chatted with a company on WhatsApp or Messenger, requests about that data should go to that company first. We help it respond.
4. Data we process
Website visitors
- Data you submit in the contact form: name, company, email, WhatsApp number (optional), interest, message, and the site language at the time of sending.
- Technical access data, such as IP address and browser, processed by our hosting provider to deliver the site securely.
- Your chosen language is stored only in your browser. The site does not use tracking, advertising, or analytics cookies.
Customers and platform users
- Company and user registration data: name, email, access role, and login credentials.
- Billing and platform usage data.
- Usage logs needed for security and support.
End consumers (on behalf of the customer company)
- Phone number or WhatsApp/Messenger identifier and profile name.
- Conversation content, including images, audio, video, and documents sent.
- Contact lists, consent records, and opt-out records provided by the customer company.
- Service tickets, bot conversation history, and satisfaction survey answers.
5. Why we use data and the legal basis
- Replying to contacts and sales inquiries made through the site: pre-contractual steps and legitimate interest.
- Providing the contracted service: sending and receiving messages, running the bot, AI, service queue, tickets, and reports: performance of a contract.
- Security, fraud prevention, and support: legitimate interest.
- Complying with legal and regulatory obligations, including tax obligations: legal obligation.
As controller, the customer company is responsible for having a legal basis to contact its consumers, including obtaining the opt-in required by WhatsApp policies.
6. Artificial intelligence
When the customer company enables AI in its bot flow, the conversation content and the documents or pages the company designates are sent to an AI provider to generate the reply. NukHub does not use this data to train its own models, and it uses the provider under commercial terms that do not allow the provider to use submitted data to train its models.
7. Who we share data with
We do not sell personal data. We share only what is necessary with vendors that help us provide the service:
- Meta Platforms (WhatsApp Business Platform and Messenger), to send and receive messages.
- AI provider, when the customer company enables this feature.
- Cloud infrastructure providers that host the platform and its data.
- Cloudflare, which hosts this website and manages the domain.
- Web3Forms, which delivers website form messages to our email.
- Zoho, our email provider.
- Public authorities, when required by law or court order.
8. International transfers
Some of these vendors store or process data outside Brazil, mainly in the United States. In these cases, we adopt the safeguards set out in Article 33 of the LGPD, such as contractual clauses requiring an adequate level of protection.
9. How long we keep data
- Website form messages: for as long as needed for the sales conversation, and then for the period required by law.
- Conversation data on the platform: each customer company sets its own retention period. When it expires, resolved tickets and bot histories are deleted automatically. Open tickets are never deleted automatically.
- When the contract ends: the customer company can export its data before deletion, within the period set in the contract.
10. Your rights
Under the LGPD, you can request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and withdrawal of consent where consent is the legal basis.
To exercise these rights, write to contato@nukhub.com.br. We reply within 15 days. If the request concerns a conversation with a customer company, we forward it to that company and support the response. See also our data deletion instructions.
You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
11. Security
We use encrypted connections (HTTPS), isolation of each customer company's data in the database, role-based access control, and activity logs. No system is completely immune to incidents. If an incident may pose a relevant risk, we will notify those affected and the ANPD, as required by law.
12. Children and teenagers
NukHub is a business service and is not directed at people under 18.
13. Changes
We may update this policy. The date of the current version is shown at the top of the page. Relevant changes are communicated to customers through their registered contact channels.