Collexa Tech — Privacy Policy

Collexa Tech (the “Company”) is committed to maintaining robust privacy protections for its users. This Privacy Policy explains how we collect, use, store, and protect the information you provide to us, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018), the EU General Data Protection Regulation (GDPR — Regulation 2016/679), and other applicable privacy laws.

For purposes of this document:

• “Site” refers to the Company’s website, accessible at https://collexa.tech.
• “Service” refers to Collexa Tech’s Voice AI platform, through which users can automate customer service, billing, and sales with conversational and voice AI solutions.
• “We”, “us”, and “our” refer to Collexa Tech.
• “You” refers to you, as a user of our Site or Service.

I. Information We Collect

1. Information you provide directly

When you contact us, request a demo, or create an account, we collect:

• Full name
• Email address
• Company name
• Phone number
• Message or description of your needs

2. Voice and call data (live demo)

When you request a live call demonstration through the Site, you expressly consent to a real-time voice session. This call may be recorded and monitored for quality assurance, service improvement, and AI model training purposes. The phone number you provide is used exclusively to conduct the demonstration.

3. Automatically collected information

When you browse the Site, we automatically collect non-personal information such as:

• Pages visited and navigation patterns
• Browser type, language, and operating system
• Referring URL and exit pages
• IP address (anonymized where possible)
• Date and time of access

This information is collected through cookies and analytics tools described in Section III.

4. Children’s privacy

The Site and the Service are not directed to anyone under 13 years of age (or 16 for residents of the European Union). We do not knowingly collect information from minors. If this occurs inadvertently, we will delete the data as soon as we become aware. Please contact support@collexa.tech if you believe this has occurred.

II. Legal Basis for Processing

We process your personal data under the following legal bases:

You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

III. Cookies and Third-Party Tools

We use the following tools that collect data on the Site:

Google Analytics

We use Google Analytics (ID: G-S8917CXFKL) to analyze traffic and user behavior. Google Analytics collects data such as anonymized IP addresses, device type, pages visited, and session duration. This data is processed by Google LLC, headquartered in the USA. For more information, see the Google Privacy Policy.

Google reCAPTCHA

We use Google reCAPTCHA v3 on Site forms to protect against bots and abuse. reCAPTCHA collects information about user behavior and device fingerprint, which is sent to Google. For more information, see the reCAPTCHA Terms of Service.

Disqus (blog comments)

The blog comment system is provided by Disqus. When you interact with comments, data such as username, email, and IP address may be collected and processed by Disqus, Inc. See the Disqus Privacy Policy.

Essential and preference cookies

We use cookies to store your preferences (such as language) and to maintain your active session. Analytical cookies (Google Analytics) are only activated upon your consent through the cookie banner displayed on your first visit.

IV. How We Use Your Information

We use your information to:

• Respond to your inquiries and demo requests
• Conduct live voice call demonstrations
• Provide technical support and onboarding
• Send transactional and administrative communications
• Analyze and improve Site and Service performance
• Comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.

We may share information with trusted service providers (e.g., hosting infrastructure, email delivery, analytics) who use it exclusively under our direction and in accordance with this Policy.

V. International Data Transfers

The Site uses third-party infrastructure services and tools (such as Google Analytics, Google reCAPTCHA, and Disqus) whose servers may be located outside Brazil or the European Union, including the United States. For such transfers, we adopt appropriate safeguards, including standard contractual clauses approved by the European Commission (GDPR) and equivalent mechanisms required by the LGPD.

VI. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Policy:

After expiration, data is deleted or anonymized, unless legally required to be retained.

VII. How We Protect Your Information

We implement technical and organizational security measures to protect your information, including:

• Encryption in transit (TLS 1.2+/HTTPS)
• Role-based access controls (RBAC)
• Firewalls and infrastructure monitoring
• Security incident response procedures

In the event of a data breach that may pose a risk to your rights, we will notify the relevant supervisory authority and affected individuals within applicable legal deadlines.

No method of transmission over the Internet is 100% secure. By using our Service, you understand and accept these inherent risks.

VIII. Your Rights as a Data Subject

Under the LGPD (art. 18) and GDPR (art. 15–21), you have the following rights:

• Confirmation and access: know whether we process your data and access it
• Correction: request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: of unnecessary or non-compliant data
• Portability: receive your data in a structured, machine-readable format
• Deletion: request erasure of data processed based on consent
• Objection: object to processing based on legitimate interest
• Withdrawal of consent: withdraw consent at any time
• Information on sharing: know which third parties your data is shared with
• Complaint to a supervisory authority: file a complaint with the ANPD (Brazil), the ICO (UK), or the competent authority in your country

To exercise any of these rights, contact us at support@collexa.tech. We will respond within the legal deadline (15 business days under LGPD; 30 days under GDPR).

IX. Links to Other Websites

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. This Policy applies solely to information collected by Collexa Tech through the Site and the Service. We encourage you to read the privacy statements of any third-party sites you visit.

X. Changes to This Policy

We reserve the right to update this Policy at any time. We will notify you of significant changes by email or by a prominent notice on the Site at least 30 days in advance. We recommend checking this page periodically. The date of the last update is always shown at the bottom of this document.

XI. Data Protection Officer and Contact

For questions, rights requests, or complaints related to this Policy:

Collexa Tech

• Data Protection Contact: privacy team
• Email: support@collexa.tech
• Website: https://collexa.tech

Last Updated: March 12, 2026