Anuntech Console Privacy Policy

This is a courtesy translation. The Portuguese version is the official text and prevails in case of any discrepancy.

Last updated: October 22, 2026. Version 1.1.

This policy explains what personal data Anuntech Console processes, for what purposes, who it is shared with, how long it is kept and how you exercise your rights. It applies to the console.anuntech.com website and to the "Anuntech Console" app for iPhone and Android.

1. Who we are

The Console belongs to ANUNTECH CORPORATE LTDA, CNPJ (Brazilian company registration number) 43.619.917/0001-81, with its registered office at Rua Uruguai, 34, sala 04, Centro, Caieiras/SP, Brazil, postal code (CEP) 07700-665. In this policy, "Anuntech", "we", "us" and "our" refer to that company.

Privacy channel: legal@anuntech.com.
Data protection officer (the "encarregado" under the LGPD): Kauan Ketner, through the channel above.
WhatsApp support: +55 (11) 5107-3435.

2. Who the Console is for

The Console is a business-to-business portal. It is used by people who work at Anuntech's client companies and by the Anuntech team.

Nobody can create an account on their own. You only get in if Anuntech or an Administrator at your company grants access to your email address.

The Console is not intended for anyone under 18.

3. Our role for each type of data

The LGPD (Brazil's General Data Protection Law, Law 13,709/2018) calls the party that makes decisions about the data the controller, and the party that processes data on behalf of another person or company the processor. In the Console, Anuntech plays both roles.

Anuntech is the controller of the data in your account and about your use of the Console: name, email addresses, WhatsApp number, photo, sign-ins, sessions, security, activity log, app devices, conversations with the assistant and preferences. It is also the controller of the data that exists because of the business relationship with your company: billing details, invoices, contracts, signatures and responses to quotes.

Anuntech is a processor of the personal data of other people that your company places in the Console for Anuntech to work with: for example, data about your company's customers mentioned in a ticket, in attachments, in project tasks, in bookmarks or in the systems that open inside the Console. In those cases, your company decides about that data, and Anuntech follows its contract and instructions.

Your company also decides who gets access, what role each person has (Administrator or Member) and which email addresses and phone numbers receive notices.

4. What data we process

4.1 Your account data

• Name.
• Primary email address and any additional email addresses you link.
• WhatsApp number, if you choose to link one. It is optional and only takes effect after it is confirmed with a code.
• Profile photo you upload, or an illustrated avatar. Every new account receives a randomly chosen illustrated avatar.
• The company or companies you have access to, your role and what you are allowed to see.
• Your two-step verification preference and the channel you chose.

4.2 Sign-in and security

• One-time codes sent by email or WhatsApp. We only keep an encrypted version (hash) of the code, which is valid for 5 minutes.
• Sign in with Google, on the website only: we receive from Google your name, your verified email address and your Google account identifier. We do not use your Google photo.
• Sessions: date and time, IP address and browser or device (user agent). You can see your last 20 sessions under Minha conta (My account).
• Counters of attempts and of codes sent, to prevent abuse.

4.3 Activity log

We record who made each relevant change, in which company and when. For example: creating or replying to a ticket, changing access, sending or signing a contract, opening a system inside the Console. This serves security purposes, helps resolve questions and provides evidence of what happened.

4.4 What you and your company put in the Console

• Tickets: type, subject, description, messages, attachments (PDF, PNG, JPEG or WebP) and the channel they came from.
• Projects: tasks, comments, attachments, approvals and issue reports.
• Bookmarks and whiteboards (drawing boards).
• Hours logged by the team on each ticket and hour bank reports.
• Contract change requests and responses to quotes.

4.5 Contracts and quotes

When you sign a contract in the Console, we keep: your name and email address at the time of signing, date and time, IP address, browser, the method you used to prove your identity and the code (hash) of the signed version.

When you accept or decline a quote on behalf of your company, we keep: your name, email address, date and time and IP address.

4.6 Company billing data

Legal name or name, CNPJ or CPF (Brazilian individual taxpayer number), billing email address, phone number, billing address, invoices, boletos (Brazilian bank payment slips), Pix (Brazilian instant payments), due dates and payments. When the company is registered under a CPF, this data belongs to an individual and is also protected by this policy.

4.7 Notice contacts

Your company's Administrator may designate up to 10 email addresses and 10 phone numbers per subject (Finance and Tickets) to receive notices. These people do not get access to the Console. We also keep a record of each notice sent: recipient, subject, text and whether it was delivered.

4.8 Assistant, dictation and other artificial intelligence features

• Conversations with the assistant: your messages, the replies, the conversation title and what the assistant looked up. We also keep the confirmation cards for each proposed action and the daily usage count.
• Dictation, on the website and in the app: the audio is sent for transcription and is not stored anywhere. On your phone, the recording is deleted as soon as it is sent. Only the text you decide to send is kept.
• The Anuntech team uses AI features to suggest replies and priorities for tickets and to organize projects. Everything becomes a draft that a person reviews. The Console does not make decisions about you based solely on automated processing.

4.9 Mobile app data

• The device's notification token, platform (iOS or Android), app version and date of last use. Only if you allow notifications on the device.
• The app session is kept in the phone's own secure storage.
• Face ID, Touch ID or Android biometrics: unlocking is handled by the phone's operating system. Anuntech never receives your biometric data or any data derived from it.
• Camera, photos and files: the app only asks for access when you choose to take or send a photo, or attach a file (profile photo, ticket or task attachment, bookmark). Only what you choose is read and sent. Photos are downsized on the phone itself before they are sent.
• Microphone: the app only asks for access when you tap Falar (Speak) to dictate text. The audio is sent for transcription and then deleted from the phone (section 4.8).
• The app does not ask for access to your location or your contacts.

5. Why we use data and on what legal basis

We do not use your data for advertising. We do not sell data. We do not track you across other companies' apps or websites.

6. Who we share data with

We share only what is necessary with suppliers that work for Anuntech. They process the data according to our instructions and their own data protection terms.

Rules for artificial intelligence: every request containing client data asks the provider not to retain the data and not to use it to train models. If no provider accepts these conditions, the request fails instead of going to another provider. We do not use free models.

We also share data:

• With the systems that open inside the Console for your company: when you open one of them, the Console sends that system your identifier, name, email address, company and role, so it knows who signed in.
• With authorities, when required by law or by court order. The content of communications is only handed over under a court order.
• With any successor to Anuntech in a merger, sale or reorganization, subject to the rules of this policy.

When you use the website, your browser also downloads resources from third parties: the support chat (cdn.wts.chat) and the fonts for the drawing board (esm.sh). These services receive your IP address, as with any access on the internet.

7. Transfers to other countries

Several suppliers are located in the United States. As a result, your data is transferred outside Brazil. We carry out these transfers under article 33 of the LGPD, with the data protection safeguards set out in each supplier's contracts and terms, and only to the extent necessary for the service to work.

8. Cookies and storage on the device

The Console does not use third-party advertising or analytics cookies.

The website support chat (WTS Chat) may store data in the browser to keep the conversation going.

These cookies are necessary for the Console to work or to remember choices you made. You can delete them in your browser. Without the session cookie, you cannot sign in.

In the app, the session, the notification token, the choice to use Face ID, the theme and the option to hide values are kept in the phone's storage. They are removed when you sign out or delete the app.

9. How long we keep data

We also keep data for as long as necessary to comply with the law, respond to authorities or defend rights in legal proceedings.

10. How to delete your account

You can delete your account at any time, on the website or in the app:

• On the website: sign in at console.anuntech.com, open Minha conta (My account) and tap Excluir conta (Delete account).
• In the app: open the Conta (Account) tab and tap Excluir conta (Delete account).
• Without access to your account: write to legal@anuntech.com from the registered email address.

To confirm, we send a new code by email or to your verified WhatsApp number and ask you to type EXCLUIR (the Portuguese word for "delete").

What we delete immediately: your name (which then appears as "Conta excluída", meaning "Deleted account"), your primary email address, additional email addresses, phone number, photo, sessions, Google link, two-step verification settings, assistant conversations and cards, getting-started steps, incomplete attachment uploads and the bookmark folders only you could see, along with their contents. Your access to companies and to the team becomes inactive and you are signed out of the Console. Notifications to your devices are turned off.

What remains stored, and why: the company records you took part in are not deleted, because they belong to the company or serve as evidence. Tickets, messages and attachments you sent, tasks and comments, hours, invoices and the activity log remain. In those records, the author appears as "Conta excluída" ("Deleted account"). Contract signatures and responses to quotes keep the name, email address, IP address and browser from the moment you signed or responded, because they are the evidence of the contract. Your email address remains in the records of inactive access, in the activity log and in the history of notices already sent.

After deletion, we send a confirmation to your former email address. If you were your company's only Administrator, the Anuntech team is notified so that the company can appoint someone else.

If you would like us to also address data that remains stored, write to the privacy channel. We will assess the request and explain what can be deleted and what the law requires us to keep.

11. Your rights

Under the General Data Protection Law (LGPD), you may request:

• confirmation that we process your data;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the law;
• portability of your data to another provider;
• deletion of data processed based on your consent;
• information about who we share your data with;
• information about the possibility of not giving consent and what happens if you do not give it;
• withdrawal of consent;
• objection to processing you consider unlawful;
• review of decisions made solely on the basis of automated processing that affect your interests.

You can do many of these things yourself under Minha conta (My account): change your name, email address, WhatsApp number and photo, see your sessions and delete your account.

For other requests, write to legal@anuntech.com. We may ask you to confirm that you are the data subject. We respond within 15 days.

If the request concerns data that your company placed in the Console and that it controls (section 3), we forward the request to the company and let you know.

You may also file a complaint with the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd.

12. How we protect data

• Connections are always encrypted (HTTPS) on the website and in the app.
• Passwordless sign-in, using a one-time code stored in encrypted form, with a limit on attempts and optional two-step verification.
• Every read and every change is authorized on the server. One company cannot see another company's data.
• Members cannot see financial amounts. The Administrator can limit what each Member sees.
• The assistant only makes changes after you confirm them on a card.
• Photos are kept in private storage. Attachments are checked before they are accepted.
• Activity log of relevant changes, periodic security audits and automated checks for flaws before each release.

No system is completely secure. If an incident occurs that may pose a relevant risk or harm to you, we will notify you and the ANPD, as required by law.

13. Changes to this policy

We may update this policy when the Console changes or when the law requires it. The date at the top shows the version in force. If the change is significant, we will let you know in the Console or by email before it takes effect.

14. Governing law and venue

This policy is governed by Brazilian law, in particular Law 13,709/2018 (LGPD) and Law 12,965/2014 (Marco Civil da Internet). The courts of the judicial district of Caieiras, São Paulo, Brazil, are chosen as the venue, without prejudice to a consumer's right to bring an action in the courts of their own domicile.

15. Contact us

Privacy channel: legal@anuntech.com.
Data protection officer (encarregado): Kauan Ketner.
WhatsApp: +55 (11) 5107-3435.
Address: Rua Uruguai, 34, sala 04, Centro, Caieiras/SP, Brazil, postal code (CEP) 07700-665.