// POLICIES

Privacy Policy

// Last updated: August 1, 2026

1. Who we are

Next Level Tech is a brand of GIANONI INFORMATICA LTDA, Brazilian company ID (CNPJ) 34.689.648/0001-39, headquartered at R Alto Pacajá, 53, Sala 04, Jardim Belém, São Paulo/SP, 03809-080, Brazil ("NLT", "we"). This policy explains how we process personal data on the website nextltech.com.br and on the Faxty platform, our WhatsApp customer service solution.

2. What data we process

2.1 On the website

  • Contact form: name, company, email, phone and the message you write.
  • Analytics: we use Google Analytics to measure website traffic (pages visited, traffic source, device type). This data is collected through Google cookies and processed in aggregate form.

2.2 On the Faxty platform

  • Message content exchanged between the client company and its customers on WhatsApp.
  • Phone numbers of the contacts who write to the client company's WhatsApp.
  • WhatsApp profile names of those contacts.
  • Platform user account data (the client company's agents and managers): name, corporate email and usage records.

3. Why we use the data

There is a single purpose: providing the customer service operation contracted by the client company. Messages are received, stored and answered (by the AI or by the company's human team) so that customer service happens. Website form data is used only to reply to your inquiry. We do not sell personal data and we do not use it for advertising.

4. Legal bases (LGPD)

Under Brazil's data protection law (LGPD, Law 13,709/2018):

  • Performance of a contract (art. 7, V): processing is necessary to provide the service contracted by the client company.
  • Legitimate interest (art. 7, IX): to answer business inquiries, keep the platform secure and improve the service, always within what the data subject can reasonably expect.

5. Roles: controller and processor

In the use of Faxty, the client company is the controller of its customers' personal data: it decides to serve customers on WhatsApp and defines the rules of that service. NLT acts as the processor, handling data on behalf of the client company and under its instructions. For website form data, NLT is the controller.

6. Who we share data with (sub-processors)

To provide the service, we use vendors that process data on our behalf:

  • Meta Platforms — WhatsApp Business Platform, through which the messages flow.
  • Large language model (LLM) providers — process message content to generate replies and suggestions. Conversation content is not used to train artificial intelligence models, whether ours or third parties'.
  • Cloud infrastructure and database providers — host the platform and store the data.
  • Google — website analytics, as described in section 2.1.

All of them operate under contract and only for the purposes described here. Each client company's data is logically isolated: one company never has access to another company's conversations.

7. International data transfers

Some of the vendors above (Meta, LLM and cloud providers) may process data outside Brazil. When that happens, the transfer follows the mechanisms of art. 33 of the LGPD, such as contractual clauses ensuring a level of protection equivalent to this policy.

8. How long we keep the data

  • Faxty platform data: kept while the contract with the client company is active. After termination, data is deleted within 90 days, unless a legal retention obligation applies.
  • Website form data: kept for up to 12 months after the last contact.

9. Your rights

The LGPD grants you, as a data subject, the right to confirm the existence of processing, and to access, correct, anonymize, port and delete your data, as well as to withdraw consent where applicable. To exercise any right, write to nextlevel@nextltech.com.br. If your data is processed on Faxty on behalf of a client company, you may also contact the company you talked to directly — it is the controller. Step-by-step instructions are available on our data deletion page.

10. Data Protection Officer (DPO)

NLT's data protection officer can be reached at nextlevel@nextltech.com.br.

11. Security

We adopt technical and administrative measures to protect data: encryption in transit, role-based access control, logical isolation between clients and activity logging on the platform.

12. Changes to this policy

We may update this policy to reflect changes in the service or in legislation. The date at the top indicates the current version. Relevant changes will be communicated to client companies.