[{"data":1,"prerenderedAt":138},["ShallowReactive",2],{"legal-legal_en-privacy":3},{"id":4,"title":5,"body":6,"description":128,"extension":129,"meta":130,"navigation":131,"path":132,"seo":133,"source":134,"stem":135,"version":136,"__hash__":137},"legal_en\u002Flegal\u002Fprivacy.md","Privacy policy",{"type":7,"value":8,"toc":115},"minimark",[9,18,23,26,30,33,36,40,45,50,57,74,78,81,88,91,95,102,106,109],[10,11,12,13,17],"p",{},"Data controller and contact: ",[14,15,16],"strong",{},"[pending]",".",[19,20,22],"h2",{"id":21},"who-handles-the-data","Who handles the data",[10,24,25],{},"For bookings and customer service to end customers, the business decides the purpose and the instructions; Fiuit acts as processor. The business must provide its own identification and its own channel for data subject requests. For user registration, billing and the security of the Fiuit service, the roles and legal bases will be set out in an approved annex.",[19,27,29],{"id":28},"data-and-uses","Data and uses",[10,31,32],{},"The product may record contact identification (name, phone number or channel identifiers, email), language, bookings and resources, messages and transcripts, service metadata, and notes and tags entered by the business. Dashboard users have account data, membership of the business workspace and access and change events.",[10,34,35],{},"The catalog and the schedule make it possible to provide the requested service; queues and automations may send reminders when enabled. Diagnoses, symptoms or unnecessary data should not be recorded in notes or tags. Limits and legal bases are defined per purpose, not inferred from the mere existence of a field in the product.",[19,37,39],{"id":38},"ai-audio-and-channels","AI, audio and channels",[10,41,42,43,17],{},"The assistant uses tools to look up information and request actions; Fiuit’s core system validates every operation. The necessary messages may go through channel and inference providers, as set out in the approved contract. Sending a message does not authorize the use of the data for any future purpose. Without approved authorizations and safeguards, processing of real audio by an external provider and sensitive clinical use are not enabled. The final list of sub-processors, countries, safeguards and data sent is ",[14,44,16],{},[46,47,49],"h3",{"id":48},"shared-location-and-address","Shared location and address",[10,51,52,53,56],{},"When the customer shares their location in the chat and the channel does not include the address text, the server sends ",[14,54,55],{},"only the coordinates"," (and the language) to Google’s Geocoding API to obtain the address, which only fills empty address fields of the order or the customer after the customer confirms it. No name, phone number or identifiers are sent.",[10,58,59,60,63,64,67,68,71,72,17],{},"When the customer ",[14,61,62],{},"types"," the address in the chat (for example, for a service at a destination), the server sends ",[14,65,66],{},"the typed address text"," (up to 300 characters), the language and the business’s country as a search hint to the same API, to normalize it and obtain the coordinates; again, no name, phone number or identifiers are sent. If the search is ambiguous (several cities) or fails, the address stays ",[14,69,70],{},"exactly as the customer wrote it",", without coordinates, and the assistant may ask for the city once. The typed address is only saved to the profile after the customer confirms it, and the customer can undo the save. If that service is not configured on the server, nothing is sent. Google will be part of the sub-processor list, still ",[14,73,16],{},[19,75,77],{"id":76},"access-retention-and-rights","Access, retention and rights",[10,79,80],{},"Access is limited to the business workspace and to authorized roles. The business must restrict operators, verify who is making a request and keep personal data out of logs and public tickets.",[10,82,83,84,87],{},"Retention periods by category, accounting and legal exceptions, backups and the method of deletion will be those of the approved annex. This version does not set retention periods in force. Requests for access, correction or deletion must be sent to the controller through ",[14,85,86],{},"[pending channel]","; Fiuit assists the controller according to validated and recorded instructions.",[10,89,90],{},"Fiuit does not promise irreversible anonymization while identifiers, audit records or backups still allow data to be linked, nor the removal of copies controlled by WhatsApp or other providers without a separate procedure and evidence.",[19,92,94],{"id":93},"protection-and-incidents","Protection and incidents",[10,96,97,98,101],{},"Planned measures: isolation per customer (tenant), access control, auditing without unnecessary content, encryption in transit and key custody. Column-level encryption of clinical data and complete deletion are ",[14,99,100],{},"yet to be implemented and validated",", and are not proven yet. Incidents are assessed together with the controller; notifications and obligations depend on the applicable rules and the case, with legal advice.",[19,103,105],{"id":104},"notice-at-the-start-of-a-conversation-proposed","Notice at the start of a conversation (proposed)",[10,107,108],{},"Proposed informational text for the start of a conversation with the assistant. It is not a consent checkbox, does not replace this policy, and is not active yet:",[110,111,112],"blockquote",{},[10,113,114],{},"I am this business’s booking assistant. We use your contact details and messages to handle your request. Do not send health information or documents. To ask about your data or speak with a person, request human assistance.",{"title":116,"searchDepth":117,"depth":118,"links":119},"",2,3,[120,121,122,125,126,127],{"id":21,"depth":117,"text":22},{"id":28,"depth":117,"text":29},{"id":38,"depth":117,"text":39,"children":123},[124],{"id":48,"depth":118,"text":49},{"id":76,"depth":117,"text":77},{"id":93,"depth":117,"text":94},{"id":104,"depth":117,"text":105},"How Fiuit handles data from businesses, dashboard users and end customers.","md",{},true,"\u002Flegal\u002Fprivacy",{"title":5,"description":128},"docs\u002Flegal\u002Fprivacidade-draft.md (translated from Portuguese)","legal\u002Fprivacy","2026-10-07","WLNWIa2_gyyhPIrFoQiEEzV50D0zuU2q2y6ZSJU6HvE",1791392881972]