Update Date: February 26, 2026

This Privacy Policy demonstrates volis.ai's commitment to protecting the privacy and personal data of its users, clients, partners, and visitors. This document transparently establishes the rules on the collection, use, storage, sharing, and protection of personal data processed in the context of our technology and artificial intelligence services, in compliance with the General Data Protection Law (Law No. 13,709/2018 – LGPD) and the European Union's General Data Protection Regulation (Regulation 2016/679 – GDPR).
By using our services, the user declares that they have read and understood this Policy.

1. Who We Are
   volis.ai operates through the following entities:
   a. Volis Tecnologia Ltda., registered in Brazil under CNPJ 55.781.617/0001-83, headquartered at Rua Itapaiúna, No. 1800, apt. 251, Jardim Morumbi, ZIP Code 05705-901, São Paulo, SP, Brazil.
   b. VOLIS AI TECNOLOGIA LDA, registered in Portugal under NIPC 518311244, headquartered at Rua das Sobreiras, 396, Lordelo do Ouro e Massarelos, Postal Code 4150-713, Porto, Portugal.
   Depending on the nature of the contractual relationship, volis.ai may act as a Data Controller or Data Processor.
   For matters related to personal data protection, contact can be made via email: dpo@volis.ai.
   
   

2. Data Collection and Activity Logging
   volis.ai collects personal data when voluntarily provided by the user when using the platform, filling out forms on websites or landing pages, or contracting our services.
   
   2.1 Data provided directly by the user
   a) First and last name
   b) Email
   c) Phone number
   d) Job title
   e) Company
   
   2.2 Data collected automatically
   a) IP address and source logical port
   b) Access dates and times
   c) Session identifier (Session ID)
   d) Browser and device information
   e) Usage logs and operation history
   f) Navigation data collected by cookies or similar technologies
   The technologies used respect this Policy and applicable legislation.
   
   

3. Purpose and Legal Basis for Processing
   Personal data may be processed for the following purposes:
   a) Identify and authenticate users on the platform
   b) Execute contracted artificial intelligence functionalities
   c) Process requests and generate responses to sent prompts
   d) Provide technical support
   e) Improve user experience and enhance services
   f) Ensure information security and fraud prevention
   g) Comply with legal and regulatory obligations
   h) Conduct institutional or informational communications
   The applicable legal bases include:

• Contract performance

• Compliance with legal obligation

• Legitimate interest

• Consent, when necessary

4. Processing of Data in Prompts
   The content entered in prompts is processed exclusively for:
   a) Generating the response requested by the user
   b) Maintaining system security and integrity
   c) Monitoring against improper or abusive use
   volis.ai does not sell data entered in prompts nor use it to train third-party public models without contractual provision or appropriate legal basis.
   The user is responsible for ensuring they have legal authorization to enter third-party personal data on the platform.
   
   

5. Data Sharing
   Data may be shared:
   a) With cloud infrastructure providers located in Brazil, the European Union, or the United States
   b) With service providers necessary for platform operation
   c) Between volis.ai entities for administrative and operational purposes
   d) With judicial or administrative authorities when there is a legal obligation
   All contracted third parties are subject to contractual clauses on confidentiality and data protection.
   volis.ai does not sell, rent, or trade personal data.
   
   

6. International Transfers
   In the event of international data transfers, volis.ai will adopt appropriate safeguards, including:
   a) Standard contractual clauses
   b) Assessment of adequate protection level
   c) Appropriate technical and organizational measures
   
   

7. Storage and Retention
   Data will be stored for the period necessary to:
   a) Fulfill the purposes described in this Policy
   b) Meet legal obligations
   c) Defend rights in judicial or administrative proceedings
   Access logs may be kept for up to 6 months, in accordance with the Internet Civil Rights Framework, or for a longer period when required by law.
   After the end of the processing need, data will be deleted or anonymized.
   
   

8. Data Subject Rights
   The data subject may, at any time:
   a) Confirm the existence of processing
   b) Request access to data
   c) Request correction of incomplete or outdated data
   d) Request anonymization, blocking, or deletion
   e) Request portability
   f) Revoke consent
   g) Obtain information on sharing
   Requests should be sent to: dpo@volis.ai.
   
   

9. Information Security
   volis.ai adopts appropriate technical and organizational measures to protect personal data against unauthorized access, leaks, improper alterations, loss, or destruction.
   Internal access to data is restricted to authorized professionals, subject to a duty of confidentiality.
   volis.ai never requests passwords via email nor sends executable files.
   
   

10. . Policy Updates
    This Policy may be updated at any time to reflect legal or operational changes. The current version will always be available on volis.ai's official channels.
    
    

11. . Applicable Law and Jurisdiction
    To resolve disputes, the following are elected:
    a) For contracts with Volis Tecnologia Ltda.: Court of the District of São Paulo/SP, Brazil.
    b) For contracts with VOLIS AI TECNOLOGIA LDA: Court of Porto, Portugal.