Privacy policy

2. Data we collect

We only collect what we need to run the service:

• Sign-up data: name, email, phone number with WhatsApp and, when you sign in with Google, the basic profile data you authorize.
• WhatsApp data: the confirmed number and the date of confirmation (done with a 6-digit code we send over WhatsApp), whether or not you want to receive news there, and the messages you exchange with our team on that channel.
• Subscription and billing data: the plan you subscribed to, main and additional platforms, trial status and invoice history. Card data is processed directly by the payment provider; we neither receive nor store your card number.
• MCP usage data: a record of each call to the tools — which tool, when, from which account and platform, the IP address and the browser or client it came from — and the parameters the AI sends with it (such as the feature name, the project identifier, the context provided and the summary and proof for each step). Used for access control, support, metrics and security.
• Terms of Use acceptance data: the accepted version and the digest (SHA-256) of the text, the date and time, the IP address, the browser, the language and the session identifier, together with the email, name and Brazilian tax ID (CPF or CNPJ) on the account at the time of acceptance. They serve as proof.
• Record of your contact choices: each time you authorize or refuse a communication over WhatsApp, we keep the choice (account notices or news), whether it was given or withdrawn, where it happened (sign-up, dashboard, number confirmation or a WhatsApp reply), the exact text you saw and its digest (SHA-256), the phone number, the date and time, the IP address and the browser, together with the email on the account. They also serve as proof.
• Support data: the content of the tickets, messages and attachments you send to our team.
• Technical data: IP address, browser type and access logs, generated automatically by the infrastructure for security reasons.

3. How we use data and legal bases

• Performing the contract: creating and maintaining your account, enabling the tools in your plan, processing the subscription and providing support. That's why, for accounts in Brazil, the phone number is required: we use WhatsApp for account, billing, support and security notices.
• Complying with legal and regulatory obligations, including tax and accounting ones.
• Legitimate interest: security, fraud and abuse prevention, protection of Builder Agent's trade secret (including the identification of attempts to extract tool content, as set out in the Terms of Use) and product improvement based on aggregated usage metrics.
• Regular exercise of rights: keeping proof of acceptance of the Terms of Use, the record of your contact choices and the usage records needed to defend our rights in judicial, administrative or arbitration proceedings.
• Consent: news, live sessions and promotions over WhatsApp and other marketing communications, only if you tick the box that asks for it, with the option to unsubscribe at any time.

4. WhatsApp: notices and news

We use your WhatsApp for two different things, and each one has its own legal basis:

• Account notices: billing, support, security and changes to your subscription. They are part of the service you subscribed to (performance of the contract), which is why, for accounts in Brazil, the phone number is required and there is no box to untick. As long as the account exists, these notices continue.
• News, live sessions and promotions: only with your consent, given in a separate box that comes unticked and is not a condition for anything. You can withdraw it whenever you want by replying STOP on WhatsApp (or SAIR, PARAR, CANCELAR or DESCADASTRAR) or by turning the option off in your profile, in the dashboard. To receive them again, reply VOLTAR or turn the option back on.

To confirm that the number is yours, we send a 6-digit code over WhatsApp. Confirming may earn bonus credits, only once per account, per person and per number.

5. What Builder Agent does not do

Builder Agent does not read, copy or store your project's code on its own. It is a tool server that guides the AI you already use, based on what you share in the conversation and the tools you call yourself.

We do not sell personal data and we do not use the content of your project to train models.

6. Identifying misuse

The Terms of Use prohibit extracting the content of the tools, which is our trade secret. To identify attempts, we analyze the MCP usage records (the calls, the parameters sent, the IP address and the browser or client), supported by automatic signals.

The automatic signals alert our team, which reviews the case. During the trial period, with no subscription, access may be ended automatically; for subscribers, our team reviews the case before applying any measure. The consequences are described in the Terms of Use.

If you disagree with a decision made based on these records, you can ask for it to be reviewed by a person at digitalz@digitalz.club.

7. Sharing with processors

We only share data with providers that help us run the service, always limited to the contracted purpose:

• Hosting, database and authentication infrastructure.
• Payment processing and invoicing.
• Sending transactional emails (account confirmation, password recovery, subscription notices and support).
• Sending and receiving messages over WhatsApp Business, from Meta: the number, the confirmation code and the content of the messages go through the official WhatsApp platform, which also processes this data under its own rules.

We may also share data when there is a legal obligation, an order from a competent authority or a need to defend our rights.

8. Retention and deletion

We keep data while your account exists and for the period needed to comply with legal, tax and litigation-defense obligations. Billing and usage records may be kept for legal periods even after the account is closed.

You can ask for your account to be deleted at any time at the contact email; we complete the request as quickly as possible, keeping what the law requires and what we need to defend our rights.

Proof of acceptance of the Terms of Use is kept for as long as it is needed to prove the acceptance and defend rights, including after the account is closed. In that case, it is not deleted on a deletion request while that legitimate purpose remains.

The record of your contact choices follows the same rule: it is not changed after it is saved (a new choice becomes a new record, and the old one stays) and it is kept, including after the account is closed, for as long as it is needed to prove what you authorized and when. Withdrawing consent for news stops the messages, but does not erase the proof that it existed.

9. Your rights as a data subject

Under the LGPD (Brazil's General Data Protection Law), you can request confirmation of processing, access, correction, anonymization, portability, information about sharing, withdrawal of consent and deletion of your data.

To exercise any of these rights, write to digitalz@digitalz.club. We may ask for additional information to confirm your identity before handling the request.

10. Security

We use encryption in transit, role-based access control, per-account data isolation in the database and audit logs. No system is completely immune to incidents; if a relevant incident occurs, we will notify the data subjects and the competent authority as required by law.

Never send passwords, API keys, tokens or card data in support tickets or in the conversation with the AI.

11. Cookies and local storage

We use cookies and the browser's local storage to keep your session active and remember interface preferences. You can clear or block this data in your browser, but sign-in will stop working properly.

12. International transfer

Part of our infrastructure and providers are located outside Brazil. In those cases, the international transfer follows the cases and safeguards set out in the LGPD.

13. Changes to this policy

We may update this policy to reflect changes in the product or in the law. The date of the last update is always at the top of this page; relevant changes will be communicated by email or in the product itself.