Privacy Policy

1. Introduction

F13 Code ("we", "our" or "company"), developer of Aurora AI, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information, in compliance with the General Data Protection Law (LGPD - Law 13.709/2018).

2. Data We Collect

2.1 Data provided by you

• Registration data: name, email, password (encrypted)
• Payment data: processed directly by Stripe, we do not store card data
• Chatbot content: knowledge base texts, customized settings
• Communications: support messages, feedback

2.2 Automatically collected data

• Usage data: pages visited, features used
• Technical data: IP address, browser type, operating system
• Cookies: we use essential and analysis cookies (see specific section)
• Logs: access and error records for security and maintenance

2.3 Chatbot visitor data

When visitors interact with chatbots created on the platform, we collect: IP address (for rate limiting), conversation messages, and metadata (time, duration). This data is accessible only to the chatbot owner and is retained according to their policy.

3. How We Use Your Data

• Service provision: operate the platform, process payments, provide support
• Improvements: analyze usage to improve features and experience
• Security: detect fraud, prevent abuse, protect the platform
• Communication: send important notifications, updates and, with your consent, news
• Legal obligations: comply with legal and regulatory requirements

4. Legal Basis (LGPD)

The processing of your personal data is carried out based on the following legal grounds:

• Contract execution: to provide the contracted service (Art. 7, V)
• Consent: to send marketing communications (Art. 7, I)
• Legitimate interest: for service improvements and security (Art. 7, IX)
• Compliance with legal obligation: to meet tax and regulatory requirements (Art. 7, II)

5. Data Sharing

We do not sell your personal data. We share data only in the following situations:

• Stripe: payment processing (own privacy policy)
• AI providers: Groq, OpenAI, Google (only anonymized messages for processing)
• Infrastructure: servers and CDN (technical data for operation)
• Legal obligation: when required by law or court order
• Consent: when you expressly authorize

6. Data Security

We implement technical and organizational measures to protect your data:

• SSL/TLS encryption in all communications
• Passwords stored with bcrypt hash
• JWT tokens with expiration for authentication
• Rate limiting for attack prevention
• Regular backups with encryption
• Continuous security monitoring
• Restricted data access only for authorized employees

7. Your Rights (LGPD)

According to LGPD, you have the following rights regarding your personal data:

To exercise your rights, contact us at: hello@f13code.com. We will respond within 15 business days.

8. Cookies

We use cookies to improve your experience:

• Essential: necessary for platform functionality (session, authentication)
• Analysis: to understand how you use the platform (can be disabled)
• Preferences: to remember your settings

You can manage cookies in your browser settings. Disabling essential cookies may affect platform functionality.

9. Data Retention

• Account data: kept while the account is active, deleted 30 days after deletion request
• Conversation data: retained according to chatbot owner settings (default: 90 days)
• Payment data: kept for the period required by law (5 years)
• Security logs: retained for 12 months

10. International Transfer

Some of our service providers may be located outside Brazil (e.g., Stripe in the USA, AI providers). We ensure that these transfers occur with adequate safeguards, such as standard contractual clauses, as required by LGPD.

11. Minors

The Aurora AI platform is not intended for minors under 18 years of age. We do not intentionally collect data from minors. If we become aware that we have collected data from a minor without guardian consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or notice on the platform. We recommend reviewing this page regularly.

13. Contact

14. National Authority

If you believe that the processing of your personal data violates the legislation, you have the right to file a complaint with the National Data Protection Authority (ANPD) - www.gov.br/anpd.