Privacy
Privacy Policy
cria.chat respects your privacy and handles personal data in accordance with Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018). This policy applies to the cria.chat website and to its former address, criachat.com, which now redirects here.
Controller and data
Who is responsible for your data, and what data it is
The controller of your personal data is CRIA CHAT LTDA, a company registered in Brazil under CNPJ 66.634.769/0001-70, responsible for the cria.chat brand and service.
This page covers the website. Inside the platform, at app.cria.chat, conversations between your company and its customers are processed by cria.chat on your company’s behalf, under the service agreement.
When you request a demo
The contact form asks for your name, your industry and an estimate of daily conversations. It stores nothing in a database: it builds a message and opens our sales WhatsApp with it prefilled, and you are the one who sends it. From then on we receive your WhatsApp number and whatever you write in the conversation.
When you create a free account
Sign-up asks for your name, company name, email and WhatsApp number. We send a six-digit code by email and by WhatsApp only to confirm the contact is yours. We use this data to create your account and your company’s account on the platform and, if the trial becomes a subscription, to issue billing.
Technical access data
Like any web server, the infrastructure hosting the site logs access data: IP address, browser and pages visited. It is used for security and to diagnose failures. Ad measurement is a separate matter, covered in the next section.
Measuring the site itself
We use Web Analytics from Vercel, the company that hosts the site, to count visits and page views. It sets no cookie and shows only aggregated numbers, without identifying you. Alongside it we record a few clicks that tell us whether the site is doing its job: demo requests, WhatsApp conversations, sign-up starts and views of the pricing table.
We also use Google Analytics, from Google, to understand where visits come from and how the site is used. It sets cookies in your browser (_ga and _ga_9B3DDT8V84) that tell one browser from another between visits, and Google receives browsing data: the page address, your IP address and browser information. We send it the same clicks listed above. Like Meta’s pixel, it is only armed on the production address and, for visitors in the European Union, it only runs after you agree (next section).
How we use it
We use your data to reply to you, run the demo, create and maintain your account and, if you agree, send you communications about the service. We do not sell your data and we do not hand the content of what you write to third parties. Outside of us, the only providers that touch your data act on our behalf and only to deliver the service: the site’s hosting, the infrastructure where the platform and billing run, and whoever delivers the email and the WhatsApp message with your code. Browsing data also goes to Google and Meta to measure the site and our ads, as described on this page.
Cookies
Cookies, Meta’s pixel and Google Analytics
This site has no logged-in area and does not use cookies for login. It stores two small preferences of yours: the language you chose and, if you are in Europe, your answer about measurement cookies. What tracks you is Meta’s pixel, the ad measurement tool for Facebook and Instagram, and Google Analytics, described above.
What the pixel does
When it runs, your browser loads a script from Meta (fbevents.js) that records the visit and each page change. It sets a cookie in your browser, _fbp, which identifies that browser on later pages and when you come back to the site: that is what lets a visit be linked to an ad. Along with it, Meta receives browsing data: the page address, your IP address and browser information.
What it is for
- Measuring how our ads perform: which ones brought visits and sign-ups.
- Building ad audiences, including showing ads again to people who visited.
We do not send the form content, your name or your conversations to the pixel, and we do not use it to identify visitors by name: what we see are aggregated numbers in Meta’s ads manager.
If you are in the European Union
The pixel and Google Analytics do not run until you agree. The site recognises your region from your device’s time zone and, on your first visit, a notice asks. Accept and Decline carry equal weight. If you decline, neither loads and we do not ask again for as long as your browser keeps your answer (Safari clears this kind of preference after seven days).
To change your mind at any time, use Cookie settings in the footer of any page. It clears your answer and the cookies from Meta and Google, and the notice asks again.
How to opt out elsewhere
You can block cookies and trackers in your browser settings, turn on the tracking protection it already has, or install a blocking extension. With the pixel and Google Analytics blocked the site works the same: nothing here depends on them. You can also adjust your ad preferences at Meta, from your Facebook or Instagram account, and turn off Google Analytics on every site with Google’s opt-out browser add-on.
Your rights
What you can ask for, and how
You have rights over your data and can exercise any of them at any time. If you are in the European Union, the same rights are yours under the GDPR.
- Confirm whether we process your data and access what we hold.
- Correct data that is incomplete, outdated or wrong.
- Ask for anonymisation, blocking or deletion.
- Ask for your data to be ported.
- Know who we share it with, and why.
- Withdraw your consent and stop receiving communications from us.
Write to contato@cria.chat and we will reply through the same channel. If you asked for a demo and no longer want to be contacted, just say so in the conversation and we will stop there.
Last updated:
If this policy changes, the new version will be on this same page with the date updated. A Portuguese version is also available.