ICone Academy protects personal data with a focus on clarity, necessity, and security. This policy explains what information we process, why we do so, and how you can exercise your rights.
1. Who is responsible for your data
ICone Academy is responsible for processing data used on the platform. To discuss privacy, data subject rights, or incidents, contact us at privacidade@icone.academy.
2. Data we collect
- Account data such as name, email, hashed password, and tax identification.
- Billing and subscription data when required for charges and tax documents.
- Platform usage data such as visited pages, campaign source and parameters, signup and checkout interactions, conversions, audit logs, administrative actions, and security events.
- Files you upload, such as technical sheets, supplier documents, and images.
- Essential cookies and, when you authorize them, optional analytics or marketing cookies.
- For WhatsApp contacts: phone number, profile name, messages, attachments, language, and commercial qualification data such as name, company, objective, and optional email. The landing form saves your name, phone number, language, agreement to contact and, if provided, company and email before opening WhatsApp. This protected temporary record does not authorize marketing and is deleted after 30 days; once linked, the details become part of the service history. The linking reference expires after 24 hours and is accepted only when a message arrives from the provided number.
3. Why we use this data
- To provide the contracted service, maintain workspaces, users, permissions, recipes, and active modules.
- To process payments, support, operational communications, and tax obligations.
- To protect accounts, investigate abuse, maintain audit records, and prevent fraud.
- To send commercial content only when there is consent or another applicable legal basis.
- To provide automated service with Bella, answer approved commercial questions, qualify the contact, and transfer the conversation to a person when needed.
4. Responsible sharing
We may use specialized providers for cloud infrastructure, secure storage, email delivery, payments, support, usage analytics, and stability monitoring. They receive only the data needed to deliver the contracted service and must follow confidentiality, security, and data protection obligations.
Some services may involve international transfers. When that happens, we adopt contractual and technical safeguards compatible with applicable law. See also our data sharing page.
5. Your rights
- Access, correct, port, or request deletion of personal data.
- Withdraw consent and object to certain processing, when applicable.
- Export account data from the logged-in area under Profile and Privacy.
You may also request assistance at privacidade@icone.academy. We aim to respond to data subject requests within 15 days, unless a justified legal or operational need requires more time.
6. Security and retention
We maintain technical and administrative controls to reduce risk: HTTPS, CSRF protection, hashed passwords, audit of relevant events, and workspace segregation. Audit logs and operational records are kept as long as needed for security, support, legal compliance, and rights defense.
7. WhatsApp and automated service
Bella always identifies herself as ICone's virtual assistant. Phone numbers and message content are protected at rest. We may send OpenAI only the text needed to produce a reply, without phone numbers or attachments. ICone does not use conversations to train models and, at this stage, they are not used for campaigns, bulk messages, or remarketing. You may request a human agent or deletion of records, subject to legal retention obligations.