Privacy Policy

Effective Date: November 1, 2026 Version: 1.1

1. Introduction

Wondeals is an AI-powered sales conversation platform operated by Vinicius Gomes Correia, an individual based in São Paulo, Brazil.

This Privacy Policy describes how Wondeals ("Wondeals," "we," "us," or "our") collects, uses, stores, shares, and protects personal information in connection with our website, platform, and AI-powered sales conversations ("Talks").

This Policy applies to website visitors, account holders, workspace members, individuals who contact us, and participants invited to Talks.

Our intended initial markets are Brazil, Mexico, and the United States. We handle personal information in accordance with applicable data protection and privacy laws.

Operator and privacy contact

Vinicius Gomes Correia Rua Rio São Lourenço, 20, Jardim Campinas São Paulo, SP, 04858-520, Brazil Email: help@wondeals.io

2. Our Role and Customer Responsibilities

Wondeals determines the purposes and means of processing personal information for account management, platform administration, billing, security, website inquiries, and legal compliance.

Customers, whether individuals or organizations, configure their AI Sellers, provide commercial materials, select invited prospects, and determine the purposes and content of their sales conversations.

For personal information processed within customer-directed Talks, Wondeals generally acts on the customer's instructions, subject to the actual processing activity and applicable law. Wondeals may independently determine processing necessary for its own security, billing, compliance, and service operations.

Where required, these responsibilities will be further defined in a Data Processing Agreement.

3. Personal Information We Collect

We may process the following categories of information:

Account and workspace information: email addresses, account identifiers, authentication events, workspace names, user roles, preferences, and information provided in customer profiles.

Commercial content: AI Seller configurations, product and service information, commercial instructions, approved knowledge, documents, and calls to action uploaded or configured by customers.

Invitations: prospect names and email addresses when provided, invitation identifiers, access conditions, verification events, and security records.

Conversation information: voice-derived transcripts, questions, responses, expressed interests, objections, buying signals, summaries, selected excerpts, AI-generated suggestions, and interaction events.

Technical information: session identifiers, browser and connection data, timestamps, IP-derived security identifiers, service usage records, errors, and operational logs.

Billing information: credit balances, measured usage, payment references, transactions, refunds, disputes, and payment-method information made available by our payment processor. Wondeals does not collect full card numbers or security codes through its own payment forms.

Website contact information: email address, optional telephone number, optional discovery channel, selected language, page of origin, and available campaign parameters.

Information may be collected directly from users, supplied by customers, generated during platform use, or received from service providers.

Customer-provided documents and conversation content may incidentally contain personal information about third parties.

4. Purposes and Legal Grounds

We process information for the following purposes:

• Service delivery: provide accounts, workspaces, AI Sellers, Talks, invitations, and authorized interactive content.
• Commercial analysis: generate summaries, feedback, and customer-specific suggestions from conversations.
• Billing: measure service usage, manage prepaid credits, process payments, and reconcile transactions.
• Communications: respond to inquiries, send operational notices, and provide support.
• Security: authenticate users, prevent misuse, detect fraud, and investigate incidents.
• Compliance: satisfy applicable legal obligations and address disputes or lawful requests.

Depending on the activity and applicable jurisdiction, processing may be based on contractual necessity, legal obligations, legitimate interests where permitted, consent when required, or another applicable legal ground.

Where consent is required, we will request it through an appropriate mechanism. Consent to one activity does not authorize unrelated purposes.

Providing information necessary for authentication, payment, or participation in a Talk may be required to receive that specific service. Optional website contact fields are not required.

5. AI and Voice Processing

Talks use real-time voice processing through OpenAI.

With microphone permission, audio is transmitted through WebRTC for AI processing. The Wondeals application does not currently implement persistent storage of audio recording files.

However, Wondeals processes and stores text and derived information from conversations, including transcripts, summaries, commercial observations, selected excerpts, interaction records, and related technical metadata.

Relevant customer-approved knowledge, AI Seller instructions, and conversation context may also be provided to OpenAI to generate responses and analyses.

External AI providers may retain certain information according to their applicable agreements, settings, and legal obligations.

AI-generated responses and commercial assessments may contain inaccuracies. Users should not disclose unnecessary sensitive information during a Talk.

The current Talk experience primarily uses voice and interactive visuals; a complete text-chat alternative is not currently available.

6. Customer-Specific Commercial Learning

Wondeals analyzes Talks to generate summaries, buying signals, objections, feedback, and suggestions for the customer responsible for those conversations.

Commercial learning is restricted to the relevant customer's environment. We do not combine customers' conversation histories to create shared commercial intelligence across unrelated customers.

Suggestions affecting approved commercial knowledge require review and approval by an authorized customer representative before being applied.

Wondeals does not currently operate a global AI model-training pipeline based on customer conversation histories.

Our customer-specific commercial learning is separate from the data-processing practices of external AI providers.

7. Automated Processing and Human Review

AI systems may identify interests, commercial objections, and potential next steps based on conversation content.

These assessments support sales interactions and customer review. They may influence which approved information or call to action is presented.

Wondeals does not currently autonomously conclude purchases or make final decisions concerning credit eligibility, employment, or other similarly consequential matters through its AI Seller.

Customers remain responsible for reviewing AI-generated commercial suggestions and for their own decisions.

Where applicable law provides rights concerning automated processing or profiling, individuals may contact us to exercise those rights.

8. Website Contact Requests

Information submitted through the Get in touch form is used only to respond to the interest or inquiry expressed by the individual.

Submitting the form does not enroll the individual in a newsletter, advertising list, or automated marketing campaign.

Contact information is stored in our service infrastructure and may be forwarded to our support inbox through Resend.

9. Sharing and Service Providers

We use providers that support the platform, including:

• Supabase: database, authentication, and private file storage.
• Vercel: website and application hosting.
• OpenAI: AI processing, voice interaction, and conversation analysis.
• Stripe: payments and financial reconciliation.
• Resend: operational and transactional email.
• Cloudflare Turnstile: abuse prevention, when enabled.

We may also disclose information when necessary to comply with law, respond to lawful requests, prevent fraud, protect legal rights, or resolve disputes.

Authorized workspace members may access commercial information belonging to their workspace according to their permissions.

Customer-configured calls to action may direct Talk participants to external websites, email addresses, messaging platforms, or downloadable documents. Those destinations may have separate privacy practices.

We do not sell personal information or customer conversation data, and we do not share personal information for cross-context behavioral advertising.

10. Cookies and Browser Storage

We use cookies and browser storage necessary for authentication, language preferences, security, invitation access, and Talk functionality.

The current application does not implement third-party advertising trackers or marketing analytics cookies.

Optional anti-abuse services may process technical information when enabled.

If we introduce additional nonessential tracking technologies, we will provide appropriate notices and consent controls where required.

11. International Data Transfers

Wondeals operates from Brazil and uses international technology providers.

Personal information may be processed in the United States or other jurisdictions where relevant providers and their subprocessors operate.

Such processing may involve account information, conversation content, technical information, and payment-related data, depending on the provider and service involved.

International transfers must be supported by appropriate safeguards or other legally permitted mechanisms where required.

Individuals may request further information about applicable transfer safeguards by contacting help@wondeals.io.

12. Data Retention

We apply the following retention policies, subject to applicable legal obligations and justified exceptions:

Conversation transcripts: certain stored messages and technical receipts are scheduled for daily deletion once the recorded Talk end date is more than 30 days in the past.

Conversation summaries, feedback, and commercial suggestions: retained while the relevant workspace remains active and scheduled for deletion or anonymization within 90 days after workspace closure, unless continued retention is legally necessary.

Website contact requests: retained for up to 12 months after the last interaction, unless a legitimate continuing need or legal obligation requires a different period.

Account and workspace information: retained while necessary to provide the service, followed by deletion or anonymization under the applicable closure process, subject to justified exceptions.

Financial records: retained for periods required by applicable tax, accounting, payment, dispute-resolution, and other legal obligations.

Security logs and backups: retained according to operational needs, applicable provider retention cycles, and legal requirements, with access and retention limited to what is justified.

Transcript cleanup does not automatically remove all derived records, historical configurations, or financial information. Some categories are currently subject to manual review rather than automated deletion.

Deleting a Solution or AI Seller removes its current configuration, but does not delete existing conversation history. Original attribution, published versions, transcripts, summaries, suggestions, and CTA events remain subject to the retention periods and exceptions described in this Policy.

Account deletion and data deletion may require separate actions, including coordination with service providers and handling of applicable legal retention obligations.

13. Account Closure and Deletion Requests

Users may request account closure or deletion through available account controls or by contacting us.

We will delete or anonymize personal information that is no longer necessary, subject to applicable legal obligations and justified retention.

Financial records, unresolved service transactions, workspace relationships, or technical dependencies may require manual review.

Technical restrictions do not eliminate applicable privacy rights.

Where appropriate, requests involving information controlled by a customer may be referred to that customer or handled in coordination with them.

14. Your Privacy Rights

Depending on applicable law, you may have rights to:

• Access personal information.
• Correct inaccurate or incomplete information.
• Request deletion, anonymization, or restriction of processing.
• Object to or limit certain uses or disclosures.
• Withdraw consent when applicable.
• Request data portability where available.
• Obtain information concerning relevant sharing and processing.
• Exercise applicable rights concerning automated decisions.
• Lodge complaints with competent authorities.

Brazil: individuals may exercise rights provided by the LGPD.

Mexico: individuals may exercise applicable ARCO rights (Access, Rectification, Cancellation, and Opposition), request revocation of consent where permitted, and request limitations on the use or disclosure of their information.

United States: residents of states with applicable privacy laws may exercise the corresponding statutory rights, subject to those laws' scope and exceptions.

To exercise a right, email help@wondeals.io, identifying the request and the information involved.

We may require reasonable identity verification. Requests will be handled within applicable legal deadlines.

We will not unlawfully discriminate against individuals for exercising privacy rights.

15. Sensitive Information and Restricted Uses

Wondeals is not intended for processing sensitive personal information unrelated to ordinary sales conversations.

Customers must not use the platform for unlawful activities or, without appropriate review and authorization, for sensitive health-data processing, sensitive financial information, credit decisions, or other high-risk activities.

Users should avoid disclosing sensitive personal information unless necessary and legally authorized.

If sensitive information is submitted unexpectedly, it may be processed as part of the service until identified and addressed through appropriate measures.

16. Age Restrictions

Wondeals accounts, credit purchases, and Talk participation are restricted to individuals 18 years of age or older.

We do not intentionally offer the service to minors.

If we become aware that we have collected personal information from a minor in violation of this restriction, we will assess and take appropriate steps to delete or restrict that information, subject to applicable law.

Parents or legal guardians may contact help@wondeals.io regarding possible unauthorized processing involving minors.

17. Security

We maintain technical and organizational safeguards intended to protect information against unauthorized access, disclosure, alteration, or loss.

Safeguards include access controls, workspace-level data isolation, private file storage, and security mechanisms designed to limit misuse.

No system can guarantee absolute security.

We will handle security incidents in accordance with applicable legal requirements.

18. Changes to This Policy

We may update this Privacy Policy when our services, processing practices, or legal obligations change.

Material changes will be communicated through appropriate channels where required.

The current effective date and version will be displayed at the beginning of this document.

19. Contact

Wondeals Operated by Vinicius Gomes Correia

Rua Rio São Lourenço, 20, Jardim Campinas São Paulo, SP, 04858-520, Brazil

Email: help@wondeals.io