Português · English

Privacy Policy

Last updated: April 10, 2026

See also: Terms of Use

Courtesy translation: this English version is provided for convenience. In case of any conflict or ambiguity, the Portuguese version prevails, as the service is operated under Brazilian law (LGPD).

1. Introduction

This Privacy Policy describes how OverAir, operated by Hens Desenvolvimento ("we", "us", "our"), collects, uses, stores, and protects your personal data, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/18).

2. Data We Collect

We collect the following data when you use the Service:

2.1 Data you provide

  • Phone number: used for identification and communication via WhatsApp
  • Name: as registered in WhatsApp
  • Text messages: content sent to the Service via WhatsApp
  • Audio messages: transcribed by the AI and stored as text
  • Images: processed for data extraction (e.g., receipts), but not stored

2.2 Data generated by the Service

  • Categorized items (shopping, reminders, expenses, etc.)
  • Usage profile and preferences
  • Conversation history with the assistant
  • Subscription and payment data (without bank details)

2.3 Technical data

  • Device identifiers (when using the app)
  • Usage and navigation data within the application

3. How We Use Your Data

We use your data to:

  • Provide and operate the Service
  • Transcribe and categorize your messages
  • Send reminders and notifications
  • Personalize your experience
  • Manage subscriptions and payments
  • Improve the quality of the artificial intelligence
  • Communicate Service updates

4. Storage and Security

Your data is stored on Google Cloud Platform (Firebase) servers located in the United States. We use security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Firestore security rules for access control
  • Secure authentication via Firebase Authentication
  • Restricted data access by authorized personnel only

Important: Images you send (such as photos of receipts) are processed in real time for data extraction and are not stored on our servers. Only the extracted structured data (values, items, dates) is saved.

5. Data Sharing

Your data may be shared with:

  • Google (Firebase/Gemini): for infrastructure, storage, and AI processing
  • Meta (WhatsApp Business API): for communication via WhatsApp, subject to the WhatsApp Privacy Policy
  • Stripe: for payment processing (we do not have access to your card data)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Your Rights (LGPD)

Under the LGPD, you have the right to:

  • Access: request what data we hold about you
  • Correction: correct incomplete or inaccurate data
  • Deletion: request deletion of your personal data
  • Portability: receive your data in a structured format
  • Revocation: withdraw your consent at any time
  • Information: know with whom your data is shared

To exercise any of these rights, contact us via WhatsApp: +55 12 99708-4305.

7. Data Retention

Your data is kept while you use the Service. After your account is closed:

  • Personal data is deleted within 30 days
  • Anonymized data may be retained for statistical purposes
  • Backups are removed in the next cleanup cycle (up to 90 days)

8. Use by Minors

The Service is not intended for individuals under 18 years of age. We do not intentionally collect data from minors. If you become aware that a minor has used the Service, please contact us so we can remove the data.

9. Cookies and Technologies

The site overair.hens.com.br does not use tracking cookies. The mobile application may use anonymous identifiers for usage analysis and Service improvement.

10. WhatsApp (Meta) Integration

OverAir uses the WhatsApp Business API provided by Meta. When you interact with OverAir via WhatsApp, your messages are processed in accordance with:

To configure or manage the WhatsApp Business integration, access the Meta Business Suite.

11. Changes to this Policy

This Privacy Policy may be changed at any time, without prior notice. Changes take effect immediately upon publication on this page. Continued use of the Service after any change constitutes acceptance of the new policy.

We recommend that you review this page periodically.

12. Data Protection Officer (DPO) Contact

For questions related to privacy and data protection: