Privacy Policy

▸1. Data Controller

• •Pelloso Holdings LLC
• •5830 E 2nd St, Ste 7000, Casper, WY 82609, United States
• •Email: privacy@vozzo.app
• •For EU/Italian users: we act as Data Controller under GDPR Art. 4(7). For Brazilian users: we act as Controlador under LGPD.

▸2. Information We Collect

• •Account information: name, email address, and WhatsApp phone number.
• •Financial data: expenses and income submitted via WhatsApp (text or voice) or the web app.
• •Voice messages: audio files sent for transaction processing only.
• •Usage data: workspaces, categories, tags, and goals.
• •Technical data: IP address, browser type, device identifiers, and access logs.

▸3. Legal Basis for Processing

• •Performance of contract: necessary to deliver the Vozzo service.
• •Legitimate interests: fraud prevention and security.
• •Legal obligation: compliance with applicable laws.
• •Consent: where explicitly provided.
• •LGPD bases: Art. 7(II), Art. 7(V), Art. 7(IX). GDPR bases: Art. 6(1)(b), (c), (f).

▸4. How We Process Your Data

• •Voice messages are transcribed by Google Gemini AI and immediately and permanently deleted — audio is NEVER stored after transcription.
• •Transcribed text and financial data are stored securely in Supabase (PostgreSQL on AWS).
• •WhatsApp messages are received via the official Meta WhatsApp Business Cloud API.
• •We do not sell, rent, or share your personal data for marketing purposes.
• •We do not use your financial data to train AI models.

▸5. International Data Transfers

• •For EU/EEA and Italian users: transfers use Standard Contractual Clauses (SCCs) approved by the European Commission.
• •For Brazilian users: transfers comply with LGPD Article 33.
• •All third-party processors (Google, Meta, Supabase, Vercel, Resend) maintain their own data protection certifications.
• •Request a copy of applicable transfer safeguards: privacy@vozzo.app

▸6. Third-Party Service Providers

• •Meta Platforms, Inc. (USA) — WhatsApp Business Cloud API
• •Google LLC (USA) — Gemini AI for voice transcription
• •Supabase, Inc. (USA) — database and authentication
• •Vercel, Inc. (USA) — web application hosting
• •Resend, Inc. (USA) — transactional email

▸7. Data Storage and Security

• •Row Level Security (RLS): no user can access another user's data — enforced at the database level.
• •All data encrypted in transit (TLS 1.2+) and at rest (AES-256).
• •Production access restricted to authorized personnel on a need-to-know basis.
• •Principle of least privilege applied to all API keys and credentials.

▸8. Your Rights

• •Access, rectification, erasure, portability, restriction, and right to object.
• •Withdraw consent at any time by canceling your subscription.
• •EU/Italian users: lodge a complaint with your supervisory authority (e.g., Garante Privacy in Italy).
• •Brazilian users: petition the ANPD (www.gov.br/anpd).
• •California users (CCPA): right to know, opt-out of sale (we don't sell data), non-discrimination.
• •Contact: privacy@vozzo.app — response within 30 days.

▸9. Data Retention

• •Active accounts: retained for subscription duration plus 90 days after cancellation.
• •Deleted accounts: all personal data permanently deleted within 30 days.
• •Voice messages: deleted immediately after transcription — never stored.
• •Technical logs: retained up to 90 days for security purposes.

▸10. Cookies

Vozzo uses essential cookies only, necessary for authentication and session management. No advertising, behavioral tracking, or third-party analytics cookies are used.

▸11. Children's Privacy

Vozzo is not intended for users under 18. If you believe we have collected data from a minor, contact privacy@vozzo.app immediately.

▸12. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the State of Wyoming, USA. Your rights under local mandatory data protection laws (LGPD, GDPR, CCPA) are not limited by this clause.

▸13. Changes to This Policy

We will notify you of material changes via email and in-app notification at least 30 days in advance. Continued use after changes constitutes acceptance.

▸14. Contact

• •Pelloso Holdings LLC
• •5830 E 2nd St, Ste 7000, Casper, WY 82609, USA
• •Email: privacy@vozzo.app
• •Website: https://vozzo.app