Privacy policy

Introduction

This Privacy Policy ('Policy') describes how dialeco, a product of maiscolher.com ('we', 'dialeco'), collects, uses, stores and shares personal data when you use the Service. dialeco lets you write a message and pay for a synthesized voice to call and read the message by phone to the recipient, with no sign-up required.

You agree to this Policy by using the Service. For details on what dialeco does, see the Terms of Service.

Data we collect

We collect only the data strictly necessary to provide the Service. Nothing is collected for secondary purposes without your specific consent.

• Data you provide: sender's name, sender's e-mail, recipient's name, recipient's phone number, message content, choice between sending now or scheduling, and the chosen time when applicable.
• Payment data: processed by the payment provider contracted by dialeco to process Pix or credit card payments. We receive the payment confirmation and the transaction identifier, but never the sensitive data of your bank account or card (card number, CVV, Pix key, institution, or the source CPF/phone are not shared with us by the provider).
• Browsing data: IP address, browser, device type and referrer, for technical and security purposes, stored in aggregated and anonymized form when possible.
• Call data: when the recipient answers, the call is processed by a telephony provider contracted by dialeco, which generates metadata (date, time, duration, answer status) and, when accepted, the audio recording.
• Audio you record (when you choose to send the message in your own voice): goes through automatic transcription solely for content moderation; neither the audio nor the transcription is used to train models.
• Essential and measurement cookies (described further below).

Purpose and legal basis

We process your personal data in accordance with Brazil's Lei nº 13.709/2018 (LGPD — General Data Protection Law). The purposes and legal bases are:

• contract performance: processing the message, processing payment, and placing the call (art. 7, V, LGPD);
• compliance with a legal or regulatory obligation: keeping payment and call records as required (art. 7, II);
• dialeco's legitimate interest in preventing fraud and abuse of the Service (art. 7, IX);
• consent, when applicable: call recording, follow-up e-mails, and, in the future, account creation, with specific consent and consent from a child/adolescent's guardian when applicable (art. 8 and art. 14).

Sharing with third parties

We share your data only with the processors necessary to provide the Service, contractually bound to protect your data and to use it only for the purpose of providing the Service:

• Payment provider: processes Pix and credit card payments. Receives only the data necessary for the transaction (amount, product identifier, and data required by the chosen method); we do not share the message content.
• Telephony provider: receives the recipient's phone number, the message content to be read, and produces the call metadata (date, time, duration, status).
• Synthesized voice provider: receives the message text and generates the voice used on the call.
• Audio transcription provider: receives the audio recorded by the sender (when you choose to send the message in your own voice) and generates the transcription used solely for content moderation.
• Transactional e-mail provider: delivers payment-confirmation and call-completion e-mails to the sender (and to the recipient only when applicable).
• Hosting and database providers: store data in a secure environment, strictly for the purpose of providing the Service.
• Measurement providers: one receives only browsing events and progress through the creation flow (which step was completed, chosen tier, delivery type, whether a music bed was added, whether the message was voice-recorded, site language); the other counts page visits in aggregate, without cookies. Neither performs individual profiling nor receives any message content, name, e-mail or phone number. They are only activated if you accept the 'measurement' category in the cookie notice; without that acceptance, nothing is loaded and nothing is sent.

Data retention

We keep your data for as long as necessary to provide the Service and comply with legal obligations. Specifically:

• order data (message, sender, recipient, payment): 12 months after the call is sent, for tracking, support and fraud prevention;
• call recording: 90 days after sending, unless deletion is requested earlier. After that, it is automatically deleted;
• sender-recorded audio (when you choose to send the message in your own voice): 90 days after sending, unless deletion is requested earlier. After that, it is automatically deleted. Unpaid orders have the recording deleted as soon as the order expires;
• payment logs: as required by the payment provider and by Brazil's federal tax authority (Receita Federal), when applicable;
• aggregated browsing data: for a period compatible with the measurement purpose, typically 12 months in aggregated form.

Cookies and similar technologies

We use cookies and similar technologies only for the purposes described below. You can disable them in your browser settings; part of the Service (such as the message-creation flow) depends on essential cookies.

• essential: enable the operation of the page and of the /criar flow. There is no option to turn them off without compromising the Service;
• measurement: understand, in aggregate, the page's performance and where people drop off in the creation flow, without individual profiling. They only load after you accept this category; if you decline, nothing is loaded and no data is sent;
• our own marketing, when implemented: remind an already engaged visitor to finish sending their message. We do not share data with third-party ad networks.

Account and login (upcoming)

There is currently no sign-up. When we introduce the optional account, we will collect additional data limited to:

• verified e-mail and, optionally, a display name;
• passwords stored in hashed form (never in plain text);
• history of messages sent through the account, for display and possible resending, as you choose.

Your rights as a data subject

Under the LGPD, you may exercise the following rights regarding your personal data at any time:

• confirm the existence of processing and access the data;
• correct incomplete, inaccurate or outdated data;
• anonymize, block or delete unnecessary, excessive, or non-compliant data;
• port the data to another provider, when applicable;
• delete personal data processed with consent (when applicable);
• receive information about sharing and purpose;
• withdraw consent (without affecting the lawfulness of processing carried out before withdrawal).

Data security

We adopt technical and organizational measures to protect your data: storage with providers that follow market standards, access restricted to authorized personnel, TLS-encrypted traffic, password encryption (once the account exists), and incident monitoring. No system is completely immune, but we commit to reporting relevant incidents as required by the LGPD.

Changes to this Policy

We may update this Policy to reflect changes to the Service, to the login/account process, or to legal requirements. The 'Updated on' date at the top of the page indicates the version in effect. For substantial changes, we will clearly identify the new version and, when applicable, request new consent.

Contact and data controller

The data controller is maiscolher.com, the legal owner of the dialeco product. For privacy or LGPD questions, or to exercise your rights, write to contact@dialeco.com with the subject 'LGPD'.