How we process the data in an operation in which the Partner resells with its own brand, and why its portfolio never becomes our base.
Last updated: September 25, 2026
This policy explains how the FunnelOps platform, operated by Wiizo Technology and Automation Ltda., whether or not registered on the CNPJ 58,979,346/0001-63, with direction in R. Barão do Cerro Azul, 952, Centro, São José dos Pinhais/PR, CEP 83005-430, onwards .Wiizo . . .FunnelOps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . model white-labelthe only one on which the platform is marketed.
It applies to: the FunnelOps.com.br website; the commercial process with the candidates for Partner; the environment of the platform contracted by the Partner; and the support provided to it. The companies and contacts that the Partner attends also appear here but with a different role, explained in the next section.
This is the most important section of the document. In a white-label operation exist Two levels of dataWith different leaders:
| Level | What is it? | FunnelOps | Role of the Partner |
|---|---|---|---|
| Partner data | Registration of the agency, representatives, billing, use of the platform, called support. | Controller | Holder a representative |
| Data on the operation of the partner | Companies served by him, users of these companies, contacts, conversations, businesses, archives and campaigns. | Operator | Controller |
How Operator, we process the data of the operation only according to the instructions of the Partner and what strictly necessary to provide the service. We do not decide purposes on these data and we do not use them for our own purpose.
How controller, it is the Partner who establishes legal bases, publishes his own privacy notice, collects consents when applicable and responds to the holders of the transaction. If the Partner processes data outside of the instructions or legitimate purposes, he responds to this.
The Partner hands over his own portfolio to the platform. These commitments exist because of this and are valid throughout the lifetime:
From your partner and team: Name, email, telephone, charge, CNPJ and company data, legal representative data, access credentials, billing and billing data, access and use records, support call content.
Candidates for Partners: Data provided on the website form name, WhatsApp, email, performance profile and message in addition to the origin of the visit and navigation data.
From the operation of the Partner (in which we are an operator): data from the companies served and their users; contact and lead data, such as name, phone, email and custom fields created by the Partner; content of conversations, media and archives; business records, calendars, collections and campaigns; delivery and reading metadata.
The Partner decides what enters the platform. It must avoid sensitive data and data from children and adolescents outside of an adequate legal base, and is responsible for the legitimacy of the base it carries.
| Purpose | Legal basis |
|---|---|
| Replying to the partnership form and conducting the negotiation | Pre-contractual proceedings and legitimate interest |
| Create and maintain the partner's environment, collect and support | Contract performance |
| Provide the service on the Partner's transaction data | Implementation of a contract between us and the Partner; the basis before the holder defines it |
| Security, prevention of fraud, abuse and channel blockages | Legitimate interest and compliance |
| Access to implementation registers | Legal obligation (Internet Civil Mark) |
| Tax, accounting and regulatory obligations | Compliance with the legal obligation |
| Defence in administrative, judicial or arbitral proceedings | Regular exercise of rights |
We don't sell personal data and we don't advertise directly with the Partner's operation data.
The platform offers AI functions that generate, summarize, classify, transcribe and recommend content, and that can perform actions configured by the Partner or by their client: program, charge, apply label, move in the funnel.
These resources depend on technology suppliers hired as Sub-operators, under obligations compatible with this policy. The content sent is processed to execute the requested functionality.
Who configures the agent instructions, knowledge base, liberated capabilities and the point where a human enters is his/her Partner or client. The review of the results and the decision on what is sent to the final consumer are also his/her own. The AI does not replace legal, medical, financial or accounting advice, and should not be used for decisions of high impact without legal basis, transparency and human supervision.
We share only what is necessary and under compatible contractual obligations:
In corporate reorganization, the data can be transferred to the successor, maintaining the purposes and proper communication.
Some suboperators operate outside Brazil. In these cases we adopt the safeguards provided for in the LGPD, such as appropriate contractual clauses and supplier evaluation, and limit the transfer to what is necessary for the purpose.
Data of the Partner: during the term and for the legal terms of custody after the term, especially prosecutors and defence.
Details of the operation of the Partner: as long as the contract is in force and for the export period provided for in the contract. If the contract is closed, the partner has a reasonable time to export. data in machine-readable format before any scheduled deletion.
Access to the application records are maintained for the legal period. Data may be retained beyond the time limits when there is a legal obligation, order of authority or need for defence.
We adopt technical and organisational controls provided for risk: segregation of environments by Partner, access control by profile, individual credentials, two-step authentication when available, encryption in transit, backup, monitoring and administrative access record.
No system is immune. In the face of a relevant incident, we detect, count and We communicate to the Partner with the information necessary for him, as controller of the operation, to evaluate the communication to the ANPD and the holders. The Partner must keep an updated channel for that notice.
Every holder has the right to confirm, access, correct, anonymization, portability, deletion, information on the exchange and review of automated decisions, in the terms of the LGPD.
The answerer depends on the level of the data:
We may request information to confirm your identity before responding.
The platform is intended for business use and is not aimed at children and adolescents. The Partner should not enter data from minors without an adequate legal basis and without the proper role of responsible, and should guide his clients in the same direction.
The platform connects third-party services chosen by the Partner or its customers. The treatment carried out by these third parties follows their policies. We do not control decisions of blocking, limiting, approving templates or changing the rule of WhatsApp, Meta, Google, operators, gateways or marketplaces.
This policy can be updated to reflect legal, technical or service changes. Material changes are communicated to the Partner by notice on the platform or by email, with a reasonable advance when applicable. The update date is at the top of this page.
To exercise your rights, ask questions about this policy or treat data protection, the Partner and data subjects under our control can communicate with us by email. Site contact channelidentifying the request and the data necessary for identity verification.
Personal Data Processing Officer (PDO): Wiizo Technology and Automation Ltda.in the address indicated in the first section.
Holders who are contacts or customers of a white-label operation must search The partner responsible for the operation, which is the data controller.