This policy explains which personal data Monk Business processes when you use this website, the AI assistant, the contact form or our WhatsApp, what we use it for and your rights under Brazil’s General Data Protection Law (Law No. 13,709/2018, LGPD). The Portuguese version prevails.
Who the controller is
Monk Business, CNPJ 44.205.879/0001-83.
For any privacy matter, write to privacidade@monkbusiness.com.br.
What data we process
- Contact form and quote requests: name, email, phone, company, topic, message and the record of your consent.
- Website AI assistant: the messages in the conversation and, if you confirm a quote request, the data in that request.
- WhatsApp: phone number, profile name and the messages exchanged.
- Technical data: IP address stored only as a hash (a cryptographic digest that does not reveal the address), date and time of access, page language and the result of the anti-bot check.
We do not ask for sensitive data. Please do not send that kind of information in the chat or the form.
What we use it for and the legal basis
- Responding to your quote request and preparing a proposal: preliminary procedures related to a contract, at your request (LGPD art. 7, V).
- Answering your questions through the assistant and WhatsApp: legitimate interest (art. 7, IX).
- Protecting the website against abuse, spam and fraud: legitimate interest (art. 7, IX).
- When we ask for your consent, such as the confirmation box on the form: consent (art. 7, I), which you can withdraw at any time.
AI assistant
The assistant’s answers are generated by an artificial intelligence model, Claude by Anthropic, running on Amazon Web Services (AWS). The assistant tells you it is an AI, only answers about Monk Business and can make mistakes. A quote request is registered only after you confirm your details.
Who we share data with
We use vendors that process data on our behalf (processors):
- Amazon Web Services: website hosting, database, email delivery and running the AI model.
- Twilio and Meta: sending and receiving WhatsApp messages.
- Cloudflare: anti-bot verification (Turnstile).
- Google Workspace: team email.
We do not sell personal data.
International transfer
These vendors may process data in the United States. The transfer follows LGPD art. 33, with the contractual safeguards offered by each vendor.
How long we keep data
- Assistant and WhatsApp conversations: 30 days.
- Quote requests: 12 months.
- Technical security records: a few days.
After these periods, the data is deleted automatically, unless the law requires us to keep it.
Cookies
This website does not use cookies or tracking or advertising tools. The assistant stores the conversation only in your browser’s session storage, which is cleared when you close the tab.
Your rights
Under LGPD art. 18, you can ask for: confirmation that we process your data; access to the data; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data; portability; information about who we share data with; withdrawal of consent; and deletion of data processed on the basis of consent. You can also file a complaint with Brazil’s National Data Protection Authority (ANPD).
To exercise these rights, write to privacidade@monkbusiness.com.br.
Security
We use encrypted connections, restrict access to the data and store IP addresses only as hashes.
Updates
We may update this policy. The date of the last update appears at the top of this page.