Privacy Policy

Last Updated: March 20, 2026

Effective Date: March 20, 2026

1. Introduction

This Privacy Policy describes how ChatBits ("we," "us," or "our"), operated by M D LABS CONSULTORIA E TREINAMENTOS LTDA (CNPJ: 32.174.043/0001-80), located in Cabo Frio, RJ, Brazil, collects, uses, stores, shares, and protects your personal information when you use our website (https://smochat.app/), application, and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Name, email address, and password when you create an account
Payment Information: Billing details processed through our secure payment providers (we do not store credit card numbers on our servers)
Profile Information: Any additional information you choose to add to your profile
Communications: Messages you send to us via email or support channels
Content: Chatbot configurations, automated responses, and message templates you create

2.2 Information from Meta (Facebook/Instagram) Integration

When you connect your Facebook Page or Instagram account to ChatBits, we access and process the following data through Meta Platform APIs:

Page Information: Facebook Page name, ID, and profile picture
Messaging Data: Messages received through Facebook Messenger and Instagram Direct that are processed by your chatbot configurations
Subscriber Data: Names and profile information of users who interact with your Facebook Page via Messenger (as authorized by you and consented to by end users)
Page Insights: Engagement metrics and analytics data from your connected pages
Access Tokens: Authentication tokens to maintain your connection (stored encrypted)

Important: We only access data you explicitly authorize through the Facebook/Instagram login permission dialog. You can revoke access at any time through your Facebook Settings or within ChatBits.

2.3 Information Collected Automatically

Log Data: IP address, browser type, operating system, referring URLs, access times, and pages viewed
Device Information: Device type, screen resolution, and unique device identifiers
Usage Data: Features used, actions taken, frequency and duration of activities
Cookies and Similar Technologies: As described in our Cookie Policy

2.4 Information We Do NOT Collect

Browsing history outside of ChatBits
Precise geolocation data
Health, financial, or biometric information
Information from minors under 18 years of age

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, maintain, and improve the Service, including chatbot automation, message processing, and subscriber management
Account Management: To create and manage your account, process payments, and provide customer support
Meta Integration: To connect to your Facebook Pages and Instagram accounts, process messages through your configured chatbots, and deliver analytics
Communications: To send you service-related notices, updates, security alerts, and support messages
Improvement: To analyze usage patterns, diagnose technical issues, and improve our features and user experience
Security: To detect, investigate, and prevent fraudulent transactions, abuse, and security threats
Legal Compliance: To comply with applicable laws, regulations, and legal processes

We do NOT use your data for: Advertising or ad targeting, selling to third parties, profiling for marketing purposes, or any purpose not described in this Policy.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

Service Providers: With trusted third-party providers who assist in operating the Service (hosting, payment processing, email delivery), bound by confidentiality obligations
Meta Platforms: Data necessary to maintain integration with Facebook and Instagram APIs, in accordance with Meta Platform Terms
Legal Requirements: When required by law, court order, or governmental regulation
Safety: To protect the rights, property, or safety of ChatBits, our users, or the public
Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
With Your Consent: When you explicitly authorize sharing

5. Data Retention

Account Data: Retained for the duration of your account plus 30 days after deletion
Meta/Messaging Data: Retained while your account is active; deleted within 30 days of account cancellation or disconnection of Meta integration
Log and Security Data: Retained for up to 30 days for security and fraud prevention
Backup Data: Retained for up to 30 days for system recovery purposes
Aggregated/Anonymous Data: May be retained indefinitely as it contains no personal information

6. Data Security

We implement industry-standard security measures to protect your data:

TLS/SSL encryption for all data in transit
Encryption of sensitive data at rest (including passwords hashed with bcrypt)
Access controls limiting data access to authorized personnel only
Regular security audits and vulnerability assessments
Intrusion detection and monitoring systems
Meta access tokens stored with encryption

While we take commercially reasonable measures to protect your data, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to [email protected] with the subject "SECURITY URGENT."

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (see our Data Deletion Policy)
Portability: Request your data in a portable format
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. International Data Protection

8.1 LGPD (Brazil - Lei Geral de Protecao de Dados)

We comply with the Brazilian General Data Protection Law (LGPD - Law 13.709/2018). As a company based in Brazil, we process your data in accordance with LGPD principles including purpose limitation, adequacy, necessity, transparency, security, and accountability.

8.2 GDPR (European Union)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). See our GDPR Compliance page for details. Our legal bases for processing include: consent, contractual necessity, legitimate interests, and legal obligations.

8.3 CCPA (California, USA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will promptly delete it. If you believe a child has provided us with personal data, please contact us immediately.

10. Third-Party Links

ChatBits may contain links to third-party websites or services. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

Email: [email protected]
Company: M D LABS CONSULTORIA E TREINAMENTOS LTDA
Location: Cabo Frio, RJ, Brazil
CNPJ: 32.174.043/0001-80