Privacy Policy

Who we are

This Policy applies to Thaira (thaira.ai). The service is operated by THAIRAHUB TECNOLOGIA DA INFORMAÇÃO LTDA, CNPJ 64.477.587/0001-07, with its registered office at Rua Rio Grande do Norte, 1436, Sala 813, Savassi, Belo Horizonte/MG, CEP 30130-138, Brazil ("ThairaHub", "we"). Under Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, LGPD), ThairaHub is the controller of the data described here.

1. What is public by nature

Thaira exists to publish. Your profile, your articles and your sales pages, with the name, the photo, the links and everything you put in them, are open to anyone and to any system that reaches them, including those of AI companies, which may keep and use them under their own policies. Do not publish what you do not want to be public. Drafts and proposals are not public.

2. Data we process

Account. When you sign in with Google or with an email and password, we receive your email address and, when you sign in with Google, your name and photo. Sign-in is handled by Google's Firebase Authentication, which asks only for your identity, with no access to Gmail, Drive or Calendar.

Content and history. What you write in the panel, published or not, and the history of each version, with who made it: you, ThairaHub, an agent with a key to your account, or Thaira itself.

"Get started" answers (paid plans). Your site, your profiles, the text about you and anything else you answer. To write the draft of your profile, we read the public pages of your site and send the answers and that text, through our gateway, to an AI model provider, only to write the draft. The answers are kept for the agents that write for you.

AI reads. When an AI agent, or someone coming from an AI product, reaches your pages, we record the page, which AI, the kind of visit, the day and a count. The visit's IP address is used on the spot, only to confirm that the visit really came from that AI, and is not kept. We do not track human readers individually.

Reports. The questions tracked in AIs, what they answered and the summary of each period. The report's link is yours: anyone who has it can open it.

Billing. When you subscribe to a paid plan, the payment is processed by Stripe. We keep the plan, the subscription's status and Stripe's identifiers, never your full card details.

AI usage. To run and bill the service, we record the number of requests to the models, the token count, the model used and the cost. We do not keep the content of the requests or of the answers in the gateway.

Technical access. The hosting records technical access data, such as IP address and browser, for security and operation. Cookies and browser storage are described in the Cookie Policy.

3. Legal bases and purposes

• Performance of a contract (art. 7, V): creating and keeping your account, publishing what you publish, writing for you, producing reports, processing payments and providing support;
• Legitimate interest (art. 7, IX): security, fraud prevention, counting AI reads and measuring usage;
• Consent (art. 7, I): optional messages about what is new;
• Legal obligation: keeping tax records.

4. Where the data is kept

The database and the files are in Google Cloud, in the United States; sign-in, in Firebase (Google); the site is hosted by Vercel. International transfers follow article 33 of the LGPD. The data is protected with encryption in transit and at rest.

5. Who we share it with

We do not sell personal data. We share data only with the processors that provide services to us:

• Google Cloud Platform: infrastructure, database and files;
• Firebase (Google): sign-in;
• Vercel: hosting the site;
• Stripe: payments;
• AI model providers: reached through our gateway, only to write what you ask for or what your plan includes.

What you publish is public, as described in section 1, and does not depend on any sharing.

6. Automated processing

AI writes drafts and proposals. Nothing goes live without your approval, and no automated decisions with legal effects on you are made.

7. Retention and deletion

Account data is processed while the account is active. You can take a publication down at any time, and ask for your account and your data to be deleted by writing to agent@thairahub.com. After the account is closed, some data may be kept for up to 3 years, under the limitation periods of Brazil's Civil Code, or longer when the law requires it, as with billing records. Copies that third parties have already made of what was public are beyond our control.

8. Security

We use encryption in transit, restricted access control and a record of who makes each change to your account. Agents' keys work only on the accounts they were created for, and never delete or publish anything.

9. Your rights (LGPD, art. 18)

You can ask at any time, by writing to agent@thairahub.com, for: confirmation that your data is processed; access to the data; correction of incomplete, inaccurate or out-of-date data; anonymization, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about whom we share it with; and the withdrawal of your consent.

10. Children and teenagers

Thaira is not meant for anyone under 18. If we learn that we process a minor's data without the consent required, we will delete it.

11. Changes to this Policy

We may update this Policy. Material changes will be announced on the site or by email, and the date at the top shows the version in force.

12. Data Protection Officer

To exercise your rights or ask a question: agent@thairahub.com.