Voorks Platform Privacy Policy

This is a courtesy translation provided for convenience. In the event of any discrepancy or conflict of interpretation, the Portuguese version prevails. Read the Portuguese version.

Last updated: June 9, 2026

TALKEY LTDA, enrolled with the Brazilian National Registry of Legal Entities (CNPJ) under No. 60.804.022/0001-36, headquartered in Jundiaí, State of São Paulo, Brazil, owner and operator of the Voorks platform ("Voorks", "we" or "Operator"), is committed to protecting the privacy and confidentiality of the personal data of End Users and Platform Accounts.

This Privacy Policy ("Policy") describes how we collect, use, share and protect personal information, in compliance with Brazilian Law No. 13,709/2018 (the Brazilian General Data Protection Law, "LGPD") and the Brazilian Internet Civil Framework (Law No. 12,965/2014). This Policy forms an integral part of the Voorks Terms of Use.

1. Definitions

Platform or Voorks: the technology environment that enables Platform Accounts to configure AI-powered service agents and connect human agents.
Platform Account: the individual or legal entity that registers on Voorks to create and manage service agents and connect human agents.
End User: the person who interacts with the agents configured by the Platform Accounts.
Personal Data: any information relating to an identified or identifiable natural person.
Processing: any operation carried out with personal data, such as collection, use, storage, sharing and deletion.
Controller and Processor: as defined in the LGPD.

2. Roles in Data Processing (Controller and Processor)

Defining roles is essential for the correct allocation of responsibilities under the LGPD:

Platform Account data: with respect to the registration and usage data of the Platform Accounts themselves, Voorks acts as Controller.
End User data: with respect to the personal data entered, collected or processed through the agents configured by the Platform Accounts, the Platform Account acts as Controller and Voorks acts as Processor, processing such data in accordance with the Platform Account's instructions and strictly to the extent necessary to provide the Services.

When Voorks acts as Processor, data subjects' requests relating to such data should, as a rule, be directed to the respective Platform Account, which is the Controller. Voorks will provide the appropriate technical support.

3. Data We Collect

We collect the data necessary for the proper functioning of the Platform, which may include:

Registration Data (Platform Accounts): name, CPF or CNPJ (Brazilian tax IDs), e-mail, telephone number and information about the company.
End User Data: information entered or collected during interactions with the agents, such as name, e-mail, telephone number and other data voluntarily provided in the conversations.
Browsing and Usage Data: IP address, approximate geolocation data, device identifiers, browser type, pages visited and access logs.
Billing Data: information necessary for invoicing and payment of the contracted plans.

Platform Accounts are advised to configure their agents to collect only the data strictly necessary for their purposes.

4. Purposes and Legal Bases of Processing

We process personal data based on the legal bases provided for in the LGPD, according to the purpose:

Performance of a contract: provision, maintenance and operation of the Services, account management and support.
Compliance with a legal or regulatory obligation: meeting tax, accounting and legal requirements.
Legitimate interest: continuous improvement, information security, fraud and abuse prevention, and statistical analyses, always respecting the rights and expectations of data subjects.
Consent: where applicable, for specific purposes that depend on the data subject's authorization.

Voorks does not use data for advertising or promotional purposes, except when expressly authorized by the Platform Account or the End User.

5. Use of Artificial Intelligence and Data Processing

Voorks agents use artificial intelligence technologies, including language models, which may be provided by third-party providers. To generate responses, content from the interactions may be transmitted to these providers to the extent necessary for the agents to function.

These providers are contractually required to process the data securely and only to the extent of providing the service. Platform Accounts, as Controllers, must ensure that they have an adequate legal basis and that they inform their End Users about the use of automated service.

6. Data Sharing and Sub-processors

Personal data may be shared in the following circumstances:

With service providers and sub-processors: for hosting, processing, infrastructure, messaging, payment processing and provision of artificial intelligence models, exclusively for the operation of the Services. Such third parties are contractually required to maintain the confidentiality and security of the information.
With competent authorities: in compliance with a legal or regulatory obligation or a court order.
In corporate transactions: in the event of a merger, acquisition or reorganization, in which case the data may be transferred, with this Policy continuing to be observed.

Voorks does not sell personal data and does not share it with third parties for marketing purposes.

7. International Data Transfers

Some service providers and technology providers may be located outside Brazil. In such cases, Voorks will adopt the safeguards required by the LGPD to ensure an adequate level of protection, including appropriate contractual clauses, with particular attention to data sovereignty and data protection requirements.

8. Cookies and Tracking Technologies

The Platform may use cookies and similar technologies for authentication, security, remembering preferences and usage analysis. The User can manage cookie permissions in their browser settings, it being noted that disabling certain cookies may affect Platform features.

9. Storage and Security

We adopt appropriate technical and organizational measures to protect data against unauthorized access, loss, destruction or alteration, including access controls, encryption in transit, audit logs and access restricted to authorized personnel.

Although we employ efforts consistent with market best practices, no system is entirely immune to incidents. In the event of a security incident that may pose a relevant risk to data subjects, we will take the appropriate measures and make the notifications required by law.

10. Data Retention

Personal data will be kept for the period necessary to fulfill the purposes for which it was collected or as required by law. Once the contract or account is terminated, the data may be kept for the period provided for in legal and regulatory obligations, and will subsequently be deleted or anonymized.

11. Data Subjects' Rights

Under the LGPD, data subjects may exercise the following rights:

Confirmation and access: confirm the existence of processing and access their data;
Correction: correct incomplete, inaccurate or outdated data;
Anonymization, blocking or deletion: of unnecessary or excessive data or data processed in violation of the LGPD;
Portability: request the portability of the data to another provider, subject to trade and industrial secrets;
Deletion: request the deletion of data processed on the basis of consent;
Information on sharing: obtain information about the entities with which the data has been shared;
Withdrawal of consent: where consent is the applicable legal basis.

When Voorks acts as Processor of End Users' data, requests should, as a rule, be directed to the responsible Platform Account (the Controller). For data for which Voorks acts as Controller, data subjects may contact our Data Protection Officer, as set out in Section 16.

12. Automated Decisions

The agents operate on the basis of artificial intelligence and may produce responses in an automated manner. The data subject has the right to request a review of decisions made solely on the basis of automated processing that affect their interests, and such a request should be directed to the responsible Platform Account, when it is the Controller.

13. Data of Children and Adolescents

The Platform is not intended for the intentional collection of data from children and adolescents. If a Platform Account processes minors' data through the agents, it must observe the specific legal requirements, including the consent of at least one parent or guardian, where required.

14. Account and Data Deletion

When a Platform Account or End User requests the deletion of their account or their data, Voorks undertakes to carry out the deletion within 30 days of the request, except where retention is necessary to comply with legal or regulatory obligations or for the regular exercise of rights.

15. Combating Misuse

Voorks is committed to combating abusive practices, such as spam, unauthorized access and misuse of data. All activity on the Platform must follow ethical and legal guidelines, and measures are adopted to prevent and curb abuse.

16. Data Protection Officer (DPO) and Contact

To exercise your rights or clarify questions about the processing of personal data under Voorks' responsibility, the data subject may contact our Data Protection Officer at: privacidade@voorks.ai, or through the official channels available on the Voorks website.

17. Changes to this Policy

Voorks reserves the right to change this Policy at any time. In the event of relevant changes, Users will be notified through the Platform or other official channels. Continued use of the Platform after the changes take effect will constitute acceptance of the new version.

18. Limitation of Liability

Although Voorks implements security measures to protect personal data, it shall not be held liable for damages arising from:

Events beyond its reasonable control, such as failures in third-party systems or service interruptions;
Improper or unauthorized use of data by the Users themselves;
Actions based on information from unofficial sources.

To the maximum extent permitted by law, Voorks shall not be liable for indirect, incidental or consequential damages, except in cases of proven willful misconduct or gross negligence.

19. Governing Law and Jurisdiction

This Policy is governed by Brazilian law, in particular by the LGPD. The courts of the Judicial District of Jundiaí, State of São Paulo, Brazil, are elected to settle any disputes relating to this Policy.

20. General Provisions

This Policy constitutes the entire understanding between the User and TALKEY LTDA regarding the processing of personal data within the scope of the Platform, superseding any prior understandings. Any failure to exercise a right shall not imply a waiver, and such right may be exercised at any time.

If you have any questions or requests relating to this Policy, please contact us through the official channels available on the Voorks website.