Privacy Policy

1. What this Privacy Policy covers

Protecting your privacy is very important to us. That is why we present this Privacy Policy to explain our practices regarding the collection, use, and disclosure of information we receive when you use our website(s) located at www.bluey.digital (the “Site(s)”) the Bluey Synapse platform, on the web and in its apps for iPhone, iPad and Android (the “Apps”), and our consulting, data analytics, data engineering, governance, and digital product services made available through the Site(s) or through direct contact with our team (collectively, the “Services”). For ease of reading the terms of this Privacy Policy, our Site and all services provided by Bluey are collectively referred to as the “Services.” This Privacy Policy does not apply to any third-party websites, services, or applications, even if they are accessible through our Services. In addition, please note that, unless we define a term in this Privacy Policy, all capitalized words used herein have the same meanings as in our Terms of Service.

2. Information we collect

Our primary goal in collecting information is to provide and improve the Services, administer your use of the Services (including your Account, where applicable), and enable you to easily enjoy and navigate our Services.

Account Information. To access certain features of the Services, you may create an account (“Account”). When you create an Account, we will collect information that can be used to identify you, such as name, email address, phone number, company, job title, and, where applicable, payment information (“Personally Identifiable Information” or “PII”). We may also collect additional information not considered PII, such as business address or general corporate information. If you create an Account on behalf of an organization, we may collect corporate registration data, billing information, and institutional contact details.

The PII collected may be stored and processed in tools such as HubSpot or other equivalent platforms, always in accordance with applicable laws in Brazil and abroad, including data protection requirements. We may use your PII to contact you through newsletters, marketing materials, or information related to the Services. You may opt out of receiving these communications.

Bluey agrees that any data received during the use or engagement of its Services will be used exclusively for the purpose of providing services to the client and will not be employed for internal model training, proprietary updates, or any use beyond the contractual scope, except when authorized in writing.

3. Information for visitors

If you sign up to receive content, updates, educational materials, or notifications about new features and services, we will collect your Personally Identifiable Information, such as name and email. We may use this information to send you relevant communications. You may opt out of receiving such communications at any time.

4. Cookies

Cookies are small text files stored in your browser. The cookies of the Bluey site (bluey.digital) and of Bluey Synapse on the web (synapse.bluey.digital) belong to our own domain, bluey.digital, and both read the same values: you choose once and the choice holds for the site and for the platform.

On your first visit a notice asks which cookies you accept: Accept all, Only essential or Choose, where you switch analytics cookies and marketing cookies on or off separately. Essential cookies always work. Analytics and marketing cookies are stored only with your consent (article 7, I of the Brazilian General Data Protection Law), and no option comes ticked in advance.

You can change your choice at any time through the Cookies link in the footer of every page, or by opening your cookie preferences here. When you withdraw a consent, the cookies of that category are deleted from your browser. You can also block or delete cookies in your browser settings; without the essential cookie, the notice shows again on every visit.

Without analytics consent, the site records only the page viewed, with no identifier and without storing analytics cookies, and Google Analytics stores no cookies and receives only signals without an identifier (Google's consent mode). The visit's campaign parameters (utm) are kept only in the open tab, in the browser's session storage, which is cleared when the tab closes, and they travel with the links to Bluey Synapse so the sign-up records which campaign brought you. They never carry an identifier of yours.

Your IP address is used only at the moment each record reaches our servers, to estimate your approximate location (country and state and, with analytics consent, city) and to protect the service against abuse by limiting how much can be sent. The IP address is never stored. Page addresses are stored without their parameters.

Browsing records are kept for up to 25 months, and anonymous ids never linked to an Account are deleted after 13 months without a visit. When you delete your Account, the records linked to it are deleted too. Account creation, e-mail confirmation, subscription and cancellation are recorded by our servers for every Account, because they are part of running the Account and its billing.

5. Web Beacons

“Web beacons” (also called clear gifs) are small images embedded in our Services for purposes such as communicating with cookies, usage analytics, and performance measurement. Unlike cookies, they are not stored on the user's device but are integrated into pages or emails.

6. Information related to use of the Services

Our servers automatically record information about how users use our Services (“Log Data”), including account holders or visitors. This data may include IP address, browser type, operating system, pages accessed, visit duration, search terms, clicks, and other statistics. We use this data to administer, improve, and optimize the Services. We may also generate aggregated, non-identifiable analytics. We do not share PII with third parties, except authorized processors.

7. Information sent by your device

We collect certain information sent by your device, such as device identifier, settings, operating system, and Services usage data.

8. Location information

We may collect approximate location information, such as IP address-based geolocation, or GPS and device sensor data, when enabled. This may be used to personalize and improve the Services. If you do not wish to share location information, you can disable this feature on your device.

9. Information shared with third parties

With your prior written consent, your PII may be shared with third parties as necessary for the performance of the Services or features used. Information shared with other users: certain interactions, such as participation in communities, forums, or collaborative platforms that may be made available, may display your name, photo, or shared content, depending on your privacy settings. We recommend caution when posting sensitive information.

10. Information shared with service providers

We may engage third-party service providers to assist us in administering and delivering the Services, such as CRM platforms, communication tools, and hosting providers. These providers have access to the information only for the purpose of carrying out their activities. We may also share aggregated, non-identifiable information with partners for purposes of analysis and improvement of the Services.

11. Third-party artificial intelligence in Bluey Synapse

Bluey Synapse answers with artificial intelligence models made by other companies. For that, part of what you bring to the platform is sent to them: what you write, the files and photos you attach, and the passages of your documents and connected sources used to answer.

This content is sent to AI model providers, such as OpenAI, Anthropic, Google, DeepSeek and xAI, according to the model used for each answer, only to generate the answers and carry out what you ask. Bluey does not use this content to train models (section 2).

In the Apps, this is explained and your consent is asked before anything is sent for the first time, once per account on each device. Without it, nothing is sent. The same text can be read at any time in Space › Privacy and AI.

12. Error reports in Bluey Synapse

To find and fix failures, Bluey Synapse (the platform, its web version and the Apps) sends error reports to Sentry, an error monitoring service of Functional Software, Inc., with servers in the United States (section 20). A report is created when something fails: an error on our servers, or an App freezing or closing unexpectedly.

Each report holds what failed and where, the app's version, the kind of device and system, the last screens and calls made before the failure (the addresses reached, never their content) and who was using it: the identifier, e-mail and name of your Account and the workspace open. It never holds what you write or send, the answers, pictures of the screen, passwords, access tokens or your IP address.

This processing rests on Bluey's legitimate interest in keeping the Services running safely, under article 7, IX, of Brazil's General Data Protection Law, and the reports are used only to fix failures. You may object to this processing at any time by writing to [email protected].

13. Information disclosed in business transactions

The information we collect may be considered business assets. In the event of a merger, acquisition, corporate reorganization, or sale of assets, your information may be transferred to the acquiring entity, in compliance with applicable laws.

14. Information disclosed for legal protection

We may disclose information to government authorities, law enforcement, or private entities when we deem it necessary to: (i) respond to legal process; (ii) protect the rights, property, and safety of Bluey, its users, or third parties; (iii) prevent illegal activities or contractual violations.

15. Information disclosed with your consent

We may share your information with social networks, external platforms, or partners when you expressly request it.

16. Invite a friend

When available, invitation features may allow you to send invitations by email or SMS so that third parties can learn about the Services. In such cases, automated messages may be sent containing the invitee's name and an access link.

17. Information security

We adopt reasonable security measures to protect your information, including encryption at rest and in transit, access controls, and security practices aligned with market standards. However, no method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security.

18. Links to other sites

Our Services may contain links to third-party websites. Information provided to those websites is subject to their own privacy policies, not Bluey's. We are not responsible for the practices of those websites. We recommend reviewing the privacy policies of any external service you access.

19. Modifying your information

You can access and change your Personal Information through your account settings or by contacting Bluey directly. To request deletion of data, contact us by email at [email protected]. We will fulfill your request in accordance with applicable laws, also taking into account any legal retention obligations.

In the Apps, you can delete your Account at any time, in Space › your account › Account › Delete account. Deletion is immediate and permanent: it erases the Account and the workspaces you created, with everything in them, also for the other people who use them.

20. International transfer

Your information may be transferred to and stored on servers located in other countries, where privacy laws may differ from those of your place of residence. By using the Services, you consent to this international transfer of data, as permitted by applicable law.

21. Our policy toward children

The Services are not directed at minors, and we do not knowingly collect personal information from minors. If we become aware that we have collected such data, it will be removed as quickly as possible.

22. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. Any material change will be communicated through the Services or by email, where applicable. The effective date will be indicated in the Policy itself.

Questions about this Policy? Write to [email protected].