Data offmem stores
- Account: email, name and profile photo (if provided) and login data, processed by the authentication provider.
- Usage: for each request, the model, number of tokens, cost, status, duration and the API key used. Never the content.
- Financial: plan, payments, top-ups, consumption, bonuses, referrals and refunds. Name, CPF or CNPJ and postal code provided at payment go to the payment processor and to the invoice; they are not kept in our database.
- Site and chat measurement: pages, clicks and usage steps, without the message text and without IP. Details and retention periods are in the Privacy Policy.
- Communications: emails we send (type and date) and your preference about news emails.
- Access logs: IP address and date and time of use, kept confidential for 6 months, as required by art. 15 of the Marco Civil da Internet (Brazilian Internet Civil Framework, Law 12,965/2014), and automatically deleted afterwards.
- Acceptance of the Terms and the Privacy Policy: version, date, time, IP and browser.
- Support: conversations with support at offmem.app/suporte are stored on the server, linked to the account. The chat is not: the chat history stays in the browser.
For how long
Account and usage data: as long as the account exists. Access logs: 6 months, including after the account is deleted. Acceptance of these documents: up to 5 years after the account ends, to prove acceptance. Financial data: for the period required by tax law.
Who it is shared with
With service providers necessary for offmem to work, each only with the data its function requires: hosting and database, in Brazil; authentication and sign-in with Google; payment processing; invoice issuance, which includes sending the invoice data to the city government; sending and receiving emails; and the cloud infrastructure that runs the AI, which receives the message content only to generate the response. Our database (usage, balance, payments and access logs) is in Brazil. Login data stays with the authentication provider, and name, CPF or CNPJ and postal code stay with the payment processor and the invoice issuer. Some providers are outside Brazil, such as login, email delivery and the infrastructure that runs the AI, which constitutes an international transfer under art. 33 of the LGPD.
With authorities, under a court order or legal request. We do not sell personal data.