Website Privacy Policy
Effective: October 15, 2026
This policy explains how the yezzex.ai website handles personal data. In short: we have no login and no forms, we don’t sell data, and we don’t run ads.
1. Who we are
The site is operated by Yezzex, a company in the process of incorporation, represented by Leonardo Lana. Under Brazil’s General Data Protection Law (LGPD), Yezzex is the controller of the data handled on this site.
Privacy and data protection officer contact: contato@yezzex.ai.
2. What we handle, why, and on what legal basis
| What | Why | Legal basis (LGPD, art. 7) |
|---|---|---|
| Usage data measured by Google Analytics 4: page views, the topic of chat questions (not the text), contact clicks, articles read to the end, video section viewed. IP anonymized. | To understand what works on the site and improve it. | Consent (I). Only if you click “Accept”. |
| Text you type in the “Ask Yezzex” chat, and the last 4 messages of the conversation. | To generate the chat’s answer. | Legitimate interest (IX), to deliver the service you requested by using the chat. |
| IP address and daily question count. | To limit abuse and protect the chat. | Legitimate interest (IX): security and abuse prevention. |
| Technical access records (such as IP and request data) generated by Cloudflare. | To deliver the site securely and reliably. | Legitimate interest (IX): security and site operation. |
| Your email and message content, if you write to contato@yezzex.ai. | To reply to you. | Preliminary procedures at the data subject’s request (V). |
| Your cookie preference, stored in your browser (localStorage, key “yx-consent”). | To remember whether you accepted or declined. | Honoring your choice; stays only in your browser. |
3. Cookies and Google Analytics
When you arrive, you see a cookie notice. Google Analytics 4 loads only after you click Accept. If you decline, no analytics cookie is used. Your choice is stored in your browser, and you can change your mind by clearing the site’s data in your browser.
4. “Ask Yezzex” chat
- What you type is sent to a Cloudflare function and processed by Google’s Gemini API to generate the answer. Google handles this content according to the provider’s terms for the contracted service.
- Do not enter personal data (yours or anyone else’s) or debt information in the chat. The chat warns about this.
- The site does not store the text of your questions. To limit abuse, we count how many questions each IP address makes per day, in a Cloudflare storage that expires after 48 hours.
- The last 4 messages of the conversation stay only in your browser and are sent with each question to give context.
5. Other services the site uses
- Cloudflare (Cloudflare Pages) hosts the site.
- Google Fonts: fonts load from Google servers. Your browser connects to fonts.googleapis.com and fonts.gstatic.com, and Google may receive your IP in that connection.
- Google Workspace is our email.
- The video is hosted on the site itself.
- We use no social media pixels and no advertising.
6. Who we share with
Only the providers above (Cloudflare and Google), so the site works. We don’t sell or rent personal data.
7. Transfers to other countries
Cloudflare and Google may process data in the United States and other countries. When that happens, it is an international transfer under art. 33 of the LGPD, with the safeguards adopted by those providers.
8. How long we keep it
- Chat count per IP: 48 hours.
- Cookie preference and recent chat messages: in your browser, until you clear them.
- Google Analytics data: according to our account’s retention setting.
- Emails sent to us: as long as needed to help you and meet legal obligations.
9. Your rights
Under the LGPD (art. 18), you may request at any time:
- confirmation that we handle your data, and access to it;
- correction of incomplete or outdated data;
- anonymization, blocking or deletion of unnecessary data or data handled unlawfully;
- portability;
- deletion of data handled based on your consent;
- information about who we share data with;
- information about the option to refuse consent and its consequences;
- withdrawal of consent (in the cookie notice, or by clearing the site’s data).
How to ask: write to contato@yezzex.ai. We reply within a reasonable time. You may also complain to Brazil’s National Data Protection Authority (ANPD).
Because we have no login or forms, we often can’t link a piece of data to you. We may ask for extra information to identify your request.
10. Security
We use established providers and collect only what’s needed. No system is 100% secure. If an incident could affect you, we will notify you as required by law.
11. Credit recovery
This policy covers the website only. Data handling in credit recovery operations follows the creditor’s own policy and the operation’s contract.
12. Changes
We may update this policy. The effective date at the top shows the current version.