Privacy Policy.

Ponto is the controller of the business owner's account and billing data (name, email, WhatsApp, tax ID).

For personal data shown on the customer's site (such as the professional's name and team photos) and for site visitor data, Ponto is a processor and handles that data under the customer's instructions.

Before the preview: business name, city, details you confirm (public phone, postcode, address if you want to show it), category and your WhatsApp number, to deliver the site link. We do not ask for a card, email or password at this step.

To subscribe: your name, email, tax ID where billing requires it and any photos you choose to upload.

While you use the service: technical logs (IP addresses are stored only as an irreversible code), site versions, messages exchanged with the assistant and account events.

Building the site, showing the preview, billing and running the service: pre-contractual steps and performance of the contract.

Issuing tax documents and keeping records required by law: legal obligation.

Preventing fraud and abuse and keeping security logs: legitimate interest.

Reminders about your site on WhatsApp during the preview and marketing messages: consent, which you can withdraw at any time.

We ask for your WhatsApp number to send you the site link. That message is always sent.

Reminders during the preview are only sent if you tick the consent box, which starts unticked. We store the version of the text you accepted and the date. Reply STOP at any time and reminders stop immediately.

We use Google Maps Platform to find your business and suggest details during signup. That Google data is used only during the session and then discarded; we keep only the place identifier (place_id). Reviews shown on the site load live and are not stored by us.

Google processes data under its own privacy policy.

Site text is generated with artificial intelligence based on the business details you provide. We do not send your tax ID, email or personal WhatsApp number to AI models.

We use suppliers to run the service: Vercel (hosting and photo storage), Neon (database), Asaas and Stripe (payments), Vercel AI Gateway and AI model providers (text generation), Meta (WhatsApp Cloud API) and Google (Maps Platform).

Some of these suppliers may process data outside Brazil. In those cases we apply the safeguards required by the LGPD and choose servers in Brazil when possible.

We do not sell personal data.

Abandoned signup drafts are deleted within 30 days. Expired previews are kept for 30 days for reactivation. Data from cancelled accounts is deleted or anonymized, except what the law requires us to keep, such as tax records.

You can request access, correction, portability and deletion of your data and withdraw consent. In your dashboard you can download a file with your text and photos and delete your account. You can also ask through the WhatsApp assistant.

Deletion erases your personal data and photos, takes the site offline and ends access to the dashboard and the assistant.

WhatsApp numbers and tax IDs are stored encrypted. We never ask for domain registrar passwords. Internal access to data is restricted and logged.

We only use necessary cookies: to keep your signup draft, keep you signed in to the dashboard and remember your language. We do not use advertising cookies.

People who visit a site made on Ponto may see Google reviews loaded live and contact the business on WhatsApp. Those conversations happen directly between the visitor and the business.

Ponto is meant for business owners aged 18 or over.

We may update this policy. Each version has a number and date, and we give advance notice of important changes.

The contact of our data protection officer (DPO) will be published here before launch. Until then, use your dashboard or the WhatsApp assistant.