DataBot G5

Privacy Policy

Last updated: 26 September 2026

1. Who we are. DataBot Software Intelligence ("DataBot", "we") runs the website databot.digital and the G5 platform: the web portal and the mobile app. Technology Park, Suite 1403, Av. Doutor Altino Bondesan, 500, São José dos Campos, SP, Brazil, 12247-016. Privacy contact: dpo@databot.digital.

2. Two roles.

  • We are the controller for the people who visit our site, sign in to G5 or contact us: DataBot decides how their personal data is used.
  • The customer is the controller for the data a customer company loads into its G5 account (production, planning, quality, supply and machine data, which may include names of its staff). DataBot processes that data only on the customer's instructions, under the contract. Requests about that data go to the customer; we forward them and help answer.

3. What we collect.

  • When you open the portal: a device identifier kept in your browser, your IP address, browser and operating-system details, screen size, language and time zone. In the mobile app, also the device model, the system and app versions, and a push-notification token.
  • When you sign in: your e-mail and name as given by the sign-in service, the sign-in method, date, time, IP address and device. Your session token lasts only for the session. Our access history keeps a fingerprint (hash) of its secret part, never the secret itself.
  • When you use G5:
    • what you ask and tell the AI assistant, and its answers;
    • notes the assistant keeps to continue your work;
    • the files you upload;
    • a record of the actions you take (who, what, when);
    • the permissions your company grants you.
  • When you try G5 with a code sent to your e-mail, or contact us: your e-mail, your consent, your conversation with the assistant, and what you choose to tell us about yourself and your company (such as name, company, role, phone and needs). We use this to answer you and, if you ask, to have a specialist contact you.

4. Why we use it, and the legal basis (LGPD, art. 7).

  • Performance of a contract: to provide G5 to you or your company (sign-in, permissions, features, the assistant, support).
  • Legitimate interest and legal obligation: to keep G5 secure and available (access records, audit trails, abuse prevention such as limits on sign-in codes, incident investigation).
  • Consent: to answer a contact or a trial. You can withdraw consent at any time.
  • Legal obligation: Brazil's Marco Civil da Internet (Law 12,965/2014, art. 15) requires us to keep access records (IP address, date and time) for six months.
  • Legitimate interest: to improve G5, using technical and aggregated information.

We do not sell personal data or use it for advertising.

5. Our AI. G5's language models run on DataBot's own infrastructure. Your content is not sent to third-party AI services, and it is not used to train public or third-party models. Forecasting and quality models are trained on a customer's own data, for that customer only. The assistant acts only within the permissions of the person signed in, and the server checks them on every action.

6. Who helps us, and when we share.

  • Amazon Web Services: hosting, storage and e-mail delivery, in data centers in the United States (Northern Virginia, Ohio) and Canada.
  • Auth0 (Okta): sign-in, for accounts that use it.
  • Google Firebase Cloud Messaging: push notifications to the mobile app.
  • Google Fonts: our pages load fonts from Google's servers, which receive your IP address and browser details.
  • Datadog: monitors the availability and performance of our services.
  • Your company: administrators of your company's account can see the activity in it, according to their permissions.
  • Authorities: when a law or court order requires it.

If you write to us by e-mail or WhatsApp, those services' own terms apply to your message.

7. International transfers. Our servers are in the United States and Canada, so your data is processed outside Brazil. We do this with the safeguards the LGPD requires (art. 33), and our providers are bound by contract.

8. How long we keep data.

  • Account and usage data: while the account is active and the contract requires. Afterwards we delete or anonymize it, unless a law requires us to keep it.
  • Access records: at least six months, as the law requires.
  • Trial and contact data: until you ask us to delete it, or 12 months after our last contact.

9. Security.

  • Connections are encrypted (TLS).
  • The server checks permissions on every action.
  • Each customer runs in its own containers, with its own databases.
  • Credentials are kept in a secrets manager.
  • Our access history keeps only fingerprints of session secrets.
  • Actions leave an audit trail.
  • Our main data store is replicated across three regions.

No system is free of risk. If an incident may harm you, we will tell you and the ANPD, as the law requires.

10. Browser storage and cookies. The portal keeps in your browser only what it needs to work: your session, the device identifier, the server you chose and your language. We use no advertising or analytics cookies. The sign-in pages (Auth0, or our own sign-in service at sso.databot.digital) set their own session cookies.

11. Your rights. Under the LGPD (art. 18), and the GDPR where it applies, you can ask us to:

  • confirm whether we process your data;
  • give you access to it, or correct, anonymize, block or delete it;
  • port it to another provider;
  • tell you who we share it with;
  • stop a use you object to, or withdraw your consent;
  • review a decision made solely by automated means.

Write to dpo@databot.digital; we answer within 15 days. During a trial you can also ask the assistant to delete your conversation. You may also complain to Brazil's data protection authority (ANPD) or your local authority.

12. Children. G5 is a service for companies and is not intended for people under 18.

13. Changes. We publish changes on this page with a new date. We also notify customers of relevant changes.

← databot.digital