Privacy Policy & Data Protection.

1. Our Commitment to your Privacy

The NIKKI AI is a brand and service operated by Elevate Tecnologia LTDA, registered in Brazil under company registration number (CNPJ) 67.831.208/0001-23. For the treatments described in this Policy, Elevate Tecnologia LTDA acts as the controller of personal data. NIKKI AI was designed under the fundamental principle of Privacy by Design (Privacy by Design). Your artificial intelligence personal assistant must operate with discretion, protecting your conversations, your integration data and your everyday information against misuse or unauthorized commercialization.

2. What Data We Collect and How We Use It

We strictly collect the data necessary to provide the executive personal assistance service requested by you:

• Identification and Contact Data: Name, WhatsApp registration phone number and email address when provided or logged in.
• Interest in future features: When you request news about NIKKI Invest, we process the email provided, the origin of the registration, the version of consent and the dates necessary to register your statement. This data is only used for communications about this functionality, does not create an account or financial order and can be deleted upon revocation of consent or request from the holder.
• Command Messages and Audios: Audios and text messages sent by you to Nikki to transcribe, interpret the order and perform the desired task, such as appointments, reminders and emails.
• Authorized Access Tokens: Encrypted OAuth keys from services you voluntarily connect to (including Google Calendar, Google Meet, send-only Gmail, Microsoft Outlook, Microsoft Calendar, and Zoom). We never have access to your master passwords.
• Zoom Integration: When you voluntarily connect your account, we use authorized access only to identify the connected account and create, consult, update or cancel meetings requested by you. We store OAuth tokens in encrypted form and maintain only the necessary operational metadata, such as identifier, title, date, duration, state, and execution trail. You can disconnect from Zoom at any time.
• Integration with professional Instagram: When available and voluntarily connected through the official Instagram login, we process professional account identifiers, protected OAuth tokens, media, captions, comments and metrics made available by the granted permissions. This data is only used to organize and execute authorized publications, consult insights and support comment management. NIKKI AI does not request access to Instagram Direct and does not read or respond to private messages.
• Consultation coordination: Do not send government identifiers or health insurance card details through chat. Administrative appointment assistance uses only the information you authorize for the selected clinic and the requested task. Sensitive identifiers belong in the designated secure flow. US healthcare assistance is subject to supported providers and service availability.
• Electronic signature: When you sign a document, we process the document, your drawn signature, acceptance, date and time, the IP address obtained by the server and the minimum technical information needed for an audit trail. Geolocation is optional, requested separately by the browser, and declining it does not prevent signing. Documents, signatures and evidence are encrypted; cryptographic hashes make subsequent changes detectable.
• Travel and flight tracking: When requested and included in the plan, we process the flight number, date, airports, times, status, terminal, gate, delay and link to the travel task. Locators and confirmation details remain protected; Alert messages do not display the locator. We query a technical aeronautical data provider with only the minimum necessary identifiers and maintain deduplicated events to avoid repeated notifications.

3.1. Microsoft API Data

Connecting to Microsoft is optional and only occurs after your consent on the official Microsoft screen. Depending on the roles chosen, Nikki can request delegated access to basic account information, emails, and calendar through Microsoft Graph. Access belongs to the account you selected and does not grant Nikki a global key to access other mailboxes or organizations.

The currently used permissions are User.Read, Mail.ReadWrite, Mail.Send, Calendars.ReadWrite and offline_access. They allow:

• identify the chosen Microsoft account and display the connected email;
• consult messages and sent items when you request a search, summary, screening or response preparation;
• send new emails or respond to a conversation only after a request or applicable authorization;
• check availability and events, in addition to creating, updating or canceling appointments requested by you, including invitations and online meetings when available;
• renew your session securely so you don't have to reconnect your account for each task.

When email screening is included in the plan and enabled by the user, Nikki can periodically check the connected box to identify relevant messages, awaited responses, and requested actions. Content is processed only to provide this functionality, produce the requested result and maintain minimum operational evidence of security. It is not used for advertising, selling data, creating business profiles, or training general artificial intelligence models.

OAuth tokens and connection metadata remain protected while the integration is active. You can disconnect the Microsoft account in Nikki or revoke consent in your Microsoft account settings. Revocation stops new access; integration data is deleted according to the terms of this Policy, except for minimum records temporarily necessary for security, fraud prevention, auditing or compliance with legal obligations. For corporate accounts, the organization administrator can also limit or revoke granted permissions.

3. Data from Google APIs

Connecting to Google is optional and only happens after your consent on the official Google screen. Nikki only requests the necessary permissions to:

• identify the chosen Google account and display the connected email address;
• check availability and list the necessary agendas to organize your appointments;
• create, update or cancel events on calendars you own, including with invitations and Google Meet, when you request;
• send emails from the connected account only when you ask;

Automatic reading of your Gmail inbox is not available while this permission is approved by Google. Nikki does not request this access or direct the user to ignore unverified app warnings. Alternatively, you can voluntarily forward a specific email or share its content or attachment to receive help with summarization, organization, or response.

When you forward a specific email, the content is only processed for the requested purpose. Nikki does not use this content for advertising, selling data, creating business profiles, or training general artificial intelligence models. Details necessary for the task are protected by encryption and deleted when the integration or account is removed, except for minimum records temporarily required for security or legal obligation.

Connection metadata and OAuth tokens remain securely stored while the integration is active. When disconnecting the account or requesting deletion of the Nikki account, we revoke access and delete this data, except for minimum records that need to be temporarily preserved for security, fraud prevention or compliance with legal obligations. You can also revoke access at any time in your Google Account security settings.

Nikki AI's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy , including Limited Use requirements.

3.2. Professional Instagram: Disconnection and Data Deletion

Connecting to a professional Instagram account is optional and occurs through the official Instagram login. Nikki only uses the granted permissions to identify the connected account, query insights, publish authorized content, and support comment management. We do not request access to Instagram Direct or the customer's WhatsApp account.

To terminate access, enter the Nikki account integrations area, locate Professional Instagram and choose Disconnect. You can also remove Nikki in your Instagram app and website settings. Upon receiving signed notification of deauthorization from Meta, we automatically invalidate the corresponding credential and stop further access.

To delete data, use Privacy and data on the authenticated portal or write to privacidade@nikkiai.com.br. A request initiated by Meta receives a confirmation code and an individual tracking address. Tokens and operational data from the connection are removed, except for only minimal records that need to be temporarily preserved due to legal obligation, security, fraud prevention or regular exercise of rights.

See also the public Instagram integration instructions.

3.3. Sharing with technology providers

To perform a task requested by the user, Nikki may use providers specialized in artificial intelligence processing and audio transcription. Only the minimum content and context necessary to execute the functionality are shared. When essential to the task, this context may contain data obtained from Google or Microsoft APIs, such as availability information, calendar events or the content of an email that the user has asked to consult, summarize, prepare or send.

Passwords, app secrets, OAuth tokens, and access keys are never sent to providers. The processing is limited to providing the requested functionality, without authorization for advertising, commercialization of data or training of general use models.

Data received from Google or Microsoft APIs is not used to develop, improve, or train artificial intelligence or machine learning models. Sharing remains limited to the purpose informed to the user and, in the case of Google, also observes Limited Use requirements.

3.4. US connected finance, Plaid & financial information

The US financial service is being prepared with Plaid. When enabled and authorized by you, it will use connected account information, balances, transactions and investment holdings or activity where supported. Requested data and permissions are presented in the connection flow. Access to financial information does not authorize money movement or securities trading. A payment service requires its own authorization and applicable activation.

US financial access requires your authorization for each connected institution. Supported products, permissions, connection limits and any additional charges are disclosed before activation. You may request disconnection through your account or support. Plaid processes information under its own End User Privacy Policy; the bank's own terms also apply.

Financial history stored by NIKKI is encrypted and isolated by customer. Our current retention limit for stored financial history is up to 365 days. This does not describe Plaid's own retention. You may request disconnection or deletion through your account or our privacy contact. Minimum records may be retained where needed for security or legal obligations. US product-specific retention will be disclosed before activation.

Plaid also processes information under its End User Privacy Policy. Before an enabled US connection, review the requested data and permissions. Bank passwords and Plaid access credentials must not be shared in chat. A payment authorization is separate from permission to retrieve account or investment information.

5. Security, Encryption & Secure Storage

Your browsing uses encrypted connections. Information from connected services is protected and linked to your account. Access is limited to the permissions you authorize for the features you choose.

6. Your privacy rights and choices

You may request access, correction, deletion or withdrawal of consent through our privacy contact. Requests are subject to identity verification, applicable law and required record retention. Available controls include:

• Confirm the existence of processing of your data.
• Access and receive a complete copy of your information.
• Correct incomplete, inaccurate or outdated data.
• Elimination: Request the deletion of data processed based on consent and, where applicable, account and history. The request goes through identity confirmation, revocation of integrations and scheduled deletion. Minimum records can be preserved for the period necessary to comply with legal obligations, prevent fraud, exercise rights or respect retention of backups, always with restricted access.
• Revoke any consent or integration at any time.