Privacy Policy
Last updated: 5 de novembro de 2026
Who is responsible
Lia (talktolia.com and app.talktolia.com) is operated by Victor Zamarioli Piazzi, Brazil. For anything about your data, write to vizamapi@gmail.com.
What data we process
Account data: email, password (stored only as a hash, never in plain text), business name, activity, country and language.
Content you send Lia to organise: text messages, voice recordings (used only for transcription; audio is not stored), photos and PDFs of documents, spreadsheets, and your business profile (services, prices, client and supplier names, recurring bills).
Usage data: timestamps and counts of requests, used to apply plan limits and prevent abuse.
Payment: processed by Stripe. We never see or store your card number. We store the subscription status and Stripe identifiers.
Technical data: IP address (to limit login attempts and protect the account) and approximate country.
Cookies: in the app, one essential session cookie only. On talktolia.com, ad-measurement cookies (Meta Pixel) only if you accept the notice.
What we use it for
Providing the service: understanding what you say, reading documents, organising entries, talking to you and preparing the accountant pack.
Security and abuse prevention.
Billing and support.
Improving the product based on aggregate usage. We never sell data or use it for third-party advertising.
Measuring ads on the home page, only with your consent.
Legal basis (GDPR / LGPD)
Performance of a contract (providing the service), legitimate interest (security), consent (measurement cookies) and legal obligation (billing records).
Who we share it with
We use providers that process data on our behalf, only for the stated purpose:
Cloudflare: hosting and database (Western Europe region).
Anthropic (Claude AI): processes your text and document images to understand and extract information. Under Anthropic's commercial terms, data sent through the API is not used to train models.
ElevenLabs: transcribes the audio you record and generates Lia's voice.
Stripe: payments and subscriptions.
Meta: only on the home page and only if you accept measurement cookies.
These providers are in the United States and the European Union. Transfers are covered by the contractual safeguards required by the GDPR and LGPD. We share data with no one else, unless legally required.
How long we keep it
For as long as your account exists. When you delete your account in Settings, all documents, entries, conversations and the business profile are deleted from the database immediately; backups are purged within 30 days.
Billing records are kept for the period required by tax law.
Early-access emails are kept until launch or until you ask us to remove them.
Your rights
At any time you can: access and correct your data; export everything as a spreadsheet (Settings); delete your account and all data (Settings); withdraw cookie consent; and complain to your data protection authority.
To exercise any right, write to vizamapi@gmail.com. We reply within 15 days.
Security
Everything travels over HTTPS. Passwords are hashed and salted. Sessions use HttpOnly, Secure cookies. Login attempts and usage are rate-limited. Access to data is restricted to what is needed to run the service.
Minors
Lia is a service for businesses and people over 18.
Changes
If this policy changes, we'll notify you in the app and update the date here. Last updated: 5 de novembro de 2026.