Skip to content
Start free
Last updated: October 24, 2026

Privacy policy

We take privacy seriously. This policy explains, in plain language, what we collect, why and how you stay in control.

1. Data we collect

  • Account: name, email, phone (optional), preferred language.
  • Content: the tickets, projects, tasks, customers and attachments you create.
  • Usage: audit records (who did what and when) and the access IP, used for security and usage limits.
  • We do not collect: browsing data outside the app, behavior on other sites, or sensitive data without explicit consent.

2. How we use it

  • Deliver the contracted service (tickets, projects and customer records).
  • OTP authentication (we don't store passwords).
  • Notifications you opted into (email, push).
  • Audit and security (the records are kept for as long as the account exists).

3. Where data lives

DigitalOcean servers in the United States, San Francisco region (sfo3), with replication. Attachments stored in Spaces (S3-compatible) with CDN. Encrypted daily backups.

4. Cookies and measurement

  • In the app: only what is needed to keep you authenticated. No tracking cookie and no cross-site tracking.
  • On this site: audience measurement (Google Analytics) and the Meta Pixel only load after you accept them in the cookie notice. If you decline, nothing is loaded and the site works exactly the same.
  • Meta Pixel: once you accept, your browser tells Meta (Facebook and Instagram) which pages you visited and when a free-trial signup or a contact message is completed. The purpose is to measure which ads bring interested people and to show bFocus to people looking for something similar. We do not send your name, e-mail or phone number to Meta. The _fbp cookie lives on our domain, and Meta handles this data under its own privacy policy.
  • How to turn it off: click (also in the footer of every page) and choose "Decline". Measurement and the pixel stop right away and their cookies are deleted. You can also block third-party cookies in your browser and adjust ads in Meta's ad preferences.
  • In the widget: the conversation stays in the local storage of the visitor's browser, so it is not lost when the page reloads. It is not a cookie and it is not used for tracking.

5. Your rights (LGPD)

  • Request access to all your data.
  • Request correction or deletion.
  • Export your personal data in an open format (JSON), on request.
  • Withdraw consent at any time.

6. Sharing

We do not sell data. We do not share it with third parties except:

  • Essential providers (DigitalOcean, Mailgun, Firebase and Stripe, the latter only for billing) under NDA + DPA.
  • Meta Platforms (Facebook and Instagram), through the Meta Pixel on this site and only after you accept: pages visited and completed signups or contact messages, to measure and target ads (see item 4).
  • Cloudflare Turnstile, the invisible bot check on sign-in and on the website widget (it confirms a person is using a browser, without a CAPTCHA): its use follows Cloudflare's Turnstile Privacy Addendum.
  • bZapper, the WhatsApp partner of bFocus (bzapper.com.br), also from Berni Software, when your company uses WhatsApp: WhatsApp notices go through it and, if the company turns on the WhatsApp channel in Mesa, so do the messages of support conversations.
  • Brazilian court orders, with prior notice to the data subject whenever legally permitted.

Artificial intelligence: bFocus does not provide AI and does not train models on your data. When your company registers a provider key (OpenAI, Anthropic, Google and others), the content sent to the model travels to that provider under the contract your company holds with it. With no key registered, nothing is sent — including the search by meaning across the knowledge base, which also uses your company's key.

7. Website visitors and leads (Sales module)

When your company turns the assistant on at the door of its website, whoever arrives talks before identifying themselves. Nothing that identifies a person is stored before consent: no cookie, no IP and no browser fingerprint.

  • Visitors who only chat: become an anonymous record, with no contact details and no document number. Email addresses, phone numbers and tax IDs are stripped from the text; from a corporate email only the domain is kept. The record is deleted after 90 days.
  • Visitors who leave a contact: become a lead, with the consent recorded — the exact wording they accepted, the language and where the data came from.
  • Sales emails: carry one-click unsubscribe. The block list keeps only a fingerprint of the address, not the address itself.
  • Bot check: Cloudflare Turnstile, the same one used on sign-in and in the widget.

8. bFocus Atendimento app

The iPhone and Android app is for the team of companies that use bFocus, and it follows this same policy. It does not create accounts: access is whatever the company already gave the person in bFocus. What the app sends, and why:

  • Work e-mail: to send and check the sign-in code.
  • Device details: platform, device name and model, system and app versions, language and time zone — for the list of connected devices.
  • Notification token: to alert you to new conversations, customer messages and on-call. The notification text goes through Apple’s (APNs) and Google’s (Firebase) push services, the only route for notifications on iPhone and Android.
  • What you write and attach: messages, internal notes, ticket replies, and the photos and files you choose to send from the camera, gallery or files. The app receives only the chosen file, with no access to the rest of your library.
  • On-call status, on or off per company.
  • Access IP: for security and usage limits, as in the rest of the platform.

Biometrics: unlocking with Face ID or fingerprint happens only on the device; bFocus receives no biometric data. Access credentials are kept in the system’s own vault (Keychain on iPhone, Keystore on Android).

The app has no ads, uses no analytics or tracking tools, and does not access location, contacts, calendar or microphone.

Signing out and deletion: in Settings › Connected devices you can disconnect any device you signed in on, and "Sign out of everything" ends the sessions on the current device and erases what was stored on it. To delete the account and its personal data, ask whoever administers bFocus at your company or write to [email protected] with your sign-in e-mail. The support history belongs to the contracting company, which keeps it according to its own legal obligations.

9. AI connector (Claude, ChatGPT, Codex and others)

The connector lets an AI app chosen by your company (Claude, ChatGPT, Codex, Cursor and other MCP-compatible apps) read and act in bFocus on behalf of the person who connected it. It only works after someone in your company authorizes it, and only with what that person allowed.

  • What the AI app receives: only the results of the queries it makes — Monitoring errors (message, stack trace, releases, affected customers), tickets and their conversation, tasks, projects and release notes — limited to the contracted modules and to the permissions checked at authorization. Content marked as confidential never leaves.
  • Where it goes: the content is then processed by the AI app's provider (for example, Anthropic or OpenAI), under its privacy policy and the agreement your company or the person has with it. bFocus does not provide the AI and does not train models on this data.
  • What bFocus does not receive: the conversation with the AI. We only receive the calls to the connector's tools, never the chat history.
  • What bFocus stores: the authorization (app, person, company, permissions, connection and last-use dates), the app registration (name and redirect address) and access credentials only as a cryptographic hash. Actions taken through the connector are recorded in the history like any action by that person. The access IP is used for security and rate limits.
  • Retention: access lasts one hour and renews while the connection exists; the renewal is valid for up to 90 days without use. The authorization is kept until revoked; the action history follows the audit rule.
  • How to revoke: in Integrations › AI (MCP), people revoke their own connections and admins revoke any of them. Access stops on the next call. Losing the admin or manager role, or being deactivated, also ends the connection.
  • Replies to customers: only with the separate "Reply to customers" permission, unchecked on the consent screen; replies go out on behalf of whoever connected, as in the app. The connector does not open tickets, notify third parties or delete anything.

10. Data Protection Officer (DPO)

Data Protection Officer: [email protected]. We respond to LGPD requests within 15 business days.