Privacy
Privacy policy
This policy explains what data Resuma handles when you use our WhatsApp number or visit this website, what it is used for, who it is shared with and how to exercise your rights. It follows Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018). If this English version and the Portuguese one ever differ, the Portuguese version prevails.
Who we are
Resuma is a service of COMPANY NAME, registered in Brazil under CNPJ CNPJ, with its registered office at ADDRESS (“Resuma” or “we”). For the data described in this policy, we are the controller within the meaning of the LGPD.
Resuma is not affiliated with, sponsored or endorsed by WhatsApp or Meta.
What happens to your audio
When you send or forward a voice note to Resuma:
- WhatsApp tells us the message has arrived, and we download the audio from Meta’s platform for this one job.
- The audio is passed, in memory, to an artificial intelligence model that writes the subject, the key points and the transcript.
- The reply is delivered to your WhatsApp.
- The audio, transcript and summary are discarded. They are not kept in a database, a job queue or logs. The only copy is the one in your WhatsApp.
If processing fails halfway, Resuma downloads and processes the audio again, because there is no stored copy to fall back on.
The AI providers
The main model is Google’s Gemini. Requests are sent with the option that stops Google from keeping them in its request logs. Audio over 15 MB is too large for a direct request: it is uploaded to Google’s file service, used in that request and deleted straight after. If the deletion fails, a routine of ours tries again, and Google itself deletes the file automatically within 48 hours at most.
If Gemini fails twice on the same voice note, the next attempt uses OpenAI: one model transcribes the audio and another summarizes the transcript. OpenAI’s transcription service does not keep the audio. The transcript sent for summarizing may be kept by OpenAI for up to 30 days, solely for abuse monitoring, under its own policy.
Under the terms we have with them, neither Google nor OpenAI uses this content to train their models. Neither do we.
Other people’s voice notes
A forwarded voice note usually carries someone else’s voice and information. We handle that content only to reply to you, as described above, and keep none of it. Only forward voice notes you have the right to share.
Data we keep
We keep only what your account, your minutes and your subscription need to work:
- WhatsApp identity
- The ID WhatsApp gives your account in chats with businesses and, when WhatsApp provides them, your phone number and username.
- Preferences
- The language and style of your summaries, whether the transcript comes with the reply, and whether you asked to stop receiving messages.
- Acceptance of the terms
- The date you accepted, the version of the terms and the language of the page. The free trial page does not record your IP address or anything about your browser.
- Usage
- For each voice note, the date, time and length, plus technical processing details such as the outcome, the model used, the detected language, the word count and the cost. Never the content.
- Trial and plan
- How much of the free trial you have used, the minutes used this period and the renewal date.
- Notices we send
- The kind of notice sent, such as the end of the trial or a renewal, and whether it was delivered.
- Subscription and payments
- Plan, dates, amounts, payment status and your Stripe customer ID. Card details are collected and stored by Stripe; we never have access to them. When we issue an invoice, also the details it legally requires, such as your CPF or CNPJ.
- Technical records
- The IDs of incoming messages, so the same message is never processed twice, and system operation logs, in which your ID appears only in pseudonymized form.
- Audio sent before accepting
- If you send a voice note before accepting the terms, we keep only the reference WhatsApp gives us for it, never the audio, so we can process it once you accept.
Free trial sign-up on this website
When you start the trial on this website, we ask for your name and email. Along with them, we keep the language of the page, the button that opened the sign-up, the dates of the first and latest submission and, if you tick the box, that you agreed to receive news and discounts, and when. This sign-up is kept apart from your WhatsApp account.
Before saving it, Cloudflare Turnstile checks that a person sent it. For that, Cloudflare receives your IP address and signals from your browser; we don’t keep them.
We use the sign-up to follow up on your trial by email. Resuma news and discounts go only to people who ticked the box, and every one of those emails has a link to unsubscribe.
On this website
This website uses no first-party cookies and no audience analytics. It stores your language choice in your own browser. To show its fonts, your browser downloads them from Google Fonts, which receives your IP address. The hosting provider receives technical access data, such as your IP address and browser type, to serve the pages and protect the site.
What we use data for
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Replying to your voice notes and commands | Performance of a contract (item V) |
| Counting your minutes, applying your plan’s limits and running the free trial | Performance of a contract (item V) |
| Charging, renewing your subscription and issuing invoices | Performance of a contract (item V) and compliance with a legal obligation (item II) |
| Notices about your account, such as the end of the trial, low minutes and renewals | Performance of a contract (item V) |
| Following up by email on the trial of people who signed up on this website | Legitimate interest (item IX) |
| Sending Resuma news and discounts by email to people who ticked that box | Consent (item I) |
| Checking that a sign-up on this website came from a person | Legitimate interest (item IX) |
| Preventing abuse, fraud and more than one free trial per account | Legitimate interest (item IX) |
| Keeping the service secure and running, and measuring reply quality with aggregate figures, never with content | Legitimate interest (item IX) |
| Answering requests from authorities when the law requires | Compliance with a legal obligation (item II) |
We don’t sell your data or use it for ads.
International transfers
Some of these providers process data outside Brazil, for example in the United States. These transfers are made to provide the service you signed up for, with the safeguards the LGPD provides for, such as data protection clauses in our contracts.
How long we keep it
| Data | Kept for |
|---|---|
| Audio, transcript and summary | Not kept. See section 2 for what the AI providers may keep. |
| Reference to a voice note sent before accepting | Up to 7 days |
| Free trial code not yet sent on WhatsApp | Up to 7 days |
| Free trial sign-up on this website (name, email and the news and discounts choice) | 12 months after the latest submission, or until you ask us to delete it |
| IDs of incoming messages | 30 days |
| Usage and processing records for each voice note | 13 months |
| Records of the notices we send | 13 months |
| Account, preferences and minutes balance | As long as the account exists |
| Payments and invoices | As long as tax law requires, even after the account is deleted |
| Code derived from a deleted account’s ID | Indefinitely |
When you delete your account, we erase the data tied to it straight away, except payment and invoice records, which the law requires us to keep. We keep only a code derived from your WhatsApp ID (a hash), which cannot be turned back into the ID and serves only to stop a new free trial from starting on the same account.
A sign-up made on this website is not deleted with the account, because we don’t know which WhatsApp account it belongs to. To have it deleted sooner, write to us.
Your rights
Under the LGPD, you can ask us to confirm that we process your data and give you access to it, correct incomplete or outdated data, anonymize, block or erase unnecessary data, port your data, erase your data, tell you who we share it with, and review automated decisions. You can also object to processing based on legitimate interest.
Much of this you can do right in your chat with Resuma:
deleteerases your account and the data tied to it, after you confirm. Any active subscription is cancelled.stopmakes Resuma stop sending you messages;startturns them back on. Stopping messages does not cancel your subscription.usageshows the minutes you have used and your renewal date.language,styleandtranscriptchange your preferences.
To stop receiving news and discounts, use the unsubscribe link in any of those emails or write to us. You can also ask not to receive the trial follow-up emails and to have your website sign-up deleted.
For anything else, write to the address under Contact. We reply within 15 days. Since we keep no audio, transcripts or summaries, we have no copy of them to hand over.
If you believe your rights have not been respected, you can complain to Brazil’s National Data Protection Authority (ANPD).
Security
- Connections to WhatsApp, to our providers and to this website are encrypted.
- Every message that arrives from WhatsApp has its signature checked before it is read.
- Access to our systems is limited to the people who run the service.
- Automated tests fail if the content of a voice note shows up in any table, queue or log in the system.
No system is immune to failure. If a security incident could bring you significant risk or harm, we will tell you and the ANPD, as the law requires.
Minors
Resuma is meant for people aged 18 or over and does not knowingly process data from children or teenagers. If you know of an account used by a minor, get in touch and we will delete it.
Users in Europe
If you use Resuma from the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) also applies. The legal bases are consent, performance of a contract, compliance with legal obligations and legitimate interests (art. 6(1)(a), (b), (c) and (f)), for the same purposes as in section 5. You can withdraw consent at any time, without affecting what was done before. You have the rights of access, rectification, erasure, restriction, portability and objection, and you can lodge a complaint with the data protection authority in your country (in Portugal, the CNPD). Transfers outside the European Economic Area rely on the European Commission’s standard contractual clauses or another safeguard the GDPR provides for.
Changes to this policy
When this policy changes, we will publish the new version on this page with an updated date. If the change is significant, we will tell you on WhatsApp before it takes effect and ask you to accept again where the law requires.
Contact
For anything about privacy, or to exercise your rights:
- Email:
- Data protection officer (encarregado): DPO NAME
- COMPANY NAME, CNPJ CNPJ, ADDRESS