Privacy Policy
Last updated: February 2026
At Iara Data, we take your privacy seriously. This policy explains how we collect, use, and protect your personal and business data when you use our platform.
Information We Collect
We collect information you provide directly: account details (name, email, company), business data you upload or connect, and usage data (queries, dashboard interactions, feature usage). We also collect technical data such as IP address, browser type, and device information for security and analytics.
How We Use Your Information
We use your information to provide and improve our services: processing your data queries, generating dashboards and analyses, personalizing your experience, sending service notifications, and maintaining platform security. We do not sell your data to third parties or use your business data for advertising.
Data Storage & Security
Your data is stored in our secure cloud infrastructure with per-tenant isolation. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). PII is automatically detected and masked. We maintain regular backups and implement strict access controls. Data residency options are available for enterprise customers.
Third-Party Services
We use third-party services for specific functions: payment processing (Stripe), AI language models (Google Gemini for chat, local models for data analysis), cloud infrastructure (Google Cloud Platform), and analytics (OpenTelemetry). These providers have their own privacy policies and are bound by data processing agreements.
Your Rights
Under LGPD (Brazil) and GDPR (EU), you have the right to: access your personal data, correct inaccurate data, delete your data, export your data in a portable format, withdraw consent, and object to processing. To exercise these rights, contact our Data Protection Officer at privacy@iaradata.com.
Contact Us
For privacy-related questions, contact our Data Protection Officer at privacy@iaradata.com. For general inquiries, reach us at hello@iaradata.com. We aim to respond to all privacy requests within 15 business days.