Privacy Policy

Last updated: February 2026

At Iara Data, we take your privacy seriously. This policy explains how we collect, use, and protect your personal and business data when you use our platform.

Information We Collect

We collect information you provide directly: account details (name, email, company), business data you upload or connect, and usage data (queries, dashboard interactions, feature usage). We also collect technical data such as IP address, browser type, and device information for security and analytics.

How We Use Your Information

We use your information to provide and improve our services: processing your data queries, generating dashboards and analyses, personalizing your experience, sending service notifications, and maintaining platform security. We do not sell your data to third parties or use your business data for advertising.

Data Storage & Security

Your data is stored in our secure cloud infrastructure with per-tenant isolation. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). PII is automatically detected and masked. We maintain regular backups and implement strict access controls. Data residency options are available for enterprise customers.

Third-Party Services

We use third-party services for specific functions: payment processing (Stripe), AI language models (Google Gemini for chat, local models for data analysis), cloud infrastructure (Google Cloud Platform), and analytics (OpenTelemetry). These providers have their own privacy policies and are bound by data processing agreements.

Your Rights

Under LGPD (Brazil) and GDPR (EU), you have the right to: access your personal data, correct inaccurate data, delete your data, export your data in a portable format, withdraw consent, and object to processing. To exercise these rights, contact our Data Protection Officer at privacy@iaradata.com.

Contact Us

For privacy-related questions, contact our Data Protection Officer at privacy@iaradata.com. For general inquiries, reach us at hello@iaradata.com. We aim to respond to all privacy requests within 15 business days.