Privacy Policy

The controller of your data is M V GIROLNETO SOUSA, registered under CNPJ 42.083.992/0001-08, with offices at Bairro Lúcia Alice, Bela Vista de Goiás – GO, CEP 75240-000 (“Atria”, “we”).

Data protection officer (encarregado): Marcus Vinicius Girolneto Sousa, email privacidade@atriafinancas.com.br.

Sign-up

name, email, password (we only keep a scrypt hash, never the password itself), and the time zone, language and currency taken from your browser.

Account security

two-factor authentication secret and recovery codes, if you turn them on; your sessions, with a truncated IP address, browser (user agent) and last use.

Messaging channels

your Telegram user and chat identifiers, when you connect Telegram.

Conversations

the messages you send, Atria's replies and voice-note transcripts.

Financial data you provide

expenses, income, transfers, accounts and cards, bills (including boleto and Pix codes), budgets, goals, debts, recurring items and cost sheets.

Open Finance (optional)

institution, accounts, balances and transactions you authorize Pluggy to share, plus the sync history.

Photos and documents

images of receipts, notas fiscais and boletos, PDFs, and the data extracted from them. Voice notes are transcribed; the audio file is only kept when audio storage is enabled for the service.

Memories and profile (optional)

facts and preferences Atria learns from your conversations while learning is on, and the “about me” text you write.

Organization

reminders, tasks, daily plans, insights and lessons.

Forwarded emails (optional)

sender, subject and body of emails you forward to your private bills address. Attachments are discarded.

Google Calendar (optional)

if you connect it, access tokens and the Google account email. We only check free/busy times and, with an extra permission, create events you confirm.

Usage and security records

actions proposed and confirmed, an audit trail, your consents, AI usage counts, and technical logs without content.

We never ask for or store your bank passwords. To connect a bank you authenticate directly with Pluggy and your institution.

You may mention other people, such as a Pix recipient or a contact in a reminder. Please only do so when you have a legitimate reason. We process this third-party data based on legitimate interest (art. 7, IX), only to record what you ask. Identifiers such as CPF, account numbers, phones and emails are masked before stored data goes back to the AI.

• To provide the service: understand your messages, record and organize your finances, reminders and tasks, and show them in the panel.
• To sync your bank accounts through Open Finance, when you authorize it.
• To read the photos, documents and notas fiscais you send.
• To send transactional emails: email verification, password reset and sign-in links.
• To personalize replies with memories and preferences, if learning is on.
• To protect your account and the service: authentication, fraud and abuse prevention, usage limits and auditing.
• To meet legal obligations and answer your requests as a data subject.

We do not sell your data, we do not use it for advertising, and we do not allow AI providers to use it to train models.

Performance of a contract (art. 7, V)

sign-up, conversations, financial data, photos and documents, reminders and transactional emails.

Consent (art. 7, I)

the Open Finance connection and memory learning. You can withdraw consent at any time.

Legitimate interest and security (art. 7, IX)

session metadata, technical logs, usage and abuse controls.

Legitimate interest (art. 7, IX), for third-party data

data about other people you mention, such as a Pix recipient or a contact in a reminder, used only to record what you ask.

Regular exercise of rights (art. 7, VI) and legitimate interest (art. 7, IX)

the audit trail and proof of your consents, to show what was authorized and to defend ourselves in administrative or court proceedings.

Legal obligation (art. 7, II)

answers to data-subject requests.

We do not set out to process sensitive personal data. If a photo you send shows, for example, an ID document with a picture, we do not run facial recognition on it.

We only share data with the processors needed to run the service:

OpenRouter (United States)

routes our AI requests. It receives conversation text, images, PDFs and audio, with stored identifiers already masked. Every request requires providers that do not collect data and that apply Zero Data Retention.

AI model providers reached through OpenRouter (United States and other countries)

run the models. They receive the content needed to answer, including your first name, but not your email or your identifier. This includes transactions and other financial data when you ask about them. Only zero-data-retention endpoints are used.

Pluggy (Brazil)

Open Finance aggregator. It receives an internal identifier and your consent, and passes us the data from the institutions you authorize.

Telegram (United Arab Emirates and other countries)

the messaging channel you choose. It carries the messages and files exchanged with Atria.

Resend (United States)

sends transactional emails. It receives your email address, name and single-use links. These emails contain no financial data.

Mailgun (United States)

receives the emails you forward to your bills address, if you turn that feature on.

ImprovMX (United States)

receives and forwards emails sent to @atriafinancas.com.br addresses, such as general contact, support and the data protection officer. Those emails are delivered to and stored in a Google (Gmail) mailbox.

Mercado Livre

when you ask for a price search, it receives only the search text, with no account data.

Google (United States)

Gmail, where the messages you send to contact, support and the data protection officer (@atriafinancas.com.br) are stored, and, only if you connect it, Google Calendar.

Web search provider (United States)

when web search is enabled, it receives only the search text, with identifiers masked and no account data.

Hosting and database

Hostinger (servidor nos Estados Unidos).

File storage

o mesmo servidor da Hostinger (Estados Unidos).

Off-site backups, when configured

a storage provider that only receives already-encrypted backup copies, with no access to their content.

Sentry (United States), error monitoring, when enabled

technical events without request bodies, cookies or your text, with your user id replaced by a pseudonymous code.

Authorities

when required by law or court order.

Atria's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide the calendar feature you asked for, we do not use it for advertising or to train generalized AI models, and we do not allow humans to read it except with your consent, for security, to comply with law, or as aggregated and anonymized data.

WhatsApp is not available yet. When it is, Meta will become a processor and this policy will be updated first.

Your data is transferred outside Brazil to these processors:

• Hostinger, in the United States: the server where your data is stored.
• OpenRouter and the AI model providers, in the United States and other countries.
• Resend, in the United States: transactional emails.
• ImprovMX, in the United States: receives emails sent to @atriafinancas.com.br addresses.
• Google, in the United States: the mailbox (Gmail) that stores the messages sent to contact, support and the data protection officer.
• Telegram, in the United Arab Emirates and other countries: the messaging channel you choose.
• Mailgun, Google Calendar and the web search provider, in the United States, when you or we turn those features on.
• Sentry, in the United States, for error monitoring, when enabled.
• A storage provider for encrypted backup copies, when configured.

These transfers rely on the mechanisms of art. 33 of the LGPD. Today, our relationship with each processor follows that provider's standard terms and data processing agreement (DPA), and we are formalizing the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024) with each processor, which is not yet complete for all of them. For the messaging channel you choose, the transfer also relies on the performance of a contract at your request (art. 33, IX). You can ask for the status, the text of the agreements and details about these safeguards at privacidade@atriafinancas.com.br.

Account and the records you create

while your account exists. Items you delete are removed.

Raw channel data of incoming messages

30 days. The conversation text stays until you delete your account.

Detailed results of assistant actions

90 days.

Audit trail

365 days.

Forwarded emails

the body is deleted right after processing, and the record within 30 days.

Open Finance

while your consent is active. When you disconnect, the connection is deleted at Pluggy and syncing stops. Transactions already imported stay in your history until you delete them or your account.

Sessions and sign-in links

until they expire, from minutes to a few days.

Data exports

the file is available for 24 hours and can be downloaded once; each download link is valid for 15 minutes.

Technical logs (without content)

application and server logs are rotated automatically and kept for a limited period, up to 30 days.

Access records (Marco Civil da Internet, art. 15)

IP address, port, date and time of access, kept for 6 months.

Encrypted backups

discarded automatically within 60 days.

When you delete your account, we delete your data from the live system, revoke your bank connections at Pluggy and your Google connection, delete your files and destroy your encryption key.

Encrypted backups made before the deletion are discarded automatically within 60 days and are used only for disaster recovery. If we ever need to restore one, accounts that had already been deleted are deleted again. We keep only a minimal record that a deletion happened, with a pseudonymous identifier. Messages exchanged on Telegram remain on Telegram, and you can delete them in the app itself.

Under art. 18 of the LGPD you can ask for: confirmation that we process your data and access to it; correction; anonymization, blocking or deletion of unnecessary data; portability; information about who we share it with; information about not giving consent and its consequences; withdrawal of consent; and review of automated decisions. Atria does not make automated decisions with legal effects: by default, every record waits for your confirmation.

See and correct

every record is visible and editable in the panel, or through the assistant with your confirmation.

Delete items and memories

in each list of the panel and on the Memories page.

Withdraw consent

turn learning off in Settings; disconnect banks under Banks; disconnect Telegram and Google under Integrations.

Export

in Settings → Your data, download a full copy of your data in a structured file (a ZIP with JSON and the files you sent). On the Transactions page you can also download your transactions as CSV or XLSX.

Delete your account

in Settings → Delete account.

For any other request, write to privacidade@atriafinancas.com.br. Bank connections and exports require a confirmed email. We may ask you to confirm your identity, and we answer within 15 days. You can also file a complaint with Brazil's data protection authority (ANPD).

• TLS on every connection over the internet.
• Per-user field encryption (AES-256-GCM with a key per user) on these fields: message text, raw data and metadata; memories and the “about me” text; notes on expenses and income; bill barcodes and Pix codes; arguments, previews and results of assistant actions; document and photo analysis; sender, subject and body of forwarded emails; the two-factor secret; Google tokens; and the files you upload.
• Other financial records (such as amounts, dates, descriptions and merchants of transactions, and Open Finance data) are not field-encrypted: they are protected by access control, per-user isolation (row-level security) and encryption in transit (TLS).
• Backups encrypted with age.
• Row-level security in Postgres: the database itself only returns the signed-in user's rows.
• Passwords hashed with scrypt, sessions stored only as a hash, an httpOnly session cookie that browser scripts cannot read, and optional two-factor authentication.
• Before stored data goes back to the AI, we mask emails, phones, CPF/CNPJ, account and card numbers and payment codes. The message you just sent goes as written, because the assistant needs it to act.
• Metadata such as GPS location is removed from photos before storage or analysis. PDFs are kept as you send them.
• The content of forwarded emails is never sent to the AI: it is read by a deterministic parser and always waits for your confirmation.
• Application logs do not contain message content, amounts, contact data or credentials. Access logs keep the IP address, port, date and time and the route accessed, without the content of the requests.

No system is perfectly secure. If a security incident may cause you relevant risk or harm, we will notify you and the ANPD as the law requires.

We only use cookies needed for the site to work and to remember your choices:

atria_session

keeps you signed in to the panel. httpOnly, expires with the session.

atria_locale

the language you picked. 1 year.

atria_theme

light or dark theme. 1 year.

atria_privacy

whether amounts are hidden in the panel. 1 year.

The browser's local storage remembers which tips you dismissed. We do not use advertising cookies, tracking pixels or third-party analytics. When you connect a bank, Pluggy's widget loads in your browser and follows Pluggy's own privacy policy.

Atria is meant for people aged 18 or over. We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18, we will delete it.

We may update this policy. The date at the top shows the current version. We will tell you about relevant changes in advance by email or in the panel and, when the law requires it, ask for your consent again.

M V GIROLNETO SOUSA, Bairro Lúcia Alice, Bela Vista de Goiás – GO, CEP 75240-000. General contact: contato@atriafinancas.com.br. Data protection officer: Marcus Vinicius Girolneto Sousa, privacidade@atriafinancas.com.br.

If translations differ, the Portuguese version prevails.