DuoTalk Show, Privacy Policy

1. Overview

This policy explains what personal data DuoTalk Show (duotalk.show) collects, why, and what your rights are. We keep it short on purpose: we collect very little.

The data controller is LARGMC Administração e Participações Ltda, CNPJ 24.959.672/0001-97, São Paulo, SP, Brazil. We process personal data under the Brazilian General Data Protection Law (LGPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

For any privacy matter, contact legal@pipoh.ai.

2. What we collect

Account data: your e-mail address and basic account information, managed through Clerk, our authentication provider. If you sign in with Google or Apple, we receive only the identifiers needed to create and recognize your account.

Usage and metering data: which AI model was used in a show, word and character counts, and your Talks balance and transactions. We need this to charge the right amount of Talks and to operate the service.

Payment data: handled entirely by Paddle, our Merchant of Record. We never receive or store your card number or full payment details, we only get confirmation that a purchase happened.

3. What we deliberately do not collect

We do not store the content of your show conversations associated with your user account. The dialogue generated during a show is processed to deliver the experience, but it is not kept linked to who you are.

We do not collect your location beyond what is technically inherent to web requests, we do not buy data about you from third parties, and we do not run advertising trackers.

4. How we use your data

We use your data to: create and secure your account; deliver shows and deduct Talks correctly; process purchases and refunds through Paddle; answer support requests; and comply with legal obligations such as tax and accounting rules.

We do not sell your personal data and we do not use it for third-party advertising.

5. Legal bases

Under the LGPD and, where applicable, the GDPR, we rely on: performance of the contract with you (delivering the service you signed up for); compliance with legal obligations (tax, accounting, consumer law); our legitimate interest in keeping the service secure and preventing fraud and abuse; and your consent, in the rare cases where we ask for it explicitly.

Where we rely on legitimate interest, we have assessed that our processing is minimal and does not override your rights.

6. Who processes data on our behalf

We use a small set of subprocessors, each receiving only what it needs: Vercel (hosting), Neon (database), Clerk (authentication), Paddle (payments), and the AI providers Anthropic, OpenAI, Google and ElevenLabs (AI text and voice processing).

The AI providers receive only the text and topic of the show being generated, never your name, e-mail or any identifier that links the content to you.

Some of these providers are located outside Brazil and the EU. Transfers happen under the safeguards required by the LGPD and GDPR, such as contractual data protection clauses.

7. Cookies

We use only essential cookies: the ones required for your session and authentication to work. There are no advertising, analytics-profiling or cross-site tracking cookies.

Because we use only essential cookies, the site works without a cookie consent banner in most jurisdictions, there is simply nothing optional to consent to.

8. Retention and security

We keep your account data while your account is active. Metering and purchase records are kept for as long as tax, accounting and consumer protection law require, and then deleted or anonymized.

We apply technical and organizational measures appropriate to the small amount of data we hold: encrypted connections, access controls, and reliance on established infrastructure providers. No system is perfectly secure, but our best protection is structural, we simply do not store your conversations or your card data.

9. Your rights

You have the right to access the data we hold about you, correct it, delete it, and receive it in a portable format. You can also object to processing based on legitimate interest and withdraw consent where consent is the legal basis.

To exercise any of these rights, e-mail legal@pipoh.ai from the address linked to your account. We respond within the deadlines set by the LGPD and, where applicable, the GDPR.

If you believe we have not handled your data properly, you can also complain to the Brazilian data protection authority (ANPD) or to your local supervisory authority.

10. Children and teenagers

DuoTalk Show is for users aged 13 and over. Users under 18 must be supervised by a parent or legal guardian.

We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, tell us at legal@pipoh.ai and we will delete the account and its data.

11. Changes to this policy

When we change this policy, we update the date at the top of the page. If a change meaningfully affects how we handle your data, we will notify you in the service or by e-mail before it takes effect.

Previous versions are available on request at legal@pipoh.ai.

12. Contact

Data controller: LARGMC Administração e Participações Ltda, CNPJ 24.959.672/0001-97, São Paulo, SP, Brazil.

Privacy and legal matters: legal@pipoh.ai. General support: support@pipoh.ai.