TESS AI PLATFORM PRIVACY POLICY

This Privacy Policy was updated on July 31, 2026.

Tess ("we", "our", "Tess") operates the Tess AI Platform ("Platform"). This page informs you about our policies regarding the collection, use, and disclosure of Personal Information we receive from users of the Platform.

Your privacy is extremely important to us. We use your Personal Information only to provide and improve the Platform. By using the Platform, you agree to the collection and use of information in accordance with this policy.

PERSONAL INFORMATION

When using our Platform, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, among other data, your first name, last name, and e-mail address ("Personal Information").

The Platform allows the free entry of prompts and files, which may contain sensitive personal data (art. 11 of the LGPD). Tess does not request this type of data and recommends that users avoid entering it when unnecessary. If sensitive data is entered by the user, its processing will occur exclusively to enable the requested functionality, based on the specific consent of the data subject, and under the security measures described in this Policy.

COLLECTION AND USE OF INFORMATION

We collect Personal Information to provide and improve our Platform. This data helps us offer a safer and more personalized experience. The data generated by users in their interactions with the AI is not used, under any circumstances, for the training or improvement of our language models.

The use of cookies and similar technologies on the Platform is governed by our Cookie Policy.

SECURITY

The security of your Personal Information is important to us. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. Although we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Communication of security incidents: In the event of a security incident that may result in relevant risk or damage to data subjects, Tess will notify the Brazilian National Data Protection Authority (ANPD) and the affected data subjects within the period established by law, up to 3 (three) business days, counted from becoming aware that the incident affected personal data, pursuant to art. 48 of the LGPD, in conjunction with art. 6 of ANPD Board Resolution No. 15/2024.

DELETION OF PERSONAL INFORMATION

If you wish to have your Personal Information removed from our database, simply send an e-mail to [email protected]. Alternatively, the data subject may also submit a request through the communication channel available on the Tess website, on the Privacy Notice page. We will proceed with the removal of your data as soon as we receive the request.

RETENTION PERIOD

Unless otherwise stated in this document, Personal Information will be processed and stored for as long as necessary to fulfill the purpose for which it was collected and may be retained for a longer period due to applicable legal obligations or based on the consent of users.

In order to provide transparency regarding these periods, the table below indicates, by data category, the purpose of the processing, the retention period, and the trigger that starts the countdown for disposal:

Data category	Purpose	Retention period	Disposal trigger
Registration data (name, e-mail, account and organization data)	user identification, authentication, support, and management of the contractual relationship	For the duration of the account	Account closure or deletion request, except for retention for the regular exercise of rights (art. 16, II and III, of the LGPD)
Prompts and files entered by the user	Execution of the requested functionality and provision of the history to the user	While the account is active or until deleted by the user, with deletion of backup copies within up to 90 (ninety) days	Deletion by the user, account closure, or withdrawal of consent
Data received via third-party integrations (e.g., Google Workspace)	Execution of the integration enabled by the user	While the integration remains active on the account	Disconnection of the integration, account closure, or deletion request
Agent execution records	Auditing, abuse investigation, and traceability of operations performed on the Platform	90 (ninety) days, extendable by court order or by order of a competent authority	Expiration of the period, counted from the date of the record
Application access logs	Information security and compliance with art. 15 of the Marco Civil da Internet	6 (six) months, extendable by court order or by order of a competent authority	Expiration of the period, counted from the date of the record
Financial and tax data (invoicing, tax invoices, payment receipts)	Compliance with tax, accounting, and regulatory obligations	5 (five) years, pursuant to applicable tax legislation	End of the fiscal year to which the document refers
Commercial leads and marketing contacts	Prospecting, commercial communication, and relationship management	Up to 12 (twelve) months without interaction from the data subject or until withdrawal of consent, whichever occurs first	Withdrawal of consent, unsubscribe request, or inactivity for the indicated period

Once the periods above have elapsed, the data is deleted or anonymized, except where retention is authorized by art. 16 of the LGPD. This table is consistent with the records retention schedule maintained internally by Tess.

PURPOSE OF DATA PROCESSING

Data relating to the user is collected to allow Tess to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: traffic optimization and distribution, analytics, and management of the user database.

LIMITED USE OF DATA

Our application, Tess AI, uses data obtained through application integrations exclusively to provide or improve user-facing features that are prominent in the application interface, in accordance with the Google API Services User Data Policy. Application integrations are used exclusively for the individual integration of each user. Data collected from these integrations may be used in other steps, such as LLM, STT, OCR, and other integrations, but is viewed only by the user who integrated the data and is not transferred to third parties.

USER CONSENT

Any data transfer will be carried out only with the explicit consent of the user and for the following permitted purposes:

To improve appropriate access or user-facing features.
Security purposes, such as investigating abuse.
Compliance with applicable laws.
As part of a merger, acquisition, or sale of assets, after obtaining the user's explicit consent.

PROHIBITION OF HUMAN READING

Human reading of data is prohibited, except in the following cases:

With the user's affirmative consent to view specific messages, files, or other data.
For security purposes, such as investigating a bug or abuse.
To comply with applicable laws.
When the data is aggregated and used for internal operations in accordance with the legal privacy requirements of applicable jurisdictions.

INTEGRATIONS WITH THIRD-PARTY APPLICATIONS

The Platform offers users the possibility of enabling integrations with third-party applications. To support these features, Tess may use specialized connectivity infrastructure contracted exclusively for this purpose. When enabling any integration, the data necessary for its operation may transit through third-party systems operated under contractual obligations of confidentiality and compliance with applicable data protection legislation.

These systems are used exclusively to execute the integration enabled by the user and are not employed for any other purpose. By enabling an integration on the Platform, the user consents to the transit of their data through the systems linked to that specific feature.

Tess is committed to maintaining and ensuring the availability of the integrations offered on the Platform. However, the operation of these integrations may depend on services provided by third parties, in which case Tess will act diligently to minimize impacts and keep users informed.

COMPLIANCE OF EMPLOYEES AND AGENTS

We ensure that our employees, agents, contractors, and successors comply with the User Data Policies of the services and APIs we integrate, including the Google API Services User Data Policy.

SPECIFIC INFORMATION ABOUT AI MODELS

As of the latest update of this Privacy Policy, the Tess AI platform has integrated the following Artificial Intelligence models and technologies:

AI Models for Text Generation and Processing (LLMs):

Gemini 2.0 Flash, Gemini 2.0 Flash Lite, Gemini 2.0 Flash Thinking, Gemini 2.0 Pro, Gemini 2.5 Pro, Gemini 2.5 Flash; Deepseek V3, Deepseek R1; Grok 3, Grok 3 Fast; GPT-4o, GPT-4o mini, GPT-4o Latest, GPT-5, GPT-5 Latest; Claude 3.5 Haiku, Claude 3.5 Sonnet v1, Claude 3.7 Sonnet, Claude 3.7 Sonnet Thinking, Claude 4 Opus, Claude 4.1 Opus, Claude 4 Sonnet, Claude 4.5 Sonnet, Claude 4.5 Haiku; Command R, Command R Plus; Kimi K2; Llama 3.1; Snowflake Arctic; and more than 30 other LLMs (Large Language Models) in interactive mode.

AI Models for Image and Video Generation and Editing:

Nano Banana, Flux Schnell, Flux 1.1 Pro, Flux 1.1 Pro Ultra; Luma Photon, Luma Photon Flash, Luma Labs; Stable Diffusion 3.5, Stable Diffusion 3.5 Turbo; Leonardo AI Phoenix, Leonardo AI PhotoReal, Leonardo AI Flux; Recraft v3, Recraft AI, Recraft 20b; Ideogram 2.0, Ideogram 2.0 Turbo, Ideogram 2, Ideogram 2-Turbo, Ideogram 2a Turbo, Ideogram 3.0; Google Imagen 3, Imagen 3-fast, Google Imagen 4, Google Imagen 4 Ultra; GPT Image 1; DALL-E 3; VEO 2, VEO 3, VEO 3 Fast; Runway Gen-3 Alpha Turbo, Runway Gen-4 Turbo; Kling AI 1.6 Pro, Kling AI 2.0, Kling AI 2.1; Seedance 1 Pro; Luma Labs Ray 2.0; MiniMax Hailuo 02; Haiper AI 2; Colorize Old Videos; AI Video Upscale.

Totaling more than 60 models for image and video generation and editing.

Video Processing and Editing Technologies:

Runway Aleph, Chroma Key Background, 4x Video Upscale, Film Maker, Sound to Video, Extract Last Frame, Wan Animate.

Audio Processing Technologies:

ElevenLabs, OpenAI Whisper, Deepgram AI, Assembly AI, Rev AI.

Music Processing Technologies:

MiniMax Music, Google Lyria, Stability Music, ElevenLabs Music.

Avatar Processing Technologies:

HeyGen, Omni Human, Wan.

We share with these models only the data entered directly by users (prompts and files), to the extent necessary to execute the requested functionality. Tess does not add to this sharing any registration or identification data beyond that entered by the user. If the content entered by the user contains personal data, such data will be processed in accordance with the legal bases and safeguards set forth in this Policy.

In addition, we use Not Safe For Work (NSFW) content analysis models to ensure that users are not exposed to inappropriate content. All AI models used are rigorously evaluated to ensure the responsible and ethical use of the shared data.

Important Note: The AI models and technologies available on the Tess AI platform are constantly evolving. The list above reflects the models available as of the latest update of this Privacy Policy. To consult the most up-to-date and complete list of available AI models, visit our pricing page at:
https://tess.im/pricing

In the "Search AI Models" section, you will always find the most current information about which models are available in each plan.

INTERNATIONAL DATA TRANSFER

Some of the artificial intelligence models and infrastructure providers integrated into the Platform are headquartered outside Brazil. In such cases, the data necessary for the functionality may be transferred internationally.

This transfer is necessary for the performance of the contract and to serve the legitimate interests of Tess, since sharing with such models is indispensable to its proper operation and to the delivery of the functionalities requested by the user. For this reason, the international transfer does not depend on the specific consent of the data subject, being carried out upon prior notice to the user, pursuant to Law No. 13,709/2018 (LGPD).

Such transfers are carried out with adequate protection safeguards, in accordance with arts. 33 to 36 of the LGPD, ensuring that the data maintains a level of protection compatible with that required by Brazilian legislation. The user may request information about the safeguard mechanisms adopted through the channels indicated in the Contact section.

USE OF GOOGLE WORKSPACE API DATA

Our application does not use data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized Artificial Intelligence (AI) or Machine Learning (ML) models.

Any Google user data accessed by our application is used exclusively to provide and improve specific application features, as described in this privacy policy. We do not transfer Google user data to third-party AI tools for the development of generalized or non-personalized AI/ML models.

We are committed to ensuring that all Google Workspace data is handled in accordance with Google Workspace user data policies and is not used for prohibited purposes.

EXPLICIT USER CONSENT

Before using any third-party Artificial Intelligence models, we clearly inform users about the possible data sharing that may occur. This is done through a statement on the login screen of the Tess AI platform, where users must read and accept the Terms and Conditions and the Privacy Policy, explicitly providing their consent.

By proceeding with the login, the user agrees and accepts that certain data entered by them on the platform may be shared with the AI models used by our services, as described in this Privacy Policy. This consent is obtained clearly and unequivocally, and use of the platform is not permitted without the express acceptance of these conditions.

If the user does not wish to share their data with the AI models, they may choose not to use the platform features that depend on this integration. Our goal is always to respect the user's privacy, keeping them informed and obtaining their explicit consent before any sharing of information.

Tess AI may also send communications to the user through different contact channels (SMS, e-mail, WhatsApp, and phone calls) for the purposes of technical support, service updates, important notifications, and security information. The user consents to receiving these communications by accepting this Privacy Policy. Communication preferences can be managed by requesting directly via [email protected], where you can choose whether or not you wish to receive certain types of messages, except those essential for security and compliance with legal obligations.

SYSTEM LOGS AND MAINTENANCE

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (system logs) or use other Personal Data (such as the IP Address) for this purpose.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy takes effect on July 31, 2026 and will remain in force, except with respect to any future changes to its provisions, which will take effect immediately after being published on this page.

We reserve the right to update or change our Privacy Policy at any time, and you should review this Privacy Policy periodically. Your continued use of the Platform after the publication of any changes to this Privacy Policy constitutes your acceptance of those changes.

DATA SUBJECT RIGHTS AND COMMUNICATION CHANNEL

Data subject request channel

To exercise your rights under the LGPD (access, correction, anonymization, deletion, portability, and withdrawal of consent), please preferably use the dedicated request channel available on our website under Privacy Notice, managed by the Data Protection Officer (DPO) and monitored daily, with automated alerts for new requests. Contact by e-mail remains active as an alternative channel. Requests will be answered within the periods established by applicable legislation.

CONTACT

For any questions about this Privacy Policy or your rights as a user, please contact us:

Tess Tecnologia LTDA

CNPJ: 60.806.420/0001-91

Address: Av. Prof. Pereira Reis, 76, Loja B, Santo Cristo, Rio de Janeiro, RJ, 20220-800, Brazil

Data Protection Officer (DPO): DPO services are provided on behalf of Tess by Open CyberSecurity (https://opencybersecurity.com.br/), a privacy and information security consultancy engaged to support compliance with the LGPD/GDPR.

Contact: [email protected]

Support: [email protected]