Privacy notice.

Last updated: September 27, 2026

1. Who controls your data

Hey Will is a product of i9Store USA LLC (i9Store.com), a Florida company, USA, located at 20815 NE 16th Ave, STE B33, Miami, FL 33179, USA. In this notice, "we" and "us" mean i9Store USA LLC.

i9Store USA LLC is the controller of this personal data: that of people who visit the heywill.co site, that of people who write to us and that of the accounts of people who use the Hey Will app. The controller is whoever decides how and why personal data is processed.

The systems a company connects to Will are different: the customer company is the controller of the personal data in them, and i9Store USA LLC acts as its processor (operador, in the LGPD’s terms), handling that data on the company’s behalf. Section 5 explains how this works.

This notice follows Brazil’s General Personal Data Protection Law, the LGPD (Lei nº 13.709/2018).

2. What data we collect

We process the following personal data:

• Contact details you send us by email: name, work email, company, job title, team size and your message.
• App account data: each person’s name, email, company, job title and permissions.
• Usage and security logs: access to the app, actions taken in it and the receipts for Will’s actions.
• Data from the systems the customer company connects, within what it authorizes: orders, customers, suppliers, messages, documents and financial data from Open Finance (regulated by Brazil’s Central Bank). This may include personal data of the company’s customers, suppliers and team members.

The heywill.co site doesn’t store what you fill in on its forms. The "Get started" and "Talk to sales" forms open your own email app with a message ready for heywill@i9store.com. We only receive what you choose to send.

Hey Will is a service for companies and professionals and isn’t directed at anyone under 18.

3. How we use the data

We use personal data to:

• Reply to people who write to us and present Hey Will.
• Provide the contracted service: create and maintain accounts, connect the systems the company authorizes and do the work the company sets up for Will.
• Keep the service secure, prevent fraud and record a receipt for every action Will takes.
• Comply with legal obligations, where they apply.

Hey Will doesn’t use customer companies’ data to train AI models.

4. Legal bases

These are the legal bases we rely on:

• Replying to people who write to us and presenting the service: legitimate interest and steps prior to a contract, at the request of the person who contacts us (Art. 7, IX and V, of the LGPD).
• Providing the contracted service: performance of a contract (Art. 7, V).
• Security, fraud prevention and receipts: legitimate interest (Art. 7, IX) and, where applicable, compliance with a legal obligation (Art. 7, II).
• Open Finance data: processed only with the company’s consent, under the Open Finance rules.

For personal data in connected systems, the customer company decides the legal basis, as the controller (section 5).

5. Data from companies that use Will and from connected systems

The customer company connects its systems to Will, such as its ERP, email, CRM, banks through Open Finance, store, marketplaces, WhatsApp, spreadsheets and calendar. It gives this authorization once, at the start, item by item, and can revoke any item at any time.

In these systems, the customer company is the controller of the personal data, and i9Store USA LLC is the processor: it handles that data on the company’s behalf and follows its instructions. A data processing agreement is available on request at heywill@i9store.com.

Will reads and acts in these systems according to what the company sets up: what Will does on its own and what it brings to a person. Payments and anything the company marks as sensitive in Will always go through a person. Every action Will takes gets a receipt: who asked, what was done, in which system, when and based on which source.

If your data is in the systems of a company that uses Will, for example because you’re a customer, a supplier or part of its team, that company is responsible for it. To exercise your rights over that data, contact that company.

6. Who we share data with

To provide the service, we work with service providers in these categories:

• Cloud hosting and infrastructure.
• Authentication, for signing in to the app.
• AI model providers.
• Email and communication.

These providers work under contracts with confidentiality and security obligations. The AI model providers we use are bound by contract not to train their models on customer companies’ data.

When Will acts in a connected system, such as the company’s email or ERP, the data goes through that system, according to what the company set up. Each system follows its own terms.

We may also share data when the law or a competent authority requires it.

7. International data transfers under the LGPD

i9Store USA LLC is based in the United States. Personal data may be processed in Brazil and in other countries, such as the United States, for the purposes described in section 3.

These international transfers follow Article 33 of the LGPD, including the standard contractual clauses approved by the ANPD (Brazil’s data protection authority) in Resolução CD/ANPD nº 19/2024. You can request the text of these clauses at heywill@i9store.com.

8. How long we keep data

We keep personal data for these periods:

• Account data and data from connected systems: while the contract is active.
• After the contract ends, the company has 30 days to export its data. After that period, the data is deleted or anonymized within 90 days.
• Emails from people who asked to be contacted: for up to 2 years, or while there is a business relationship.

These periods don’t apply to anything the law requires us to keep longer.

9. How we protect data

We use technical and administrative measures to protect personal data, including:

• Encryption of data in transit (TLS).
• Role-based access: each person sees only what their role allows.
• Separation: each company’s data is kept separate from other companies’ data.
• Least privilege: each access has only the permissions it needs.
• A record of every action Will takes, with a receipt.

If a security incident may cause significant risk or harm to people, we report it to the ANPD and to the people affected, as Article 48 of the LGPD requires. If the incident involves data we process on behalf of a customer company, we notify that company, which is the controller.

10. Cookies and similar technologies

The heywill.co site doesn’t use advertising or analytics cookies, or tracking pixels. The site’s fonts, images and code are served from our own domain.

In the Hey Will app, we use only essential session cookies, which keep you signed in after you sign in through an authentication provider.

11. Your rights

Under the LGPD (Articles 18 and 20), you have the right to:

• Confirm whether we process your personal data.
• Access your data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the LGPD.
• Request deletion of data processed with your consent, except where the law provides otherwise.
• Request portability of your data to another provider, under the ANPD’s rules.
• Know who we share your data with.
• Know that you can refuse consent and what happens if you do.
• Revoke your consent at any time.
• Request a review of decisions made solely through automated processing of personal data that affect your interests.

To exercise these rights, write to heywill@i9store.com, free of charge. We reply within 1 business day and send a complete answer within 15 days of your request (Art. 19, II, of the LGPD). We may ask for information to confirm your identity.

If your request is about data we process on behalf of a customer company (section 5), it should go to that company, which is the controller.

You can also file a complaint with the ANPD.

12. Data protection officer

i9Store USA LLC itself performs the role of data protection officer (encarregado), through the channel heywill@i9store.com.

Use this channel to ask questions about your data, make complaints and exercise your rights. It’s also where we receive communications from the ANPD.

13. Changes to this notice

When this notice changes, we publish the new version on this page, with the update date at the top. If the change is material, we also notify customers by email.