Preá
Start free

Privacy

Last updated: October 31, 2026 · Ler em Português (/privacidade)

This policy explains how Orbin (“we” or “us”) handles personal information when you use the Preá mobile app, a Preá service that we host, or prea.ia.br. A third party that operates a licensed Preá Installable deployment on its own infrastructure is the controller responsible for its own privacy practices.

Information we collect

Depending on how you use Preá, we collect:

  • Contact and account information, such as your name, email address, and authentication records.
  • Content you provide to the service, including bot instructions, messages, tasks, memories, files, routines, and support communications.
  • Connection information you choose to provide, such as encrypted credentials or tokens for model providers, connected applications, and browser sessions.
  • Technical information needed to operate and secure the service, such as IP address, user agent, session records, device push token, timestamps, and diagnostic information.

How we use information

We use this information to:

  • Provide, maintain, secure, and troubleshoot Preá.
  • Authenticate you and synchronize your account across supported clients.
  • Run the bots, routines, connections, and notifications you request.
  • Respond to support requests and comply with legal obligations.

Service providers and AI processing

Before submitting content or starting AI work, the Preá mobile app names configured recipients, explains the data and purpose, and asks you to allow sharing. Choosing Not now prevents the mobile action. Permission applies to the selected Space and recipient. Account → AI data sharing lets you withdraw permission for new mobile actions. Stop existing runs and disable routines separately; withdrawal cannot recall data already sent. Web, desktop, and self-hosted server workflows use the connections you configure without this mobile permission flow.

  • Models and agents: messages, relevant conversation history, bot instructions, memories, attachments and file content, screenshots, and content retrieved from connected apps are used to generate responses and perform your tasks, including scheduled tasks. Supported connections include OpenAI, Anthropic, Google, OpenRouter, Vercel AI Gateway, Cursor, and custom model servers. The mobile permission screen identifies the services configured for your Space; configuring a service does not by itself grant permission for new mobile actions.
  • AI gateways: OpenRouter and Vercel AI Gateway receive requests and forward them to model providers according to the connection's routing settings. The mobile disclosure names the configured gateway. Processing, retention, and routing depend on the gateway account settings and applicable provider agreements. Preá's mobile permission flow does not change those settings or promise zero retention.
  • Voice: recorded audio is sent to your selected transcription service; text you choose to play, including bot responses, is sent for speech generation. Supported voice services include OpenAI, ElevenLabs, Cartesia, and Fish Audio. Microphone access and permission to share with an AI service are separate choices.
  • Memory: when Supermemory is configured, conversation summaries, saved memories, search queries, and bot and Space identifiers are sent to store and retrieve context. Self-hosted memory is processed by the server shown in your permission screen.

We collect this content from what you enter, upload, record, or authorize your bots to access. We store the recipient, Space, disclosure version, and time of your permission for the mobile app to remember your choices. We do not sell personal information or use Preá content for third-party advertising.

Services we select to process personal information must provide protection equal to or greater than the safeguards described in this policy, including limited processing purposes, appropriate security, and retention and deletion protections. Before enabling a provider, we review its terms and safeguards against these requirements. A self-hosted operator is responsible for assessing the services it selects and its own agreements with those services.

Provider terms govern their processing and retention after receipt. You can review the applicable provider policy from AI data sharing. Policies for supported services:OpenAI,Anthropic,Google,OpenRouter,Vercel,Cursor,ElevenLabs,Cartesia,Fish Audio, andSupermemory.

Other services may host infrastructure, run sandboxes, deliver notifications, store data, or connect apps as needed for the work you request. Connected apps receive the content required for the actions you authorize. Their processing is governed by their applicable terms and privacy policies.

Self-hosted deployments

The Preá mobile and desktop apps can connect to a Preá Installable server that you or another organization operates under an Orbin license. In that case, the server operator, not Orbin, controls the information sent to that deployment. The app stores the selected server address and session token securely on your device.

Retention and deletion

We keep hosted account information and content while your account is active and as reasonably needed to provide the service. You can permanently delete your hosted account and associated personal Space data from the Account screen in the Preá app. We may retain limited information when required by law, to resolve disputes, or to enforce agreements. Information already sent to a third-party provider is subject to that provider’s retention practices.

Security and international transfers

We use technical and organizational safeguards, including per-Space AES-256-GCM envelope encryption and Row-Level Security, to protect personal information. On Orbin infrastructure in Brazil, workspace data and default routing via Orbin Customer Inference remain in Brazil. When you configure external providers located in the United States or other countries, data sent to those providers crosses borders under LGPD Art. 33 safeguards. See LGPD and data sovereignty for technical details.

Children

Preá is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your rights

Under Brazil’s LGPD (Law No. 13.709/2018, Art. 18) and applicable privacy laws, you have rights to confirmation of processing, access, correction, portability (via ZIP export in Settings), deletion, information on shared recipients, and consent revocation. Contact us to exercise your rights.

Contact us

Orbin
São Paulo, SP, Brazil
ola@prea.ia.br · DPO / Encarregado: dpo@prea.ia.br