Privacy Policy

VitrinaFlow is operated by Intetec (Rua Rio Grande do Norte, 1435, Sala 708, Belo Horizonte — MG, 30130-138, Brazil). This policy explains, plainly, what data we collect when you use VitrinaFlow, what it's used for, and how you can control it or ask for it to be deleted at any time.

1. What data we collect

Account data: your name, email, and password (stored hashed, never in plain text) at sign-up, plus your preferred interface language.

Your business data (briefing): the information you provide about your brand — visual identity, target audience, differentiators, competitors, and content preferences — used exclusively to generate posts that actually make sense for your business.

Connected social accounts: when you connect Instagram or Facebook, VitrinaFlow receives and stores an access token (through Meta's official login flow) and basic information about the connected account or Page (name, profile picture, identifier). See section 2 for exactly what we do with it.

Content and media: the AI-generated captions and images for your posts, and any photo or video you upload yourself through the Media Library.

Usage data: an activity log within the platform (who approved, edited, or published what) for auditing and support purposes.

Browsing data on our public marketing site: only on these public pages (never inside the logged-in platform), we use Google Analytics to understand, in aggregate and anonymized form, how visitors find their way here — see section 6 on cookies.

2. How we use your Instagram and Facebook access

The only reason VitrinaFlow requests access to your Instagram account or Facebook Page is to publish, on your behalf, the content you've approved inside the platform — whether manually or through the automatic mode you've chosen. We also read basic account information (name, picture, list of Pages you manage) only so you can pick which account to connect and confirm the connection is active.

We never use this access to publish content you haven't approved, read your direct messages, access other followers' data, or for any purpose outside publishing the posts you've configured yourself. We don't sell, rent, or share this data with third parties for advertising purposes.

3. How we use artificial intelligence

Captions and images suggested by VitrinaFlow are generated by third-party AI models, accessed through the OpenRouter service — we never send your Instagram/Facebook credentials through that process, only the briefing you've filled in and the post's own context. You can always review, edit, or reject any generated content before it's published (unless you've explicitly chosen automatic publishing).

4. Who we share data with

We don't sell your data. We share information only with the service providers necessary to run the platform:

• Meta (Instagram/Facebook) — receives the content you approve, at the moment of publishing.
• Amazon Web Services (AWS) — hosts our servers, database, and media files.
• OpenRouter — processes AI caption and image generation.
• TikTok and LinkedIn — receive the content you approve, at the moment of publishing, when those networks are connected.
• Asaas — processes payments from customers in Brazil and issues the invoice (nota fiscal), using the billing details you provide (name, tax ID, email and address).
• Paddle — our reseller outside Brazil: processes payment, issues the invoice and handles taxes, using the billing details you provide. Card details are collected directly by Asaas or Paddle and never pass through our servers.
• WhatsApp (Meta) — sends the daily "posts waiting for approval" notice to the number you register.
• Google Analytics — only on the public marketing site, never inside the logged-in platform.
• Meta Pixel and Conversions API — on public pages and registration, to measure campaigns and attribute registrations and the first paid subscription, using browser identifiers and hashed contact data.

We may also disclose data if required by law or a valid court order.

5. Where your data is stored

Your data is stored on AWS servers located in the United States. This means an international data transfer, carried out with the contractual and technical safeguards required by Brazil's LGPD (General Data Protection Law).

6. Cookies

The logged-in platform uses only a session cookie, essential for keeping you authenticated — not used for tracking or advertising. The public marketing site (the pages you're reading right now) uses Google Analytics and Meta cookies to measure audiences and attribute campaigns.

7. How long we keep your data

We keep your data for as long as your account is active. If you delete your account (see section 8), your personal data and generated content are removed; records the law requires us to keep longer (such as tax records, where applicable) are retained only for the legally required period.

8. How to delete your account and data

You're always in full control of this:

• Log into your account, go to Settings → My Account, and use the "Delete account" option (you'll be asked for your password again, as confirmation).
• This permanently removes your profile, briefing, and generated content data, and revokes access to your connected Instagram/Facebook accounts.
• You can also request deletion by email at ac@intetec.com.br — we respond within 15 business days.

9. Your rights

You can, at any time, request access to the data we hold about you, correction of inaccurate information, portability of your data, or withdraw consent previously given — through the same contact email above.

10. Children

VitrinaFlow is intended for businesses and professionals aged 18 and over. We do not knowingly collect data from minors.

11. Changes to this policy

If we make a material change to this policy, we'll notify you by email or with a notice inside the platform before it takes effect.

12. Contact

Questions about this policy or your data? Reach us at ac@intetec.com.br, attention Moisés Alves Costa (Data Protection Officer).