Privacy Policy

1. Data we collect

• Registration: name, email, phone/WhatsApp and tax ID (CPF or CNPJ).
• Usage: access logs, actions on the platform, credit consumption and billing data.
• Content: the copy, images, videos and the assets/brand kit you create or upload.
• Social connections: access tokens you authorize (e.g., Instagram, YouTube), used only for the purposes you request.

2. How we use it and legal basis

• Provide the service and generate the requested content — performance of a contract.
• Billing and fraud prevention — performance of a contract and legal obligation.
• Support, security and improvement of the product — legitimate interest.
• Communications and marketing, where applicable — consent, which you may withdraw.

3. Sharing with third parties

We share data only with processors necessary for the operation of the service, such as:

• artificial intelligence providers (processing of generations);
• payment provider (Stripe), to process subscriptions and purchases;
• email, hosting and storage providers;
• social networks you choose to connect to.

We do not sell your personal data.

4. Cookies

We use essential cookies for authentication and operation. Learn more in our Cookie Policy.

5. Security

We adopt technical and organizational measures to protect your data, such as password encryption, transmission over HTTPS, access control and protection of integration tokens. No system is 100% immune; we work continuously to reduce risks.

6. Retention

We keep your data while the account is active and for as long as necessary to comply with legal, tax and security obligations. After the account is deleted, we remove or anonymize the data, except as the law requires us to retain.

7. Your rights (LGPD)

You may, at any time, request:

• confirmation of and access to your data;
• correction of incomplete or outdated data;
• deletion, anonymization or portability;
• withdrawal of consent.

You can delete your account and your data directly on the platform, in Account settings, or by writing to contato@iainfinity.com.br.

Your U.S. Privacy Rights (California/CCPA)

If you are a U.S. resident, you have specific rights regarding your personal information. Depending on your state of residence, these may include:

• Right to know what categories of personal information we collect, the purposes for which we use it, and with whom we share it.
• Right to access the specific pieces of personal information we hold about you.
• Right to request deletion of your personal information, subject to legal exceptions.
• Right to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at contato@iainfinity.com.br or use our Data Deletion page. We will verify your request and respond within the timeframe required by applicable law. You may also designate an authorized agent to submit a request on your behalf.

This section applies to California residents under the CCPA/CPRA and, where applicable, residents of other U.S. states with similar laws.

8. International transfer

Some providers may process data outside Brazil. In such cases, we adopt appropriate safeguards in accordance with the LGPD.

9. Children and adolescents

The Platform is intended for people over 18 years of age. We do not knowingly collect data from minors.

10. Changes to this Policy

We may update this Policy. We will notify you of material changes through the Platform or by email.

11. Data Protection Officer

To exercise rights or ask questions about privacy, contact our data protection officer: contato@iainfinity.com.br.