1. Scope and controller
GeniePost controls the processing described here. This policy covers the studio platform, your account, login, and support. Contact contato@geniepost.ai with privacy requests.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Account and identity | Name, email, Firebase identifier, login provider, subscription status | You, Google Sign-In, Firebase Authentication |
| Payments | Plan, status, subscription identifiers, transaction records; processors retain full card details | Stripe or Mercado Pago |
| Usage and security | IP address, time, browser agent, session cookies, errors, technical events | Your device and our servers |
| Communications | Support messages, preferences, newsletter or alert address | You |
| Content you create in the studio | Pieces, slides, copy, captions, brands, logos, fonts, and images you upload | You |
| Connected Meta account | Instagram Business account id, Facebook Page id, username, and the access token Meta issues | You, when you authorize Meta login |
| Interactions on the connected profile | Comments and direct messages received, with author, text, date, and the triage applied | Meta API, after your authorization |
3. Purposes and legal grounds
We use data to create and authenticate accounts; provide the studio's features and personalized content; process subscriptions; answer requests; prevent fraud and abuse; fix faults; comply with law; and send permitted communications. Grounds may include contract performance, consent, legitimate interests, legal claims, and legal obligations.
4. Providers and sharing
Necessary providers include Firebase, infrastructure and email providers, Stripe, and Mercado Pago. We may also disclose data when legally required, to protect rights, or during a legitimate corporate transaction with safeguards. We do not sell personal data. International processing is handled with safeguards compatible with applicable Brazilian data-protection law.
5. Cookies
Essential cookies support sessions, authentication, language, and security.
5.1. Instagram and Meta
Connecting an Instagram account is optional and nothing in the studio depends on it: designing, editing, and exporting all work with no connection at all. Once you connect, the processing described here applies.
Meta connection. If you connect an Instagram Business account, we store the account id, the associated Facebook Page id, the username, and the access token Meta issues. That token is used for two things and nothing else: reading the comments and direct messages of that profile, and publishing what you ask to publish. Disconnecting the account inside the studio, or removing GeniePost under Instagram → Settings → Apps and websites, revokes the access and deletes the token.
Public profiles. When you give an @ so a piece can be generated from that profile, we read only what the profile publishes openly. We do not access restricted content or follower data.
Artificial intelligence. The briefing you write, the content of the piece, and the material read from a profile are sent to Google Gemini models to generate copy and narration. Designing, editing, and exporting involve no AI at all.
Deletion. Deleting the account also deletes everything in this section — pieces, rendered slides, brands, logos, fonts, uploaded images, API keys, the interaction queue, and the Meta connection. The steps are on Data deletion.
6. Your rights
You may request confirmation, access, correction, applicable portability, sharing information, review, objection, consent withdrawal, or deletion within legal limits. We may verify your identity. Email contato@geniepost.ai.
7. Account deletion and retention
Authenticated users can use Delete account, with the full steps on Data deletion. Deletion cancels active renewal, removes authentication, and deletes associated operational data. Minimum records may be isolated when required by law, fraud prevention, or legal claims. Protected backups expire as described in the Data Retention Policy.
8. Security, children, and changes
See our Security page. The service is not directed to children. Material changes appear at this URL with a revised date.