Privacy Policy

Last updated: August 1, 2026

This policy explains how IGM Agência, operator of the Flow platform (flow.igmagencia.site), handles personal data. It follows the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).

1. Data we collect

Account data

Name, email, password (stored with irreversible hashing), role and, optionally, a profile picture.

Connected social account data

When an account is connected, we store only: the public account identifier, the display name, the public profile picture and the access tokens required to publish. We do not collect, read or store private messages, contact lists, browsing history or audience data.

Content

Text, images, video and files uploaded to the platform, plus the activity history (who changed what and when) and the comments exchanged about each post.

Technical data

Access logs necessary for operating and securing the service.

2. How we use it

  • Operate the platform: show content to authorized people and organize the workflow;
  • Publish the content you scheduled to the connected accounts;
  • Send notifications about work progress;
  • Maintain security and investigate misuse.

We do not use personal data for advertising, we do not sell it and we do not share it with third parties for commercial purposes.

3. Legal basis

We process data based on the performance of a contract and delivery of the requested service, compliance with legal obligations where applicable, and the legitimate interest of keeping the platform secure.

4. Who we share with

We share data only with those necessary for the service to work:

  • Connected social networks (TikTok, Meta/Instagram and Facebook, LinkedIn) — they receive the content you chose to publish, according to the authorization granted;
  • Infrastructure provider — the server hosting the platform.

There is no transfer of personal data for any other purpose.

5. How long we keep it

  • Access tokens: while the account remains connected. On disconnection they are deleted from the database immediately.
  • Account data and content: while the account is active, or until deletion is requested.
  • Backups: kept for a limited period and overwritten on rotation.

6. Your rights

You may at any time request: confirmation that we process your data; access to it; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent.

To exercise any of these rights, write to igmagencia2@gmail.com. We respond within a reasonable period.

7. Security

We apply technical measures to protect data, including encrypted traffic (HTTPS), passwords stored with irreversible hashing, permission-based access control, and periodic backups with integrity checks.

8. Data deletion

To request deletion of your data, write to igmagencia2@gmail.com. You can also remove any connected social account yourself at any time, which deletes the corresponding tokens immediately.

9. Minors

The platform is intended for professional use and is not directed at anyone under 18.

10. Changes

We may update this policy. The date at the top indicates the current version.

11. Contact

Data protection contact: igmagencia2@gmail.com — IGM Agência, Araçatuba, São Paulo, Brazil.