Privacy Policy

1. Data We Collect

1.1 Data you provide

• Account: name, email, username, password (stored in encrypted form) and, optionally, profile photo and bio;
• Content: prompts you create, save, or publish, with titles, descriptions, and tags;
• Communications: messages you send us by email or support channels.

1.2 Data collected automatically

When you use the Service, we collect technical and usage data such as: IP address, device type and browser, pages visited, features used, searches performed on the platform, credits consumed, traffic source (for example, campaign parameters), and error logs. We use this data to operate, protect, and improve the Service.

1.3 Payment data

Payments are processed by Stripe, a PCI DSS Level 1 certified processor. We do not store your full card details — we keep only transaction identifiers, the last 4 digits, card brand, billing history, and subscription status.

1.4 Specific channels and tools

• Browser extension: when you trigger optimization, the extension reads only the text you typed into the prompt field of the compatible AI site and sends it to our servers for processing. The extension does not collect your conversation history or page content.
• WhatsApp: if you use our WhatsApp channel, we process your phone number and the content of messages sent to the channel (including audio, which is transcribed by AI providers, and video links for summaries). Messages pass through a WhatsApp infrastructure provider.

2. How We Use Data (Purposes and Legal Bases)

• Provide and operate the Service — create your account, process prompts, manage credits and payments (performance of contract);
• Process content with AI — send your prompts, audio, and transcripts to AI model providers to generate the requested results (performance of contract);
• Improve and protect the Service — usage analysis, error fixing, performance monitoring, fraud and abuse prevention (legitimate interest);
• Operational communications — notices about your account, billing, and changes to the Service (performance of contract / legitimate interest);
• Marketing communications — news and tips by email, based on legitimate interest; you can opt out at any time using the unsubscribe link included in every email;
• Compliance with legal obligations — tax records, responding to orders from authorities (legal obligation).

3. Data Sharing

We do not sell your personal data. We share data only with:

3.1 Service providers (processors)

Companies that help us operate the Service, under contract and only to the extent necessary, in the following categories: cloud infrastructure, database and authentication; payment processing (Stripe); email delivery; error and performance monitoring; usage analytics tools; messaging infrastructure (WhatsApp); and video transcript extraction.

3.2 Artificial intelligence providers

To run the optimization, transcription, and summary features, we send the necessary content (prompt text, audio, or video transcript) to AI model providers, which currently include Anthropic and OpenAI. These providers process the content under their own terms, which prohibit using API customer data to train models without authorization. We may change the providers used at any time, maintaining an equivalent standard of protection.

3.3 Other sharing

• Public prompts: when you publish a prompt, its content, title, tags, your username, and profile photo become visible to anyone, including on pages indexable by search engines;
• Legal requirement: when necessary to comply with the law, court orders, or to protect rights, safety, and fraud prevention;
• Corporate transactions: in the event of a merger, acquisition, or sale of assets, upon notice;
• Aggregated and anonymized data: statistics that do not identify you individually.

4. Cookies and Similar Technologies

• Essential (always active): authentication, security, and operation of the Service;
• Performance and diagnostics (legitimate interest): speed metrics, error monitoring, and failure diagnostics — which may include session replay with masked text and blocked media, exclusively for debugging;
• Analytics and marketing (subject to your consent in the cookie banner): audience analytics and campaign measurement tools, which may share navigation events with the respective vendors. You can decline them in the banner and manage them in your browser settings.

5. International Transfers

Some of our service providers are located outside Brazil (mainly in the United States). In these cases, we adopt appropriate safeguards, such as contractual data protection clauses and hiring vendors with recognized security certifications. Your rights under the LGPD remain guaranteed.

6. Data Retention

We keep your personal data for as long as necessary to fulfill the purposes of this policy. As a rule:

• Account and content data: kept for as long as your account exists;
• Payment and billing records: kept for 5 (five) years, as required by tax law;
• Technical and usage records: kept for as long as necessary for security, fraud prevention, and Service improvement, and then deleted or anonymized.

When your account is deleted, your personal data is removed; records required by law are kept for the legal periods, and usage data may be retained only in anonymized form, with no link to your identity. Public prompts saved by other users may remain, disassociated from your identity.

7. Security

We adopt appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, password hashing, restricted access control, and monitoring of errors and anomalous activity. In the event of a security incident posing relevant risk to data subjects, we will notify the ANPD and those affected as required by law.

You are also responsible for the security of your account: use a strong, unique password and notify us immediately of any suspicious activity.

8. Your Rights (LGPD)

You may, at any time, request: confirmation of processing and access to your data; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary data; portability; information about sharing; and revocation of consent.

You can also manage directly: your profile data (in account settings), the visibility of your prompts (private/public), and marketing emails (unsubscribe link in every email).

If you believe the processing of your data violates the LGPD, you may file a complaint with the Brazilian National Data Protection Authority (ANPD — www.gov.br/anpd).

9. Minors

Social Prompts is intended for people aged 18 and over. We do not knowingly collect data from minors. If you believe this has occurred, contact us at support@socialprompts.ai for immediate deletion.

10. Sensitive Data

We do not intentionally collect sensitive data (health, religion, sexual orientation, biometrics, etc.). Do not include sensitive data in prompts or content processed by AI — it would be sent to third-party providers during processing.

11. Changes to this Policy

We may update this policy periodically by updating the date at the top of this document. Material changes that substantially affect your rights will be communicated at least 30 (thirty) days in advance, by email and/or notice within the Service.

12. Contact

Questions, LGPD requests, or communications about personal data: