Publiqi
HomeLog in

Privacy Policy

Publiqi.com

The Publiqi.com Privacy Policy (“Publiqi” or “Company”) was last updated in March 2026.

To protect fundamental rights to freedom, privacy, and the free development of natural persons, Publiqi has prepared this Privacy Policy in accordance with Brazil’s General Data Protection Law (LGPD) – Law No. 13,709/2018.

Please take a moment to read our privacy practices and contact us if you have questions.

We are committed to transparency about how we process personal data of Users who use services offered by Publiqi, as required by Article 9 of the LGPD. This Policy applies when the User uses the Publiqi.com website and/or the Publiqi application (together, the “Services”).

This Policy is also structured to meet Google’s requirements regarding Google User Data obtained through Google APIs (such as the YouTube Data API and YouTube Analytics API), as well as Meta’s requirements regarding Instagram User Data obtained through the Instagram Graph API.

1. How this Policy is made available

This Privacy Policy:

  • is published on a dedicated page in HTML text format on a domain owned by Publiqi;
  • is accessible from the website homepage and prominent locations within the application;
  • will be updated whenever there are material changes to personal data processing practices, especially regarding Google User Data and Instagram User Data.

2. Accuracy of information

All information provided by the User to Publiqi, especially personal data, must be truthful and must not violate Brazilian law, in particular the LGPD.

If Publiqi finds that information provided is false, it may delete such personal data and terminate the User account, without prejudice to other appropriate measures.

3. What are Personal Data and Sensitive Personal Data?

For the purposes of this Policy:

  • Personal Data means information that can be used to identify a natural person, directly or indirectly. Data of legal entities, such as corporate name and tax ID (CNPJ), are not considered personal data under this Policy.
  • Sensitive Personal Data, under the LGPD, includes information on racial or ethnic origin, religious belief, political opinion, trade union membership, data concerning health or sex life, genetic or biometric data, among others.

As a rule, Publiqi does not require Sensitive Personal Data to use the Services. If such data is processed in specific situations, it will be done in accordance with the LGPD and this Policy.

4. Company as controller

Publiqi acts as controller of the Personal Data collected. This means the Company is responsible for decisions regarding processing of Users’ Personal Data, as defined under the LGPD.

5. What types of Personal Data are collected?

5.1. Data provided directly by the User (registration)

To use the Services, the User must complete an initial registration (“User Registration”), through which at least the following personal data is collected:

  • full name;
  • email address;
  • WhatsApp number (optional, for reports and summaries).

This data is collected primarily to identify the User and enable access to the application and Publiqi features.

Depending on the plan or features contracted, other data may be collected, such as:

  • billing data (where applicable), such as tax ID, address, and invoicing information;
  • usage preferences and profile settings;
  • information about the User’s brand or business (profile type, description, audience, tone of voice).

5.2. Service usage and navigation data

When using the Services, we may automatically collect technical and usage information such as:

  • IP address;
  • browser type and operating system;
  • pages accessed, date and time of access;
  • device identifiers;
  • records of actions within the platform (activity logs).

This data is used to ensure proper operation of the Services, security, fraud prevention, statistics, and performance improvements.

5.3. Instagram User Data (Instagram Graph API)

For Instagram integration, Publiqi requests authorization to access your Instagram account data through the Instagram Graph API. For this Policy, we refer to this set of information as “Instagram User Data.”

Depending on the permissions (scopes) you grant, we may collect, for example:

  • your Instagram profile information (username, display name, profile picture, account type);
  • follower count;
  • a list of profile posts, including captions, media (images and videos), publication date, content type, and similar metadata;
  • post metrics and insights (views, likes, comments, shares, saves);
  • access tokens needed to maintain the connection between your Instagram account and Publiqi, always according to the permissions you grant.

This Instagram User Data is used solely to:

  • allow you to connect your Instagram account to Publiqi;
  • retrieve your content and metrics for display, analysis, and organization in the Publiqi dashboard;
  • when you request it, create, publish, or schedule content on your Instagram profile from Publiqi;
  • generate reports, dashboards, and performance insights for you;
  • maintain and improve features directly related to these integrations, always for your benefit.

5.4. Google User Data (Google APIs, including YouTube)

For integration with Google services (such as YouTube), Publiqi may request authorization to access your Google account data through Google APIs. For this Policy, we refer to this set of information as “Google User Data.”

Depending on the permissions (scopes) you grant, we may collect, for example:

  • basic information from your Google profile (name, email, profile photo);
  • information from your YouTube account, such as:
    • channel ID, channel name, channel photo;
    • a list of channel videos including title, description, thumbnail, publication date, duration, and similar metadata;
    • aggregated statistics and metrics for videos (views, likes, comments, etc.) via YouTube Analytics;
  • access and refresh tokens needed to maintain the connection between your Google account and Publiqi, always according to the permissions you grant.

This Google User Data is used solely to:

  • allow you to connect your Google/YouTube account to Publiqi;
  • retrieve your content and metrics for display, analysis, and organization in the Publiqi dashboard;
  • when you request it, create, publish, or manage content on your YouTube channels from Publiqi;
  • generate reports, dashboards, and performance insights for you;
  • maintain and improve features directly related to these integrations, always for your benefit.

6. Legal bases and purposes of processing

6.1. Performance of a contract

User Registration and use of core Publiqi features generally rely on the legal basis of performance of a contract (Art. 7, V and VI, LGPD). In other words, Publiqi can only properly deliver the contracted Services if the User provides registration data and uses the system.

6.2. Consent and third-party platform integration

To access Google User Data and Instagram User Data, Publiqi relies on your express consent provided through each platform’s authorization screen (OAuth).

This consent:

6.3. Other legal bases

Depending on context, we may also process personal data based on:

  • compliance with a legal or regulatory obligation;
  • regular exercise of rights in judicial, administrative, or arbitration proceedings;
  • legitimate interests, always balancing them with the data subject’s rights and freedoms, where applicable.

7. How does Publiqi store Personal Data?

Publiqi uses databases managed by Amazon AWS. The host (hosting and execution of the website and application) is Cloudflare, with high security standards. Processing follows applicable requirements, including the GDPR, as described in AWS’s privacy policy at https://aws.amazon.com/privacy/ and Cloudflare’s at https://www.cloudflare.com/privacypolicy/.

Therefore, any international transfer of personal data to AWS and Cloudflare complies with item I of Article 33 of the LGPD (countries or international bodies with adequate level of data protection).

8. Automated processing and recommendations

Publiqi may use information and data provided by the User to:

  • recommend content, features, profiles, and functionality that may be useful;
  • suggest publishing strategies, timing, and content types based on usage history and performance;
  • generate or adapt content using artificial intelligence, always based on data and instructions provided by the User and solely for the User’s benefit.

Keeping your profile accurate and up to date helps make these recommendations more precise and relevant.

9. With whom do we share data?

9.1. General sharing

Publiqi does not sell Users’ personal data.

We may share personal data with:

  • infrastructure providers (such as AWS, Cloudflare, transactional email services, payment systems);
  • analytics tools (such as Google Analytics, with anonymized or pseudonymized data whenever possible);
  • artificial intelligence providers (such as Anthropic/Claude and OpenAI) for content generation and adaptation features, using only the data strictly necessary for the functionality requested by the User;
  • contracted partners for support, maintenance, customer service, and development activities.

In such sharing:

  • third parties generally act as data processors, contractually bound to use data only as instructed and never for their own purposes;
  • we require security and confidentiality standards consistent with this Policy and the LGPD.

9.2. Sharing of Google User Data

Specifically regarding Google User Data obtained through Google APIs:

  • We do not sell this data to third parties;
  • We do not transfer this data to third parties for:
    • targeted advertising;
    • creating marketing profiles;
    • sale to data brokers or information resellers;
    • credit analysis;
    • any purpose unrelated to providing or improving Publiqi’s features.

We may share Google User Data only:

  1. With providers strictly necessary to operate the Services (e.g., storage and processing infrastructure), always as processors, without authorization to use data for their own purposes;
  2. When required by law or competent authority;
  3. When you clearly request or authorize (for example, exporting reports to an external tool you choose).

9.3. Sharing of Instagram User Data

Specifically regarding Instagram User Data obtained through the Instagram Graph API:

  • We do not sell this data to third parties;
  • We do not transfer this data to third parties for:
    • targeted advertising;
    • creating marketing profiles;
    • sale to data brokers or information resellers;
    • any purpose unrelated to providing or improving Publiqi’s features.

The same sharing rules described in section 9.2 apply to Instagram User Data.

10. Permitted and prohibited use of third-party platform data

In line with Google and Meta policies, Publiqi commits to using Google User Data and Instagram User Data only to:

  • provide and maintain application features that depend on integration with those platforms;
  • improve, fix, and optimize those features, in aggregated or anonymized form, always in the User’s interest.

Publiqi does NOT use Google User Data or Instagram User Data for:

  • targeted ads, personalized advertising, or retargeting;
  • selling or making such data available to data brokers or third parties for marketing;
  • creating standalone databases for commercialization or generic exploitation;
  • credit scoring, lending, or financial assessments;
  • training artificial intelligence models or generic algorithms based on Google User Data or Instagram User Data.

If Publiqi uses AI models in its products, it will not use User Data obtained via third-party platform APIs to train those models, in full compliance with each platform’s policies.

11. How does Publiqi ensure information security?

In accordance with LGPD Article 6, items VII and VIII (security and prevention principles), Publiqi adopts appropriate technical and organizational measures to protect personal data against:

  • unauthorized access;
  • destruction, loss, alteration, disclosure, or any unlawful or inappropriate processing.

Measures include, among others:

  • use of TLS/SSL encryption for communications between the User and the platform;
  • Row Level Security (RLS) in the database, ensuring each user accesses only their own data;
  • encrypted access tokens stored securely, with automatic renewal where applicable;
  • restricted access controls for employees and partners who actually need the data;
  • security monitoring and activity logs;
  • internal information security and incident response policies.

12. Browsers and Google Analytics

Certain browsers may be incompatible with the security system and features used by Publiqi. Generally, modern, well-known browsers (such as Google Chrome, Mozilla Firefox, Microsoft Edge) are most suitable.

Google Analytics collects information anonymously, reporting site trends (pages visited, time on site, etc.) without identifying individual visitors.

Personal data shared by Google Analytics with Publiqi is generally anonymized, under item III of Article 5 of the LGPD. To that extent, the LGPD does not apply to such data under Article 12, unless re-identification is possible.

Google Analytics does not collect information such as the User’s name, email, or phone number.

More details on Google Analytics privacy are available at: http://www.google.com/intl/en_uk/analytics/privacyoverview.html

13. Data retention and deletion

13.1. General retention

The Personal Data described in this Policy will be processed for the duration of the Services provided by Publiqi.

After termination of the Services for any reason, personal data may be retained:

  • for up to 3 years, considering the limitation period under item V of §3 of Article 206 of the Brazilian Civil Code; and/or
  • for longer periods when necessary to comply with legal or regulatory obligations, exercise legal rights, or defend in proceedings.

Such retention follows item I of Article 16 of the LGPD. After these periods end, Publiqi will delete or anonymize personal data unless another legal basis applies.

13.2. Retention of Google User Data

Specifically regarding Google User Data:

  • we will retain this data only as long as necessary to:
    • maintain the connection between your Google account and Publiqi;
    • provide publishing, analytics, and reporting features that depend on the integration;
    • comply with legal, audit, or security obligations.

When you:

  • disconnect your Google account in Publiqi; or
  • revoke permissions in your Google Account settings,

Publiqi will no longer have access to your Google User Data and will make reasonable efforts to delete or anonymize stored data that identifies your Google account within commercially reasonable timeframes, subject to legal and audit requirements.

13.3. Retention of Instagram User Data

Specifically regarding Instagram User Data, the same rules in section 13.2 apply. When you disconnect your Instagram account in Publiqi or revoke permissions in Instagram/Meta settings, Publiqi will make reasonable efforts to delete or anonymize the corresponding data.

You may also request deletion of personal data (including stored Instagram and Google User Data) as described in the User rights section.

14. User (data subject) rights

Under Article 18 of the LGPD, the User may at any time request, by email to contato@publiqi.com:

  1. Confirmation of processing of their Personal Data;
  2. Access to Personal Data processed by Publiqi;
  3. Correction of incomplete, inaccurate, or outdated data;
  4. Anonymization, blocking, or deletion of unnecessary data, excessive data, or data processed unlawfully;
  5. Portability to another provider, subject to ANPD regulations;
  6. Deletion of Personal Data processed on the basis of consent, except as provided in Article 16 of the LGPD;
  7. Information about public and private entities with which Publiqi has shared data;
  8. Information about the possibility of not providing consent and the consequences of refusal;
  9. Withdrawal of consent, where applicable, including for Google User Data and Instagram User Data.

If the User requests confirmation of processing or access to Personal Data, Publiqi will respond within 5 (five) business days from the request, subject to commercial and industrial secrecy.

The User may also revoke Publiqi’s access to their Google account at any time on the Google Account permissions page: https://myaccount.google.com/permissions

For Instagram, the User may revoke access at: https://www.instagram.com/accounts/manage_access/

15. Changes to this Privacy Policy

If any change occurs regarding:

  • the specific purpose of processing Personal Data and Sensitive Personal Data;
  • the form and duration of processing;
  • identification of Publiqi as controller;
  • shared information and its purposes;
  • or how we use Google User Data or Instagram User Data,

Publiqi commits to:

  • update this Privacy Policy; and
  • inform Users prominently and specifically about the changes, as required by §6 of Article 8 of the LGPD, using notices on the website, in the app, or by email.

If changes materially affect the use of Google or Instagram User Data, we may request new consent when required by those platforms’ policies.

16. Data Protection Officer (DPO)

If you have questions about processing of your Personal Data or wish to exercise any rights under this Policy or the LGPD, you may contact Publiqi’s Data Protection Officer:

Last updated: April 2026