1. Introduction

This policy explains how MY VOICE handles personal data, in compliance with Brazil's General Data Protection Law (LGPD, Law 13,709/2018) and the General Data Protection Regulation (GDPR, EU 2016/679).

2. Data we collect

  • Sign-up: name, email, and password (stored as a hash by the authentication provider).
  • Briefing and context: industry, target audience, goals, content restrictions, and, in the company journey, the corporate briefing.
  • AI conversations: messages and supporting materials you send (images, PDFs, documents).
  • Content and performance: posts, schedules, reported metrics, and data from your connected LinkedIn or Meta account.
  • Legal records: date, document version, language, and IP address at the time of acceptance.

3. What we use it for

To operate the service (contract performance), generate your diagnosis, brand platform, and content calendar, publish to LinkedIn/Facebook/Instagram when you request it, and improve the product using usage data (only with your consent).

4. Artificial intelligence

Your conversations and materials are sent to language model providers to generate responses. This processing occurs only to fulfill your request within the product and depends on your consent, which you can revoke in Settings.

5. LinkedIn and Meta (Facebook / Instagram)

When you connect social networks, we store encrypted access tokens (AES-256-GCM) and basic account data (name, photo, Page, Instagram handle). We only publish content you approve or schedule. Personal profile metrics on LinkedIn are not available via API — performance tracking is entered by you. You can disconnect at any time, which deletes the tokens. Use of each network is also subject to LinkedIn's and Meta's own terms.

6. Sharing

We share data only with necessary processors: infrastructure and database providers, AI model providers, and LinkedIn/Meta (when you publish). In the company journey, your company's administrator can see your progress across phases and aggregated performance.

7. Retention

We keep your data for as long as your account exists. When you delete your account, we erase your profile, conversations, posts, metrics, and connections within 30 days. As required by Brazil's Internet Civil Framework (Law 12,965/2014, art. 15), access records (IP address, date and time) are kept confidentially for 6 months, even after deletion, and then erased automatically.

8. Your rights

You can confirm processing, access, correct, port, revoke consent, and delete your data. The export my data and delete my account options are available in Settings and are executed immediately.

9. International transfer

Our processors may handle data outside Brazil and the European Union, with adequate contractual safeguards.

10. Contact

To exercise your rights or contact our Data Protection Officer (DPO), write to privacidade@myvoice.app.br.