Privacy Policy
Effective date: April 11, 2026
1. Data We Collect
PubliJet collects the following categories of data: (a) account data: name, email, encrypted password, preferences and onboarding data; (b) usage data: pages visited, actions taken, device type, IP address, browser, timestamps and interaction events; (c) social media OAuth tokens: encrypted credentials you authorize for publishing on Facebook, Instagram, X (Twitter), LinkedIn and TikTok — these tokens are stored encrypted and used exclusively to publish on your behalf; (d) payment data: processed directly by Stripe — PubliJet does not store card numbers, only customer identifiers and subscription status; (e) generated content: posts, images, hashtags and templates you create or generate via AI; (f) product analytics data collected via PostHog to improve the experience.
2. How We Use Your Data
We use your data to: (a) provide and maintain the Service, including authentication, scheduled publishing and AI content generation; (b) process payments and manage subscriptions via Stripe; (c) send you transactional notifications (confirmations, publication alerts, errors); (d) improve the product via aggregated analytics; (e) detect and prevent fraud or abuse; (f) comply with legal obligations. We do not use your personal data to train third-party AI models; prompts sent to AI providers are processed under confidentiality agreements.
3. Third Parties and Providers
PubliJet shares strictly necessary data with the following providers, each subject to data processing agreements: Supabase (database, authentication and storage), Stripe (payments), Resend (transactional email), Vercel (hosting), Sentry (error monitoring), PostHog (product analytics), Canva (optional design integration), N8N (internal automations), and the AI model providers used for content generation. We do not sell or rent your personal data to third parties for advertising purposes.
4. User Rights
You have the right to access, rectify, export and delete your personal data at any time. From Settings > Danger Zone you can: (a) export all your data in JSON format; (b) permanently delete your account and all associated content within 30 days; (c) disconnect social media accounts to revoke OAuth tokens. You may also exercise rights of objection, restriction of processing and portability by writing to legal@agentevirtualia.com. If you believe the processing of your data infringes applicable regulations, you may file a complaint with the data protection authority of your jurisdiction.
5. Cookies and Similar Technologies
PubliJet uses cookies and browser local storage to: keep your session logged in, remember language and theme preferences, measure Service usage (PostHog), and detect errors (Sentry). Essential cookies are necessary for the Service to function and do not require consent. By accepting these terms at registration, you consent to the use of analytics cookies, which you can disable from Settings > Privacy.
6. International Transfers and Security
Your data is processed in infrastructure located primarily in the United States and the European Union. PubliJet applies industry-standard security measures: TLS encryption in transit, encryption at rest in Supabase, periodic key rotation, role-based access control with Row Level Security (RLS) and continuous monitoring. We retain your data while your account is active and up to 30 days after deletion, unless law requires longer retention.
7. GDPR and LGPD Compliance
PubliJet complies with the General Data Protection Regulation (GDPR) of the European Union and the Lei Geral de Proteção de Dados (LGPD) of Brazil. We act as controllers of your account data and as processors of the content you generate. The legal basis for processing is contract performance (Terms of Service), consent granted at registration, and legitimate interest in improving the Service. For any GDPR or LGPD related request, contact legal@agentevirtualia.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email to the address associated with your account at least 30 days in advance. Your continued use of the Service after the effective date of the changes constitutes acceptance of the updated policy.
9. Contact
For any questions about privacy, personal data or this policy, contact us at legal@agentevirtualia.com. For technical support, write to support@agentevirtualia.com.