Privacy Policy

Zynta Flow ("we", "us", "our") is operated by RML Solutions LTDA, CNPJ 64.361.526/0001-80, headquartered in Belo Horizonte, MG, Brazil, on the website zyntaflow.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. RML Solutions LTDA is the data controller for the purposes of LGPD (Brazil) and GDPR (EU/UK).

Account Information: When you create an account, we collect your email address and password (encrypted). If you sign up with Google or Instagram, we receive your name, email, and profile picture from those services.

Brand Data: Information you provide in your Brand Guide, including brand name, logos, colors, fonts, and content preferences.

Content Data: Carousels, captions, and other content you create using our platform, including text, images, and design settings.

Instagram Data: When you connect your Instagram account, we receive your Instagram user ID, username, and profile picture. We store an access token to publish content on your behalf. We do not access your direct messages, follower lists, or private content.

Usage Data: We collect information about how you use the service, including pages visited, features used, and actions taken. This is used to improve the product.

Payment Data: Payment information is processed by Paddle, our payment provider and Merchant of Record. We do not store credit card numbers on our servers.

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered content (carousels, captions) based on your inputs
• Publish content to Instagram on your behalf when you explicitly request it
• Process transactions and manage your subscription
• Send service-related communications (account confirmations, security alerts)
• Analyze usage patterns to improve the product

We use the following third-party services (sub-processors):

• Supabase: Database, authentication, and file storage
• Anthropic (Claude AI): Content generation. Your content prompts are sent to Claude API for processing. Anthropic does not use your data for training.
• Meta/Instagram API: Publishing content to Instagram. We only access permissions you explicitly grant.
• Vercel: Hosting and deployment
• Paddle: Payment processing and Merchant of Record
• Upstash: Rate limiting and abuse prevention
• Unsplash: Stock imagery used in carousel designs
• Resend: Transactional and service email delivery
• Google Analytics (Google LLC): Usage analytics — loaded only after you accept analytics cookies
• Microsoft Clarity (Microsoft Corporation): Heatmaps and session replay to improve usability — loaded only after you accept analytics cookies

International data transfers: Several of these providers process and store data on servers located outside Brazil, primarily in the United States and the European Union. By using Zynta Flow, you acknowledge and consent to the international transfer of your personal data, carried out in accordance with Art. 33 of the LGPD. We only engage providers that offer adequate technical and contractual safeguards for the protection of personal data.

When you connect your Instagram account to Zynta Flow:

• We request only the permissions necessary: basic profile access and content publishing
• We store your Instagram access token securely to publish on your behalf
• We do not read your DMs, access your followers list, or collect private content
• You can disconnect your Instagram account at any time from your dashboard
• Upon disconnection, we delete your Instagram access token immediately

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage for sensitive data (passwords, tokens), and access controls. However, no method of transmission over the Internet is 100% secure.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Disconnect third-party services (Instagram) at any time
• Export your content data

To exercise these rights, contact us at contato@zyntaflow.com.

We use essential cookies for authentication and session management, and localStorage for user preferences (language, theme). With your consent, we also use Google Analytics (Google LLC) and Microsoft Clarity (Microsoft Corporation) to understand how the platform is used and improve it. Microsoft Clarity provides heatmaps and anonymized session replay, with text and form inputs masked by default. These analytics cookies only load after you accept them in our cookie banner, and never before. You can decline analytics ("Essential only") at any time, and we do not use advertising cookies. Google and Microsoft may process this data outside Brazil under the international-transfer safeguards described in this policy.

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Data controller: RML Solutions LTDA · CNPJ 64.361.526/0001-80
Data Protection Officer (Encarregado, LGPD Art. 41): reachable at contato@zyntaflow.com
Address: Belo Horizonte, MG, Brazil
Email: contato@zyntaflow.com
Website: https://zyntaflow.com