Privacy Policy

Zynta Flow ("we", "us", "our") is operated by RML Solutions LTDA, CNPJ 64.361.526/0001-80, headquartered in Belo Horizonte, MG, Brazil, on the website zyntaflow.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. RML Solutions LTDA is the data controller for the purposes of LGPD (Brazil) and GDPR (EU/UK).

Account Information: When you create an account, we collect your email address and password (encrypted). If you sign up with Google or Instagram, we receive your name, email, and profile picture from those services.

Brand Data: Information you provide in your Brand Guide, including brand name, logos, colors, fonts, and content preferences.

Content Data: Carousels, captions, and other content you create using our platform, including text, images, and design settings.

Instagram Data: When you connect your Instagram account, we receive your Instagram user ID, username, and profile picture. We store an access token to publish content on your behalf. We do not access your direct messages, follower lists, or private content.

Usage Data: We collect information about how you use the service, including pages visited, features used, and actions taken. This is used to improve the product.

Payment Data: Payment information is processed by Stripe. We do not store credit card numbers on our servers.

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered content (carousels, captions) based on your inputs
• Publish content to Instagram on your behalf when you explicitly request it
• Process transactions and manage your subscription
• Send service-related communications (account confirmations, security alerts)
• Analyze usage patterns to improve the product

We use the following third-party services:

• Supabase: Database and authentication
• Anthropic (Claude AI): Content generation. Your content prompts are sent to Claude API for processing. Anthropic does not use your data for training.
• Meta/Instagram API: Publishing content to Instagram. We only access permissions you explicitly grant.
• Vercel: Hosting and deployment
• Stripe: Payment processing

When you connect your Instagram account to Zynta Flow:

• We request only the permissions necessary: basic profile access and content publishing
• We store your Instagram access token securely to publish on your behalf
• We do not read your DMs, access your followers list, or collect private content
• You can disconnect your Instagram account at any time from your dashboard
• Upon disconnection, we delete your Instagram access token immediately

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage for sensitive data (passwords, tokens), and access controls. However, no method of transmission over the Internet is 100% secure.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Disconnect third-party services (Instagram) at any time
• Export your content data

To exercise these rights, contact us at contato@zyntaflow.com.

We use essential cookies for authentication and session management. We use localStorage for user preferences (language, theme). We do not use third-party tracking cookies or advertising cookies.

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Data controller: RML Solutions LTDA · CNPJ 64.361.526/0001-80
Address: Belo Horizonte, MG, Brazil
Email: contato@zyntaflow.com
Website: https://zyntaflow.com