Privacy Policy

About this policy

This Privacy Policy explains how UNTD collects, uses, shares, stores, and protects personal data related to the site, the platform, and the features offered. It also describes the choices and rights available to data subjects.

Controller and contact

UNTD is the controller of personal data processed by UNTD. Questions, requests, and exercise of rights may be sent to untd.vercel.app@gmail.com.

Data we process

We may process account and authentication data, such as name, email address, account identifiers, and information needed for secure access.

We also process content and settings you provide, including projects, files, images, instructions, BrandKits, preferences, and results generated or edited on the platform.

When you use paid features, we process information about the plan, billing, and transaction status. Full payment-method data is processed directly by the payment provider.

We also collect technical and usage data, such as IP address, browser and device type, access logs, pages and features used, security events, diagnostics, and performance. Some of this data may be stored by cookies or similar technologies.

Among that technical data is a random first-party identifier assigned to the browser. When you authenticate, we may durably link it to your account identifier to distinguish new visitors from existing customers, measure acquisition, and keep repeated activity from distorting conversion rates. This identifier does not contain your name, email address, content, or credentials.

How we use data

We use data to create and administer accounts, authenticate users, provide requested services, process payments, generate and edit content, keep preferences, offer support, and communicate operational information.

We may also use data to protect accounts and the platform, prevent fraud and abuse, fix faults, measure performance, understand feature use, improve the product, and meet legal obligations.

Content submitted for generation or editing may be processed by specialized providers only as needed to fulfill the request. UNTD does not sell personal data.

Legal bases

Processing may be based on performance of a contract or procedures you requested, compliance with legal obligations, regular exercise of rights, protection against fraud, the legitimate interest of UNTD or third parties, and consent where applicable.

When we rely on legitimate interest, we consider the purpose, the need for the processing, and the rights of the data subject. When processing depends on consent, it may be withdrawn through available channels, without affecting earlier processing carried out lawfully.

Sharing

We may share data with providers that support platform operations, such as infrastructure and storage, authentication, security, support, payment processing, image and content processing, artificial intelligence, technical monitoring, communications, and campaign measurement.

Sharing is limited to what each purpose requires. These providers must process data according to their roles, applicable contracts, and the law. Some may act as independent controllers for specific activities, according to their own terms and policies.

We may also share data to comply with a legal obligation or valid order, protect rights and safety, investigate fraud or abuse, or enable a corporate reorganization, always subject to applicable safeguards.

Cookies and measurement

We use cookies and local storage needed for session, authentication, security, and preferences. These technologies are essential for certain platform functions.

The first-party identifier used for measurement stays in local storage until you or the browser delete it. The linkage already recorded by UNTD is kept under the criteria described in “Retention and deletion” and is not used for behavioral advertising.

On the public home page, we may use campaign measurement technologies. We currently use Meta Pixel to record visits and evaluate ad performance. This technology may receive data such as visited URL, date and time, IP address, browser and device information, and cookie identifiers. UNTD does not load the Pixel in authenticated project and editing areas.

You can limit cookies in your browser settings. Blocking essential technologies may prevent parts of the platform from working. To learn how Meta processes data received through its technologies, see the Meta Privacy Policy.

YouTube integration

UNTD uses YouTube API Services to import public data from the link you provide. We may access data such as channel identifier and name, description, public images, counts, video metadata, and thumbnails to confirm the source and create an editable BrandKit draft.

In the current version, the integration does not connect a Google Account, access private data, read credentials, or publish or change content on YouTube. Inferences about niche, tone, palette, and style are suggestions produced by UNTD and must be reviewed before they are saved.

Use of the integration is subject to the Google Privacy Policy, the YouTube Terms of Service, and the YouTube API Services Terms.

If an authorized Google Account connection is offered in the future, you will be able to review or revoke access in Google security settings.

Retention and deletion

We keep data for as long as needed to provide the service, fulfill the described purposes, meet legal obligations, resolve disputes, prevent abuse, and exercise rights. Periods vary with the nature of the data and the processing context.

Temporary data obtained through the YouTube integration is updated or removed within 30 days. Valid deletion requests related to that data are processed as quickly as possible and within 7 days. Deletion in UNTD does not delete or change data kept by YouTube.

When retention is no longer necessary, data is deleted or anonymized, subject to temporary security copies and cases of conservation permitted or required by law.

International transfers

Some providers may process data outside Brazil. In those cases, we adopt measures compatible with the LGPD, including contractual safeguards, provider assessment, and limiting processing to the necessary purpose.

Security

We adopt technical and organizational measures intended to protect data against unauthorized access, use, alteration, disclosure, or destruction. No system is fully immune to risk, but we review controls and practices according to the nature of the service and the data processed.

Your rights

Under the LGPD, you may request confirmation of processing, access, correction, information about sharing, anonymization, blocking or deletion where applicable, portability, review of automated decisions, opposition, and withdrawal of consent.

We may request information needed to confirm your identity and protect the account before fulfilling a request. You may also petition the Brazilian National Data Protection Authority (ANPD).

Changes to this policy

We may update this policy to reflect changes in the product, processing practices, or the law. The current version and its date will be published on this page. When a change is material, we may provide an additional notice through available channels.