Privacy Policy

Updated on September 22, 2026 · Versão em português

Aplica IA Social is a connector that links the Claude AI assistant to your Instagram professional accounts, Facebook Pages and YouTube channels. It lets you create, publish, schedule and measure posts by talking to Claude. Aplica IA Social is a service of DIEGO JAQUES TINOCO APOIO ADMINISTRATIVO - ME, CNPJ 19.973.818/0001-19, Campinas/SP.

This policy states exactly which data we access, why, where it is kept and how to delete it.

1. Meta data (Facebook and Instagram)

We use Meta's official APIs (Graph API, Facebook Login for Business and Instagram Graph API). We only access what you authorize on the Facebook login screen, and only for the Pages and accounts you then select on our selection screen. Anything left unselected is not stored.

Permission	What we access	Why
`public_profile`	Your Facebook user ID and name.	To know who authorized the app, so we can honor app removal and deletion requests.
`pages_show_list`	The list of Pages you manage (ID and name).	To show your Pages so you can choose which ones to connect.
`business_management`	Pages and Instagram accounts in your business portfolio.	To find Pages you access through a business portfolio, which do not appear in your personal list.
`pages_read_engagement`	Page name, followers, posts, and the Page access token.	To read Page data and obtain the access needed to publish on it.
`pages_manage_posts`	Creates and schedules posts on the Page.	To publish or schedule the post you asked for, only when you ask.
`read_insights`	Aggregated Page metrics: views, engagements, visits and new followers.	To show you how your Page is performing.
`instagram_basic`	ID, username and follower count of the Instagram professional account.	To identify the account you connected.
`instagram_content_publish`	Publishes photos, videos, Reels and carousels; reads the daily publishing quota.	To publish the post you asked for, only when you ask.
`instagram_manage_comments`	Posts a comment on your own media.	To post the first comment you wrote (for example, hashtags).
`instagram_manage_insights`	Aggregated account metrics: reach, views, profile visits, interactions, likes, comments, shares and saves.	To show you how your account is performing.

What we never access: direct messages, your follower list, data about individual followers, friends, personal profile, ads and payment data.

2. Google data (YouTube)

If you connect a channel, we use the YouTube Data API with these scopes:

Permission	What we access	Why
`youtube.upload`	Uploads videos to your channel.	To publish the video you asked for, only when you ask.
`youtube.readonly`	Channel name, subscribers, views and statistics of videos published through us.	To identify the channel and show you how it is performing.
`youtube.force-ssl`	Edits the title and description of your video.	To fix a title or description when you ask. It never deletes videos.

Aplica IA Social's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and the data is subject to the Google Privacy Policy.

3. What we store

Your account: email, name and plan.
Connected accounts: ID and name of each Page, Instagram account or channel; your Meta user ID; the permissions granted; and the access token, encrypted.
Posts made through us: text, title, the media URL you provided, scheduled time, status and the ID of the created post.
Files uploaded in the dashboard: Meta and YouTube fetch media from a public address, so the image or video you attach stays at a non-indexed address with a random name and is deleted as soon as the post is confirmed — usually within minutes. For a scheduled post the file stays until its publishing time, when the network fetches it, and is deleted right after. Through Claude, we only store the address you provided.
Technical logs: time, account and result of each call, used to investigate failures. They are discarded automatically as new logs come in.

Metrics are not stored. They are fetched when you ask and delivered in the conversation.

4. How we use it

Only to do what you ask: publish, schedule, fix and measure your posts. We do not sell data, do not use it for advertising, do not build profiles of people, and do not use your content or any Meta or Google data to train AI models.

5. Who we share it with

Meta and Google: they receive the posts you ask for, to carry them out.
Anthropic (Claude): the result of each action (for example, metrics or a post confirmation) appears in your own conversation with Claude, which you started. Anthropic handles that conversation under its privacy policy.
Hosting: Hetzner Online GmbH, on servers that may be located outside Brazil.

No one else. If the law requires us to hand data to an authority, we provide only what is required.

6. Security

All traffic uses HTTPS. Tokens are encrypted in the database, and every call to Meta is signed with appsecret_proof, so a leaked token is useless outside our server. Server access is restricted.

7. How long we keep it

Connected accounts: until you remove them or remove the app.
App removed on Facebook: the token is deleted immediately.
Deletion requested on Facebook: that account's connections and posts are deleted immediately.
Account deleted in the dashboard: everything is deleted immediately.
Account closure requested by email: everything is deleted within 30 days.

8. How to revoke access and delete your data

In the dashboard (/painel): under Accounts, Disconnect deletes that account's access immediately, and Delete everything deletes your account and all data immediately.
Facebook and Instagram: on Facebook, go to Settings & privacy > Settings > Business integrations and remove Aplica IA Social. Meta notifies us and we act automatically. Details on the data deletion page.
YouTube: at myaccount.google.com/permissions, remove Aplica IA Social's access.
Claude: turning off the connector in Claude cuts Claude's access but does not delete what we store. For that, use one of the options above or write to contato@aplicaiaapp.com.

9. Your rights (LGPD)

You may request confirmation of processing, access, correction, portability, anonymization or deletion of your data, and withdraw consent, at any time, at contato@aplicaiaapp.com. We reply within 15 days. The same address reaches our data protection officer.

10. Minors

The service is meant for businesses and professionals and is not intended for anyone under 18.

11. Changes to this policy

If we change what we access or how we use it, this page is updated first, with the new date at the top. Any change that widens access requires your new authorization.