SocialLens

Privacy Policy

Last updated: 2026-11-07

This Policy explains which data SocialLens collects about you, the customer, how we use it, and what our role is regarding the public third-party data the API processes on your request.

1. Who we are

SocialLens is operated by [DEFINIR: company legal name], Brazilian tax ID (CNPJ) [DEFINIR: CNPJ], located at [DEFINIR: address]. Under the LGPD and GDPR we are the controller of your account data (section 2) and the processor of the public data processed on your request (section 3).

2. Data we collect about you

Account: name, e-mail and password (stored as a hash). If you sign in with Google, we receive your name, e-mail and Google account identifier; we never receive your Google password.
API usage: API keys (we store only a hash and a prefix), last-used date of each key, a record of every charged or refunded request (endpoint, date, credits), credit balance and statement.
Payment: amount, pack, date and the Pix transaction identifier. Payments are processed by Mercado Pago; we never see or store your banking details.
Technical: IP address at sign-up and on requests, for security, fraud prevention and rate limiting. Technical logs may include your request parameters (for example, the username queried).
Contact: whatever you send us through the contact page or by e-mail.

3. Public third-party data the API processes

You are the controller of that data

When you make a request, the API reads public data from the profile you specified and returns it to you. We process that data on your request and on your behalf. You decide which profiles to query and what to do with the result, so you are the controller of that data and are responsible for the legal basis, the purpose and data subjects' rights. We act as a processor.

We only read what the platform publicly shows to a logged-out visitor.
We do not keep a permanent database of third-party profiles. We may cache responses briefly, only for performance and to avoid charging the same read twice; the exact period is [DEFINIR: cache period, e.g. 24 hours].
We do not sell, enrich or cross-reference that data with other sources.
If a data subject asks us directly to delete their information, we will erase whatever we hold in cache and, where possible, forward the request to the customer who made the query.

4. What we use your data for

Providing the service: authenticating your calls, charging and refunding credits, showing your statement.
Processing payments and issuing tax documents where required.
Security: detecting abuse, fraud and misuse of the free tier.
Communication: account notices, changes to the Terms, replies to your messages. No marketing without your consent.
Legal obligations and the defence of legal claims.

Legal bases: performance of a contract, compliance with legal obligations, legitimate interest (security and fraud prevention) and consent where applicable.

5. Who we share with

Mercado Pago: Pix payment processing.
Google: only if you choose to sign in with Google.
Infrastructure providers: hosting and transactional e-mail, located in [DEFINIR: hosting country/provider].
Authorities: where required by law or court order.

We do not sell your data.

6. How long we keep it

Account data: for as long as the account exists. Credit statements and payment records: for the period required by tax law and for the defence of legal claims, even after the account is closed. Technical logs: [DEFINIR: log retention, e.g. 90 days]. Response cache: as in section 3.

7. Your rights (LGPD and GDPR)

At any time you may: confirm whether we process your data, access, correct, anonymize or delete unnecessary data, request portability, learn who we share with, withdraw consent and object to processing based on legitimate interest. If you are in the EU you have the equivalent GDPR rights, including the right to lodge a complaint with your national data protection authority.

To exercise any right, write to [DEFINIR: DPO e-mail]. We reply within 15 days. You can also delete your account yourself from your settings; this removes your account data and revokes all keys.

8. Security

Passwords and API keys are stored only as hashes. Traffic uses HTTPS. System access is restricted. No system is infallible: if an incident affects your data, we will notify you and the relevant authority as required by law.

9. Cookies

We use only the cookies needed to keep your session and protect forms (CSRF). No tracking or advertising cookies.

10. Changes

We may update this Policy. Material changes will be announced by e-mail or on the platform. The date at the top shows the current version.

← Back Terms Privacy Refunds Contact

SocialLens · [DEFINIR: company legal name and CNPJ] · [DEFINIR: contact e-mail]