Privacy Policy

AutoAgency is a platform of AI agents for digital marketing, operated by UnboundSales Marketing & Sales Consulting, headquartered in Brazil. Questions: privacidade@autoagencia.io.

• Account: name, email, company, phone provided at signup.
• Usage: access logs, features used, agent teams run, reports generated.
• Integration credentials: the access authorizations you grant to Google Ads, Meta Ads and WhatsApp Business — stored encrypted (AES-256-GCM).
• Payment: processed entirely by Stripe — we don't store card data.
• Technical cookies: authenticated session and preferences. No third-party tracking cookies.

• Run the AI agents and agent teams you contract.
• Generate performance reports and insights.
• Send service communications (task-completed confirmations, plan alerts).
• Improve the platform based on aggregated, anonymous metrics.
• Meet legal and regulatory obligations.

We do not sell, rent or share your personal data with third parties for advertising.

• Active account: data kept for the entire usage period.
• After cancellation: personal data removed within 90 days, except tax obligations (5 years).
• Technical logs: 30 days.

As a data subject, you have the following rights:

• Confirmation and access: know what data we hold about you.
• Correction: correct incomplete or outdated data.
• Anonymization, blocking or deletion: of unnecessary data.
• Portability: receive your data in a structured format.
• Deletion: delete data processed under your consent.
• Consent withdrawal at any time.

To exercise your rights: privacidade@autoagencia.io. We respond within 15 business days.

We adopt technical and organizational measures to protect your data: encryption in transit (TLS 1.3) and at rest (AES-256-GCM for credentials), role-based access control (RBAC), JWT authentication and continuous monitoring.

When you connect your Google account to AutoAgencia, we access data from Google APIs strictly to operate the features you have subscribed to. This section describes that handling specifically, in addition to the general rules above.

• What we access: only the data covered by the permissions you grant on the consent screen — Google Ads campaigns and metrics, Google Analytics and Search Console reports, your Google Business Profile listing data, your YouTube channel metrics, Google Calendar events, and Google Tag Manager container configuration. We do not access Gmail, Drive, Photos, Contacts or any other data beyond those permissions.
• How we use it: exclusively to deliver the features visible to you in the platform — creating and optimizing campaigns, measuring conversions, generating performance reports and publishing the configurations you approve. We never use this data for targeted advertising, credit assessment, commercial profiling or any purpose unrelated to those features.
• Who we share it with: we do not sell, rent or transfer Google user data to data brokers, advertisers or third parties. It flows only through the subprocessors listed in section 4, and only to the extent required to run the feature you requested.
• How we protect it: access credentials are encrypted at rest (AES-256-GCM) and all traffic is encrypted in transit (TLS 1.3). Access is isolated per company, with role-based access control (RBAC) and an audit log of the agents' actions.
• Retention and deletion: data is kept for as long as the connection exists. You can disconnect your Google account at any time on the Integrations screen — this revokes our access and deletes the credentials immediately. You can also revoke it directly at myaccount.google.com/permissions. After disconnection or account cancellation, derived data is deleted within 90 days; technical logs within 30 days. For immediate deletion, write to privacidade@autoagencia.io.
• Artificial intelligence: Google user data — raw, aggregated or anonymized — is not used to develop, improve or train AI/ML models, nor is it transferred to third-party AI services that use it to train their models. The AI providers in section 4 are contracted under agreements that prohibit training on customer data.

AutoAgencia's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

DPO: Carlos de Oliveira
Email: privacidade@autoagencia.io
Company: UnboundSales Marketing & Sales Consulting
Country: Brazil