Privacy Policy

1. Who is responsible

Divertical is operated by Castro Brothers Comércio e Produções Artísticas Ltda., Brazilian company registration (CNPJ) 18.797.676/0001-13. This policy explains how we process data on the website and in content management, publishing and customer interaction features for professional Instagram accounts.

Questions and requests: contato@divertical.com.br.

2. Data we may process

• name, email, image and identifier received when team members sign in;
• identifier, username, photo, permissions and encrypted credentials of the connected professional account;
• videos, images, captions, schedules, queues, publishing rules, media IDs, results and metrics;
• comments, direct messages and sender identifiers when the professional account enables these features;
• action logs, attempts, timestamps, connection status and diagnostic codes needed for security and operation.

Divertical does not ask for your Google or Instagram password.

3. How we use this data

We use the data to:

• authenticate users and manage teams and workspaces;
• connect authorized professional accounts and show which profile is in use;
• organize content, publish approved material and view results;
• receive and organize comments and messages and execute replies or automations configured by the account holder;
• prevent duplication, investigate failures, protect the service and comply with legal obligations.

4. Legal bases and customer control

Processing is based on the contractual relationship, authorization granted on connected platforms, compliance with legal obligations, and legitimate operational and security interests, respecting rights under Brazil's General Data Protection Law (LGPD). The account holder chooses which profiles, content and automations to activate and can pause or disconnect the integration.

5. Sharing and processors

We use providers necessary to operate the service, including Meta/Instagram, Google, Cloudflare and Vercel and, when connected by the customer, storage services such as Google Drive and Dropbox. These providers process data under their own terms and security measures. Data may be processed outside Brazil with applicable safeguards. We do not sell personal data.

6. Retention, security and deletion

We retain data while the account or workspace is active and for as long as necessary to operate the service, handle requests, prevent fraud, resolve incidents and comply with legal obligations. Integration credentials are protected and access is restricted to authorized team members.

Disconnecting stops new access but does not automatically delete content already published on Instagram or files kept by the customer in external services. To request removal, see the data deletion instructions.

7. Your rights

You may request confirmation of processing, access, correction, information about sharing, portability where applicable, objection, and deletion of data processed on the basis of consent, subject to legal retention requirements. We may request information to verify your identity and protect the account.

8. Cookies and updates

We use cookies strictly necessary for sessions, security and preferences. This policy may be updated to reflect changes to the service or legislation; the current version date appears at the top.