Privacy policy.

1. Who is responsible and scope

MQPostFlow is provided by Marcus Quintão, an individual and analyst/programmer based in Cuiabá, Mato Grosso, Brazil. Marcus is responsible for decisions about the service’s processing of personal data. The privacy contact is contact@mqpostflow.com, with “Privacy” in the subject. This policy covers the MQPostFlow website, app and API.

2. Information processed

On the public website, the hosting service may log IP addresses, dates, requested addresses and technical browser details to deliver pages and provide security. The contact form only prepares a message in your email app; it does not store or send its fields to the server.

App registration includes full and display name, email, phone with country code, country of residence, date of birth, timezone, language and address. For Brazil, the form also collects CPF and postal code. Profiles are used to identify and administer accounts. Passwords are stored as hashes; connection tokens and profile data are encrypted in application storage.

The service also processes linked accounts and Pages, identifiers, permissions and tokens; supplied images and text, briefs, destinations and schedules; delivery results and errors; sessions, security events, invitations, plans, courtesy grants and existing commercial records. It does not request social network passwords or card details at this stage.

3. Purposes and grounds for processing

Data is used to create and administer accounts, verify access, operate drafts and schedules you confirm, perform authorized connections, report failures and provide support. These uses relate to providing the service and carrying out your requests. Security and abuse prevention serve the legitimate interest of protecting the service and users, with respect for your rights. Legal obligations and the exercise or defense of rights may require specific records. Where consent is required, it will be requested separately and may be withdrawn.

We do not sell personal data or use your content for targeted advertising. The app does not make automated decisions about credit, employment or similarly significant matters.

4. Who receives data

KingHost provides hosting, database and email transport. Meta/Instagram, Facebook and TikTok receive the identifiers, permissions and content required when you connect an account or confirm a delivery through an available integration. Their own policies govern the data they receive. X is disabled at this stage.

Brazilian address lookups send the postal code to ViaCEP. If you choose the local creation connector, briefs and generation files are processed on your computer and by the OpenAI/ChatGPT provider associated with your account, under your settings and its terms. This flow is optional and does not occur when browsing the website.

Networks and creation providers may process data outside Brazil. Transfers must follow applicable mechanisms and safeguards. Information on specific providers and recipients is available through the privacy contact. No payment processor is active in this version.

5. Retention and deletion

Registration, profiles, library items and drafts remain while an account is active and necessary for the selected use, until removal or a deletion request is fulfilled. Publishing history, invitations, commercial and support records are kept as needed to manage the relationship and address requests or applicable obligations; any retention after closure is limited to its justified purpose, with information provided to the data subject.

Removing a connection in the app deletes the tokens and link identifiers stored for that connection and blocks future deliveries that depend on it. This does not delete content history or posts already on the network. Hosting technical logs follow the provider’s operational periods. Backups, when present, have restricted access; they are not used to reactivate deleted accounts and deletions must be reapplied after a restore.

6. Cookies and preferences

The institutional website sets no cookies and uses no advertising pixels, third-party analytics or remote fonts. Language choice is reflected in the page address. The app uses the protected __Host-mq cookie for sessions of up to seven days and mq_locale for language; a theme preference may be stored locally in your browser. Email sign-in codes expire in ten minutes. Hosting and security mechanisms may also use their own technical resources.

7. Security and your responsibilities

We use HTTPS, account-based access control, password hashing, encryption of private data and additional email verification. Media URLs supplied to providers are signed and temporary. No measure eliminates every risk. Protect your email account, end sessions on shared devices and do not share codes or connector keys.

8. Your rights and requests

You may request confirmation and access, correction, information about sharing, portability where applicable, review of automated decisions where present, withdrawal of consent, objection and anonymization, blocking or deletion where applicable. Requests are free of charge. Email contact@mqpostflow.com from your registered email address and explain your request. We will proportionately verify your identity and provide progress and the applicable timeframe. If legal obligations prevent full deletion, we will explain why and what is retained. You may also contact Brazil’s ANPD and applicable consumer protection authorities.

9. Age, changes and contact

App registration is intended for people aged 16 and over. For those under 18, applicable legal requirements for a parent or guardian’s assistance or authorization apply. We do not request children’s data. Material policy changes will be communicated through service channels; the public version will show its update date. Contact: contact@mqpostflow.com.