Privacy Policy

1. What we collect

• Account data — your email address, and your name and profile picture if you sign in with Google.
• Payment data — subscription status, period dates, and a payment reference. We never see or store your card number; our payment processor handles it.
• Technical data — standard server logs, including IP address and browser type, kept briefly for security and debugging.

We do not use advertising trackers or third-party analytics cookies.

2. How we use it

• To sign you in and keep your session working.
• To determine whether your access is active.
• To email you about billing, renewals, and material changes to the service.
• To keep the service secure and diagnose faults.

3. What we never do

• We never sell or rent your personal data.
• We never share it with advertisers.
• We never email you marketing you did not ask for.

4. Data we process about third parties

This is unusual enough to spell out. Our product is built by reading public posts written by people who are not our users — on Reddit, Hacker News, and Product Hunt. When we store a post we keep its text, its public URL, the public username of its author, and public metrics such as upvote counts.

We process this under our legitimate interest in identifying product demand, and we limit ourselves to content the author chose to publish publicly. We do not attempt to identify authors beyond their public username, we do not build profiles of them, and we do not contact them.

If you wrote a post we reference and want it removed, write to gabrielccarvalhopro@gmail.com and we will delete it and any idea that depends on it.

5. Sub-processors

We share the minimum necessary data with:

• AbacatePay — payment processing and subscription billing.
• Google — optional sign-in.
• Resend — transactional and sign-in emails.
• Anthropic — analysis of public posts. We do not send your personal data to this provider.
• Our database and hosting providers — storage and serving of the application.

6. Retention and deletion

We keep account data while your account exists. Ask us to delete your account and we remove your personal data within 30 days, except records we must keep for tax or accounting purposes, which we retain for the period Brazilian law requires. Server logs are kept for a short period and then discarded.

7. Security

Data is encrypted in transit. Access to production systems is limited to the operator. No system is perfectly secure, but we do not retain card data, which removes the most sensitive category of risk entirely.

8. International data transfers

Some of our providers operate outside Brazil, so your data may be processed abroad. Where that happens we rely on the transfer mechanisms permitted by the LGPD and choose providers that offer appropriate safeguards.

9. Children

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Legal basis and your rights under the LGPD

GABRIEL CAMPOS DOS SANTOS P DE CARVALHO LTDA (CNPJ 58.378.419/0001-61) is the controller of your personal data. We process it on the basis of performing our contract with you (providing and billing the service), complying with legal obligations (tax records), and our legitimate interests (security, and identifying product demand from public posts).

Under Lei nº 13.709/2018 you may request:

• Confirmation that we process your data, and access to it.
• Correction of incomplete or inaccurate data.
• Anonymisation, blocking, or deletion of unnecessary or excessive data.
• Portability of your data to another provider.
• Deletion of data processed with your consent.
• Information about who we share your data with.
• To object to processing based on legitimate interests.

Write to gabrielccarvalhopro@gmail.com to exercise any of these; that address also reaches our data protection officer. You may also complain to the ANPD, the Brazilian data protection authority.

11. Changes to this policy

We will update this page if our practices change, and will email registered users before any material change takes effect.

12. Contact

GABRIEL CAMPOS DOS SANTOS P DE CARVALHO LTDA (CNPJ 58.378.419/0001-61) — gabrielccarvalhopro@gmail.com