Privacy Policy

1. Who we are

Optmos ("we", "us") is a product developed and operated by SOCIAX MARKETING & SERVICOS LTDA ("Sociax", sociax.com.br), CNPJ 55.012.194/0001-37, Av. Brigadeiro Faria Lima, 1811, conj. 918, Jardim Paulistano, São Paulo, SP, 01452-001, Brazil. It runs at optmos.ai and optimizes Meta Ads accounts during the day. This policy explains what we collect, why, and your rights.

2. Data we collect

• Account data: name, email, profile picture.
• Workspace data: workspace name, objectives, targets, and configuration you provide.
• Ad platform data: via OAuth, we read campaign, ad set, ad, insights, and conversion data from the Meta Ads accounts you connect. We may write budget changes when you turn the Optmos engine on, within the limits you define; every change is logged with the previous value, the new value and the reason.
• Usage data: logs, device, IP, and basic analytics needed to operate the service.
• Billing data: handled by Stripe; we never store full card numbers.

3. How we use data

• To provide the service: dashboards, recommendations, automated budget decisions (the Optmos engine), reports, and notifications.
• To secure accounts and prevent abuse.
• To communicate operational and billing information.
• To improve the product (aggregated, non-identifying analytics).

We do not sell your data, and we do not use ad-platform data for advertising targeting.

4. Meta Ads data

When you connect a Meta Ads account, we store OAuth tokens in our database at Supabase, which encrypts data at rest, and use them only to read the accounts you explicitly connect and to write their daily budget. The authorization includes reading and managing ads (ads_read and ads_management) from the connection on; writing only begins after subscription, rule calibration and the write test, within the limits you define. You can revoke access at any time from your account settings or from Meta's security pages.

5. Sub-processors

We rely on a small set of vendors to operate the service:

• Supabase — database, authentication, and edge functions.
• Stripe — billing and subscriptions.
• Lovable — hosting, transactional email delivery, and the AI gateway used by the Assistant and the daily summaries (those requests are processed by Google Gemini models through that gateway).
• Twilio — WhatsApp notifications, only if you opt in (through Lovable's connector).
• Meta — ad-platform API you connect.

6. Retention

We retain account and workspace data while your account is active. You can request deletion at any time; we remove your data within 30 days, except where retention is required by law (e.g. tax records).

7. Your rights

You can access, correct, export, or delete your data. Email us at contato@sociax.com.br and we will respond within 30 days. Step-by-step deletion instructions, including how to remove data obtained from Meta, are on our data deletion page.

8. Changes

We will notify users of material changes by email or in-app notice.

9. Contact

Sociax · contato@sociax.com.br