Ad studio privacy policy

1. Controller and channel

Brainiall is the controller of personal data processed in this Ad studio. Data-subject requests: support@brainiall.com.

This policy follows Brazil’s LGPD (Lei Geral de Proteção de Dados). It covers the subscription and studio use, alongside the site-wide privacy policy.

2. Data we process

We process the subscription email, payment status, quota (used, limit, renewal date), and minimal technical logs to authenticate access and count usage.

We do not ask for national ID or a home address to run the studio. Checkout happens at the payment provider; Brainiall receives subscription confirmation, not the full card number.

3. Photos: in-memory processing

Photos exist to run the requested treatment and return the files. They are processed in memory: we do not store the original or the output after the download is produced and the response is sent.

We do not use photos to train models, for third-party ads, or to build an image bank. If a run fails, quota is not consumed and the file is not kept.

4. Legal basis (LGPD)

The main legal basis is performance of a contract (LGPD art. 7, item V): we need the email, the subscription, and the uploaded photo to deliver what you bought.

We also process data to meet legal duties (records, defense of a claim) and, in short technical logs, to protect the service against abuse.

5. Sharing and sale

Brainiall does not sell personal data. No record is sold to a list, an ad network, or a broker.

Operators are limited to what the service needs: the subscription payment provider, hosting, and the access email. They receive only what that job requires, on Brainiall’s instructions.

6. Your rights

You may request confirmation of processing, access, correction, portability, anonymization, blocking or deletion, and information on whom we share with, under LGPD.

Write to support@brainiall.com from the subscription email. We answer within the legal term. Ending the plan does not immediately erase the minimum we must keep for legal duties (for example a payment record).

7. Retention

Photos: we do not store them after the processing response. Account and payment data: for the life of the subscription and the legal period after it ends. The access token stays in your browser until you sign out or access expires.