← aigence.digital

Privacy Policy — AIGENCE



In force since 18 August 2026.

This is a courtesy translation. The Portuguese version is the binding one and prevails in case of divergence: Política de Privacidade.

1. Data controller


WA TECH SOLUTIONS, LDA, legal entity no. 518754375, registered at Rua General Firmino Miguel, n.º 8, 5.º A, 1600-300 Lisbon, parish of São Domingos de Benfica, Portugal. Privacy contact: aigence.digital@iluminare.eu.

2. Data we process


  • Account: name, email, phone/WhatsApp, company, billing details.

  • Communication: messages exchanged with our assistant on WhatsApp and support tickets.

  • Social accounts: authorization tokens (OAuth) and metadata of the connected accounts — never your passwords.

  • Usage and payments: credit statement, history of requests and deliveries; payment data is handled by Stripe (we do not store card numbers).

  • Technical: access logs, IP, essential cookies.


    • 3. Purposes and legal bases


    PurposeLegal basis
    Providing the service (creating/publishing content, support)Performance of a contract
    Invoicing and tax obligationsLegal obligation
    Account approval and fraud preventionLegitimate interest
    Service communications (WhatsApp/email)Performance of a contract
    Our own marketingConsent (revocable)


    4. Artificial intelligence


    We use AI models from third-party providers (e.g. Anthropic, Google, ByteDance through partner platforms) to generate text, images and video. Your instructions and materials may be processed by those providers as sub-processors, under contract, solely to deliver the service. They are not used to train models in a way that identifies you.

    4-A. Instagram data (official Meta integration)



    When you connect your Instagram account, we do it through Meta's official authorization (OAuth). We never ask for or store your password.

    What we receive and what for:

  • instagram_business_basic — the account identifier, username, follower and media counts, and the list of your posts with likes and comments. We use this to show you, in the strategy review report, how your posts performed and which one got the most interaction.

  • instagram_business_content_publish — publishing to your account. We use this to put live, at the agreed time, only the pieces you approved, one by one.


    • Limits we commit to:

  • Nothing is published without your explicit approval, piece by piece.

  • We do not read your direct messages or private comments.

  • We do not use Instagram data for advertising, profiling or AI model training.

  • We do not share Instagram data with any third party.

  • The token expires in 60 days and is renewed automatically while the service is active; when you disconnect the account, it is deleted.


    • How to disconnect and delete: at any time, in the portal (My accounts → Disconnect) or in Instagram itself (Settings → Apps and websites → AIGENCE → Remove). See the Data Deletion page.

    5. Sharing


    Sub-processors: web hosting, Stripe (payments), AI providers (image, video and text generation), Meta/Instagram (publishing and metrics for the accounts you authorized) and WhatsApp/Meta (support messages). Authorities where required by law. We never sell data and we never share your Instagram data with third parties.

    6. International transfers


    Some providers operate outside the EEA (e.g. the USA). We rely on EU standard contractual clauses and equivalent mechanisms.

    7. Retention


    Account data: for as long as the account exists + 30 days. Invoicing: statutory periods (PT: 10 years). Messages and content: up to 24 months or until a deletion request. Social account tokens: until revoked.

    8. Your rights (GDPR art. 15-22 / LGPD art. 18)


    Access, rectification, erasure, portability, restriction, objection and withdrawal of consent — through the portal or by email. Response time: 30 days. Complaints: CNPD (Portugal) or ANPD (Brazil).

    9. Security


    Encryption in transit (TLS), role-restricted access, hashed passwords, secrets kept out of the code, audit logs. We will notify data breaches as required by law (72h to the authority where applicable).

    10. Cookies


    We use only essential cookies (session/login) and, with consent, analytics. No third-party advertising cookies.

    11. Changes


    We will publish changes on this page with an effective date; material changes will be announced by email/WhatsApp.