Privacy Policy

1. Who we are

unanti builds websites, creator pages, and online menus and stores for small businesses. In this policy, “unanti”, “we” and “us” mean 57.754.999 Andrelise Pedroso Brogni, a company registered in Brazil under CNPJ 57.754.999/0001-81, located in Capão da Canoa/RS, Brazil.

Privacy contact: Atendimento unanti · contato@unanti.com (please write “Privacy” in the subject line).

2. What this policy covers

• unanti.com, including the contact form and plan checkout;
• painel.unanti.com: the client area (where you upload material for your site), the renewal page and the partner dashboard;
• loja.unanti.com: our online menu and store platform, for store owners;
• our upcoming social media connection app (section 9);
• emails and WhatsApp conversations with our team.

Websites we build for clients belong to those clients. When you visit a client's website, that business is responsible for your data and should have its own privacy policy.

3. Information we collect and why

Sources: directly from you, from payment processors (payment confirmations), and, only if you connect them, from Meta and TikTok. We do not buy personal information and we do not use it for automated decisions that significantly affect you.

4. Cookies, local storage, Do Not Track and GPC

unanti.com does not use analytics, advertising or cross-site tracking cookies, and we do not allow third parties to collect information about your online activity across websites through our site. What we store in your browser is only what the site needs:

To decide whether to show you the English or Spanish version, the site checks your device's time zone and language. This check happens only in your browser and is not sent to us.

Our fonts are served by Google Fonts, so Google receives your IP address and basic browser information to deliver them, under Google's privacy policy.

Do Not Track and Global Privacy Control. Because we don't track you across websites and don't sell or share personal information, there is nothing to switch off: our behavior is the same whether or not your browser sends a Do Not Track or Global Privacy Control (GPC) signal. If we ever start activities that a GPC signal can opt you out of, we will honor it automatically and update this policy first.

5. Online stores on loja.unanti.com

Each store on loja.unanti.com is run by an independent business. For shoppers' order data (name, phone, delivery address, items, notes and payment option), the store owner decides how the data is used and unanti acts as a service provider that stores and processes it only to run the store.

• Orders may be sent to the store's WhatsApp by the shopper and may be printed by the store owner.
• Shoppers get a link to track their order.
• On plans that allow it, store owners may turn on the Meta Pixel and Google Tag on their storefront. If they do, Meta and Google receive browsing and purchase events from visitors of that store. Telling visitors about it and getting consent where required is the store owner's responsibility.
• Store owners should have their own privacy notice. Shoppers should send privacy requests to the store first; if we receive one, we forward it to the store owner.

6. Who we disclose information to

We do not sell or share personal information, as “sell” and “share” are defined by the California Consumer Privacy Act (CCPA/CPRA), and we have not done so in the last 12 months. We do not use personal information for cross-context behavioral advertising.

We disclose information only to service providers that help us run unanti, and only what they need:

• Hostinger: our server, databases and files, located in São Paulo, Brazil.
• Cloudflare: DNS for our domains and forwarding of emails sent to @unanti.com.
• Google: our mailbox and outgoing email (Gmail), website fonts (Google Fonts) and storage of encrypted backups.
• Stripe: payments outside Brazil (name, email, phone, plan and amount). InfinitePay handles payments in Brazil.
• Groq: transcribes voice notes you upload in the client area (receives only the audio file).
• WhatsApp: used to alert our team when a contact request or payment comes in, with the form details.
• Meta and TikTok: only if you connect your accounts through our social media app (section 9).
• Authorities: when required by law or court order, or to protect rights and safety.

If unanti is sold or merges with another company, information may be transferred to the new owner, who must keep honoring this policy.

7. How long we keep information

8. How we protect information

• HTTPS encryption on every connection;
• passwords and login codes stored only as hashes;
• client area login with one-time codes sent by email;
• every uploaded file is type-checked and scanned with antivirus software (ClamAV) on our own server before it is accepted;
• files stored outside the public web folder, with random names;
• access limited to team members who need it;
• daily backups, encrypted when they leave our server.

No system is 100% secure. If a breach affects your information, we will notify you and the authorities as the law requires.

9. Social media connection app coming soon

What it does

The app lets unanti clients connect their Instagram, Facebook (Pages) and TikTok accounts to:

• show their latest posts and videos on their website;
• publish content they have approved to their accounts, when they ask us to.

Nothing is ever published without your approval. YouTube is not part of this app.

How connecting works

You sign in on Meta's or TikTok's official screen (OAuth) and choose what to allow. We never see or store your social media password. We only receive an access token limited to the permissions you granted.

What we access

Only what you allow on the connection screen, and only what the service needs:

• basic profile or Page info: name, username, profile picture and account ID;
• your posts: photos, videos, captions, links and dates;
• information about Facebook Pages you manage;
• insights such as reach and likes, only if you grant that permission.

We do not access private messages, follower lists, or other people's data beyond what is already public in your posts.

How we use it

Only to display your content on your website, publish what you approved and show you your post statistics (if allowed). We do not sell this data, use it for advertising, share it with other clients, or use it to train artificial intelligence models.

Storage and platform rules

Access tokens are stored encrypted on our server. Copies of posts and statistics are kept only as long as your website needs them. Our use of this data follows the Meta Platform Terms, Meta Developer Policies and TikTok Developer Terms of Service.

Disconnecting

You can disconnect at any time in your unanti platform settings, in the social network's own settings, or by email. See the steps below.

10. Data deletion instructions

To remove unanti's access and ask us to delete data that came from your social media accounts, use any of these options:

1. In the unanti platform: sign in, open settings and tap “Disconnect” next to the network. The access token is deleted right away.
2. On Facebook: Settings & privacy › Settings › Apps and websites › select the unanti app › Remove. On Instagram: Settings › Apps and websites (or Business integrations) › select unanti › Remove. On TikTok: Settings and privacy › Security and permissions › Apps and services › select unanti › Remove access. Menu names may change over time.
3. By email: write to contato@unanti.com with the subject “Data deletion request”, including your unanti account email and your social media username.

What happens next: the access token is deleted immediately when the connection is removed, and data that came from your social accounts (posts, photos, stored statistics) is deleted within 30 days. For email requests, we reply confirming the deletion with a reference code. Deletion requests sent to us by Meta when you remove the app are handled the same way.

Content you posted on your social accounts stays there; delete it directly on the network if you wish. To delete the rest of your unanti account data, use the same email and see section 11. Records the law requires us to keep, such as payment records, are kept for the legal period.

11. Your privacy rights (United States)

Depending on where you live, US state privacy laws (such as California's CCPA/CPRA, and the laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states) give you rights over your personal information. Even where a law may not apply to a business of our size, we honor these rights for all US residents:

• Know and access: the categories and specific pieces of personal information we hold, where it came from, why we use it and who we disclose it to;
• Delete personal information we collected from you;
• Correct inaccurate information;
• Portability: get a copy in a commonly used format;
• Opt out of sale, sharing, targeted advertising and profiling: we don't do any of these, so you are already opted out;
• Limit use of sensitive personal information: we don't collect sensitive personal information for inferring characteristics about you;
• Non-discrimination: we will not charge you more or give you a lower level of service for using your rights.

How to make a request: email contato@unanti.com from the email address on your account (or tell us how we can verify it's you). We will confirm receipt within 10 business days and respond within 45 days (we may extend once by another 45 days and will tell you why). An authorized agent may make a request on your behalf with your signed permission; we may ask you to confirm your identity directly.

Appeals: if we deny your request, you can appeal by replying to our answer with the subject “Appeal”. We will respond within 45 days. If you are not satisfied, you may contact your state Attorney General.

12. California notice at collection

In the last 12 months we collected the following categories of personal information, for the purposes described in section 3, and disclosed them for business purposes only to the service providers in section 6:

• Identifiers: name, email, phone/WhatsApp number, IP address, account IDs;
• Customer records: contact and billing details;
• Commercial information: plans purchased, payment history;
• Internet activity: server logs and partner-link visit counts;
• Audio and visual information: photos, files and voice notes you upload;
• Professional information: business details you provide for your website or store;
• Social media information (only if you connect accounts): profile basics, posts and insights you allow.

Retention periods are in section 7. We do not sell or share any of these categories. Shine the Light: we do not disclose personal information to third parties for their own direct marketing purposes.

CalOPPA: you can review and request changes to your information as described in section 11. Our Do Not Track statement is in section 4. We tell you about changes to this policy as described in section 15.

13. Children's privacy (COPPA)

Our services are built for businesses and professionals. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or from anyone under 18 for our paid services). If you believe a child has given us personal information, email us and we will delete it promptly.

14. International users, GDPR and Brazilian law

unanti is based in Brazil and our server is in Brazil. If you use our services from another country, your information will be transferred to and processed in Brazil, and some service providers process it in the United States. Brazil's General Data Protection Law (LGPD) also applies to everything we do.

Visitors from the European Union and the United Kingdom (GDPR)

• Controller: 57.754.999 Andrelise Pedroso Brogni, contact details in section 1.
• Legal bases (Art. 6 GDPR): performance of a contract or steps at your request (contact form, checkout, client area, social app); legal obligation (tax records); legitimate interests (security, fraud prevention, pseudonymous partner-visit counting); and consent where we ask for it, which you can withdraw at any time.
• Your rights: access, rectification, erasure, restriction, data portability, objection (including to processing based on legitimate interests) and not being subject to solely automated decisions. Email contato@unanti.com; we reply within one month.
• Transfers: where the GDPR requires it, transfers outside the EU/UK rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by our providers.
• Complaints: you can complain to the data protection authority where you live or work.

15. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the current version. If we make material changes, we will email clients before they take effect and highlight the change on this page.

16. Contact us

57.754.999 Andrelise Pedroso Brogni · CNPJ 57.754.999/0001-81 · Capão da Canoa/RS, Brazil
Privacy contact: Atendimento unanti
Email: contato@unanti.com

See also our Terms of Use.