01 Who we are
B.I. Marketing Suite is a marketing intelligence application operated by BICOM Marketing (CNPJ 32.680.665/0001-80), located at R. Municipalidade, 985, Ed. Mirai Office, salas 1304/1305, Belém - Pará, Brazil. Under Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD"), BICOM Marketing acts as the controller of the personal data processed through the application.
When we process data on behalf of a customer — for example, when the app operates ad accounts or social profiles that belong to that customer — we act as a processor and follow the customer's instructions; the customer is the controller of that data.
02 Information we collect
2.1 Information you provide
- Name, email address, and phone number entered when you register or contact us.
- Company and project details you share while setting up an account.
- Content you upload for publishing or analysis (text, images, spreadsheets).
- Billing information, when you subscribe to a paid plan.
2.2 Information collected automatically
- IP address, browser type, device type, and operating system.
- Pages viewed, timestamps, and actions taken in the application (activity logs).
- Cookie identifiers and similar technologies (see section 12).
2.3 Connected account data
When you connect a third-party account (Facebook, Instagram, or Google), we receive the data described in sections 3 and 4. You authorize this access during sign-in and can revoke it at any time.
03 Data from Facebook and Instagram (Meta)
B.I. Marketing Suite uses Facebook Login, the Instagram Graph API, and the Marketing API from Meta Platforms. When you connect your account, we may access:
Facebook Login
- Your name, profile picture, email address, and Facebook user ID.
- The list of Facebook Pages you manage.
Instagram Graph API
- Details of the linked Instagram professional account (username, ID, picture, bio, profile metrics).
- Published media, captions, comments, and mentions.
- Direct messages, when you use DM automation or inbox features.
- Account and media insights.
Marketing API (Meta Ads)
- The structure of the ad accounts you authorize: campaigns, ad sets, ads, and creatives.
- Performance metrics (impressions, clicks, spend, conversions).
- Audiences and targeting settings, for reading and — where you authorize it — managing campaigns.
Our use of this data follows the Meta Platform Terms. We do not use Meta data for third-party advertising, we do not sell it, and we do not transfer it to data brokers.
04 Data from Google
When you connect your Google account, we request only the scopes needed for the feature you use:
- Sign in with Google: name, email address, profile picture, and account ID.
- Google Drive: access to the files you select or that the app creates, for reading and writing your work documents.
- Google Analytics (GA4): read-only access to reports and metrics for the properties you authorize.
- Google Ads: reading and — where you authorize it — managing the ad accounts you connect.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.
05 How we use information
- Authenticate your access and maintain your session.
- Deliver the features you request: publishing content, replying to comments and DMs, generating reports, analyzing campaigns.
- Provide customer support and respond to your requests.
- Send operational notices, security alerts, and service updates.
- Process payments and manage subscriptions.
- Comply with legal, accounting, and regulatory obligations.
- Detect and prevent fraud, abuse, and security incidents.
We do not make automated decisions that produce legal or similarly significant effects about you.
06 Legal bases for processing
We process personal data on one or more of the following legal bases:
- Performance of a contract — to provide the services and operate the application you signed up for.
- Consent — to connect third-party accounts and to set non-essential cookies.
- Legitimate interests — for security, fraud prevention, and service improvement, balanced against your rights.
- Compliance with a legal or regulatory obligation — where required by law.
08 Storage and security
We apply technical and organizational measures to protect your data: encryption in transit (HTTPS), access controls, access tokens stored encrypted at rest, and logging of sensitive operations. No system is completely secure; if a breach occurs that poses a significant risk, we will notify you and Brazil's National Data Protection Authority (ANPD) as required by the LGPD, and other regulators where applicable.
09 Data retention
- Account data and access tokens: while your account is active or the integration is connected.
- Activity logs: up to 12 months, unless a longer period is needed for a security investigation.
- Contractual and tax records: for the period required by applicable law.
After these periods, data is deleted or anonymized.
10 Data deletion
You can request deletion of your data at any time through one of these routes:
- Disconnect the integration: remove the app under Settings › Business Integrations on Facebook, or under Google Account › Third-party access. This revokes our access immediately.
- Direct request: email comercial@bicommarketing.com with the subject "Data deletion", stating the account or email address used. We complete deletion within 30 days and confirm by email.
// Meta data deletion callback
This section is the Data Deletion Instructions URL required in the Meta app settings.
Data deletion requests sent by Meta are processed automatically; a confirmation code
and status URL are returned as specified by the platform.
11 Your rights
Under the LGPD, you may exercise the following rights at no cost:
- Confirmation and access
- Know whether we process your data and obtain a copy of it.
- Correction
- Update incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion
- Of data that is unnecessary, excessive, or processed unlawfully.
- Portability
- Receive your data in a structured format or have it transferred to another provider.
- Withdrawal of consent
- Withdraw authorizations at any time, without affecting prior processing.
- Objection
- Object to processing based on legitimate interests.
- Complaint
- Lodge a complaint with the National Data Protection Authority (ANPD).
If you are in the European Economic Area, the United Kingdom, or a US state with a comprehensive privacy law, you may have equivalent rights under the GDPR, UK GDPR, or applicable state law. To exercise any right, email comercial@bicommarketing.com.
13 International data transfers
Some providers (hosting, Meta, Google) process data outside Brazil. In those cases, we ensure the transfer meets LGPD requirements through appropriate contractual clauses or an adequacy decision for the destination country.
14 Changes to this policy
We may update this policy to reflect changes in the service or the law. The "last updated" date at the top indicates the current version. We will notify you of material changes by email or an in-app notice.
15 Contact
BICOM Marketing — B.I. Marketing Suite
Email: comercial@bicommarketing.com
Phone: +55 91 98419-0040
Website: bicommarketing.com
Data Protection Officer: Saul Guimarães — comercial@bicommarketing.com
Registered address: R. Municipalidade, 985, Ed. Mirai Office, salas 1304/1305,
Belém - Pará, Brazil