1. Controller and contact
LUME is operated by 69.327.004 MANOELA BICA GOMES, a company registered in Brazil under CNPJ (national corporate taxpayer registry) number 69.327.004/0001-85, incorporated on . The person responsible for data processing and for privacy matters is Manoela Bica Gomes. For questions, to exercise your rights or to request deletion, contact us at contato@sistemalume.com.br.
Our public website is www.sistemalume.com.br and the platform, restricted to registered users, is at app.sistemalume.com.br.
When a user or an agency enters third-party data into the platform, they must have authorization or another adequate legal basis for that processing. In those cases, the roles of LUME and of the customer depend on the operation performed and on the responsibilities set out in the applicable legislation.
2. Data covered by this policy
- Data provided by the user: registration and contact information, such as name and email, organization information and content entered into LUME, such as planning, scripts, files and materials for publication.
- Data from the connected Instagram account: account identifier, username and profile information made available by the API, according to the permissions granted.
- Content and metrics: information about posts, media, captions and performance statistics of the account or of its content, as made available by Meta and authorized by the user.
- Authorization data: access tokens and technical information required to maintain the integration and run the authorized features. The connection is authorized within Meta's environment; never send your Instagram password to LUME.
- Technical and support data: information necessary for the operation and security of the service, such as access and error logs, and information sent in support or privacy requests.
The available data varies according to the account, the permissions granted and Meta's rules. The integration described in this policy is intended to access profile information and metrics and to publish content; it does not cover features for reading or managing direct messages and comments.
3. Purposes and legal bases
Data is processed to provide the account and the marketing operation in LUME, connect Instagram, display profile information and results, carry out the publications or schedules requested by the user, provide support and protect the service against unauthorized access and abuse.
Depending on the activity, processing is based on the performance of a contract or of procedures requested by the data subject, on compliance with legal obligations, on consent where required, or on legitimate interest, observing the rights of the data subject and the requirements of the Brazilian General Data Protection Law (LGPD). The authorization of the integration on Meta defines the scope of access to the respective APIs.
The use of data obtained from Meta is limited to the authorized features and to the applicable platform policies. This data is not sold, is not used to build profiles for third-party advertising and is not used for purposes incompatible with the requested service.
4. Sharing and third-party services
The integration involves sending and receiving data between LUME and Meta. When a publication is requested, the content and the information required to publish it are sent to Instagram, where Meta's terms, visibility settings and policies also apply.
Processing may involve infrastructure, hosting, storage and support providers, to the extent necessary to provide the service, as well as people authorized within the user's workspace, according to their access. Data may also be provided to comply with a legal obligation or an order from a competent authority.
The use of international providers and platforms may involve processing outside Brazil. Where there is an international transfer of personal data, the safeguards and mechanisms required by the applicable legislation are observed.
Data requests submitted by public authorities follow the procedure described on the Government Requests page, which includes a legitimacy review, the possibility of challenging unlawful requests, data minimization and record-keeping of the requests.
5. Retention and security
Data is kept only for the period necessary for the stated purposes, for the provision of the service and for compliance with legal obligations. The period may vary according to the type of data, the relationship with the user and the need to exercise rights. Once processing is no longer necessary, data is deleted or anonymized, except where the law requires retention.
Processing requires technical and administrative measures appropriate to the protection of data, including the authorizations for access to the integration. No service is completely free of risk. Do not share passwords or access tokens by email, and report any suspicion of misuse to the contact in this policy.
6. How to disconnect Instagram
In LUME, go to Settings → Integrations → Disconnect and remove the Instagram integration. You can also manage or revoke LUME's permissions in the apps and integrations settings of your Meta account, according to the options it provides.
Disconnecting removes the integration link in LUME. It is not the same as a request to delete all data already stored. To request that deletion, follow the instructions below. Removing the integration does not delete posts that have already been published to Instagram.
7. How to request data deletion
To request the deletion of personal data, or of the data obtained through the Instagram integration and stored by LUME, send an email to contato@sistemalume.com.br with the subject “Data deletion — LUME”.
- Provide the email registered in LUME and the username of the connected Instagram account.
- State whether you want to delete the integration data or all data of your LUME account.
- Do not send passwords, access tokens or documents unless they are requested with justification.
Confirmation of your identity or of your authorization over the account may be required before the request is processed. The request is reviewed and answered at the email provided, within the applicable legal deadlines. You can follow up through the same channel.
If any data must be kept due to a legal obligation or another basis allowed by law, that limitation and its justification are stated in the reply. Deletion in LUME does not delete data held by Meta itself; requests regarding that data must be made directly to Meta.
8. Your rights
Under the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the law, portability where applicable, information about sharing, withdrawal of consent and deletion of data processed on the basis of consent, subject to the exceptions set out in the law.
You may also request information about the consequences of not giving consent, object to processing in the cases provided by law and file a complaint with the Brazilian National Data Protection Authority (ANPD). To exercise your rights, write to contato@sistemalume.com.br.
9. Browser storage
The website uses the browser's local storage to remember your light or dark theme preference. You can remove this preference in your browser settings. This storage is not an authorization to access your Instagram account; the integration depends on the specific authorization granted on Meta.
10. Changes to this policy
This policy may be updated to reflect changes in features, in data processing or in the legislation. The current version is available on this page, with the date of the last update. Changes that require a new authorization are submitted to the user before the respective processing.