Privacy Policy

Effective Date: September 16, 2026

Welcome to Darwim ("we", "our" or "us"). Our platform is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your information when using the Darwim application and the website available at https://darwim.slnline.com.

1. Information We Collect

We may collect different types of information, including, but not limited to:

  • Registration Information: Name, email address, and password when creating an account.
  • Profile Information: Profile picture, biography, and other information you choose to provide.
  • Usage Information: Data about how you navigate and interact with our platform.
  • Device Information: IP address, browser type, operating system, and unique device identifiers.
  • Social Media Data: Information from accounts you connect to Darwim, as permitted by each social network. For Instagram, we may use the scopes "instagram_business_basic", "instagram_business_manage_messages", "instagram_business_manage_comments", "instagram_business_content_publish" and "instagram_business_manage_insights". For Facebook Pages, we store the Page ID, name and picture, the business connection identifier, and the encrypted Page access token. We request "business_management", "pages_manage_posts", "pages_read_engagement", "pages_show_list" and "publish_video" to list authorized Pages and allow reading, creating, editing and deleting posts and publishing videos. For Pinterest, we store the profile ID, username and profile image plus encrypted access and refresh tokens. We request "user_accounts:read", "boards:read", "boards:write", "pins:read" and "pins:write" to identify the connected profile, list and manage boards, and read and publish image or video Pins.

2. How We Use Your Information

The information collected is used to:

  • Provide, maintain, and improve our services.
  • Personalize the user experience.
  • Generate reports, analyses, and insights for content creators and businesses.
  • Send notifications, updates, and customer support.
  • Detect and prevent fraud, illegal activities, or violations of our Terms of Use.
  • Operate authorized social network integrations, including managing Instagram content and metrics, publishing and managing content on selected Facebook Pages, and selecting boards and publishing image or video Pins on Pinterest.

3. Sharing Information

We may share your information with third parties only in the following circumstances:

  • Service Providers: Partners who assist us with hosting, data analysis, payment processing, and other functions necessary for Darwim's operation.
  • Legal Requirements: When we are required by law or believe in good faith that data sharing is necessary to comply with a legal obligation, protect our rights, or protect the safety of other users.
  • Consent: With your express consent, we may share information for other specific purposes.

4. Data Retention

We store your information for the period necessary to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. When you deauthorize the Facebook integration or submit a Meta data deletion request, we remove the associated Pages and their usage records from Darwim. When you remove a Pinterest account from Darwim, we remove its encrypted credentials and associated usage records. Instagram Comment Copilot data follows the specific retention periods described below.

5. Information Security

We employ administrative, technical, and physical security measures to protect your information against unauthorized access, use, or disclosure. Facebook Page access tokens and Pinterest access and refresh tokens are stored encrypted and are not sent to the browser. However, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

6. User Rights

Depending on your location and applicable law, you may have the right to access, correct, update, or request deletion of your personal information. For Facebook integration data, you may also remove the app in Meta settings and request deletion; Darwim will provide a status confirmation address. To exercise any right, contact us at: migs@salonline.com.br.

7. International Data Transfer

We may transfer your information to other countries where our affiliates or service providers operate. In such cases, we will take appropriate measures to ensure adequate protection of your information, in accordance with applicable privacy laws.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience, analyze site traffic, and understand how you interact with our platform. You can manage cookie preferences directly in your browser.

9. External Links

Our services may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party website or service.

10. Children's Privacy

Our platform is not directed at children under 13. We do not intentionally collect information from children without verifiable parental consent. If you believe we have collected data from a child, please contact us immediately.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. We recommend that you review this policy regularly to stay informed about how we protect your information.

12. Contact

If you have questions, concerns, or requests related to this Privacy Policy, please contact us by email: migs@salonline.com.br.

By using Darwim, you agree to the terms of this Privacy Policy.

13. YouTube API Services

Darwim uses YouTube API Services to connect the channel selected by the user, retrieve uploaded videos, and publish videos only when requested by the user.

  • Data accessed: channel ID, name, description, custom URL and image, as well as uploaded video metadata such as title, description, thumbnail, identifier and publication date.
  • Data stored: channel identifiers, name and image, OAuth access and refresh tokens, credential expiration data, and records needed to operate and audit requested publications.
  • Data provided by you: video file, title, description, privacy setting and scheduling information used for publication.

Darwim requests the youtube.upload and youtube.readonly scopes.

This data is used only to identify the authorized channel, display videos from that channel, and publish content according to the actions and settings defined by the user.

We do not sell data obtained from YouTube. We share with Google and YouTube only the information needed to fulfill user requests and with providers that support Darwim hosting and operations, subject to data-protection obligations.

We retain authorized data while the integration is active and for as long as needed to provide the service. When you remove the YouTube account in the Darwim dashboard, we delete the credentials, internal permissions and usage records associated with the connection from the platform.

Use of information received from Google APIs is also governed by the Google Privacy Policy.

You can remove the connection and delete associated data in the Darwim accounts dashboard. To also revoke the authorization granted through Google, visit Google Account permissions. After revocation, Darwim cannot access new YouTube data. For other deletion requests, use the contact listed in this policy.

14. Instagram Comment Copilot

To operate the Instagram Comment Copilot, Darwim receives Instagram comment and media context, the connected professional account identifier, and the encrypted access token supplied through Meta. Darwim uses this data to organize comments and prepare reply drafts. Meta provides the Instagram connection; Google Cloud Vertex AI processes the necessary comment context to generate a suggestion.

Darwim never sends an AI suggestion automatically. A person must review and approve the final text before it is posted as a public Instagram reply.

Webhook event payloads are deleted after 7 days; comment, draft and approved reply text after 90 days; and comment-action audit records after 365 days.

You can disconnect an Instagram account in Darwim, remove the Darwim app in Meta, or submit Meta's data deletion request. These paths remove the associated Instagram connection data from Darwim and provide a confirmation status address.

AI suggestions can be inaccurate, incomplete, or unsuitable for a particular audience. You are responsible for reviewing them, complying with applicable law and platform rules, and deciding whether to publish a reply.

Migs — Publique no Instagram e TikTok