Privacy Policy

This Privacy Policy applies to LookMyBio and lookmybio.com (the "Platform").

The service provider is Verstand Tecnologia LTDA (CNPJ 28.810.339/0001-72).

This policy applies to users and to visitors of public profiles.

We collect information to provide and improve the Platform. The types of information we collect include:

Account and profile data: name, email, username, profile details, images, links, themes, and team invitations.

Authentication and integrations: identifiers and tokens from authentication providers and connected social accounts (including Google, Facebook, Instagram, and X).

Content and communications: content blocks you create, AI prompts and outputs, chat messages, uploads, contact form submissions, and email leads (for example, name, email, message, custom fields, tags, path, and referrer).

Payment and subscription data: Stripe customer IDs, subscription status, invoices, and transaction metadata. Payment card details are handled by Stripe.

Usage and device data: IP address, user agent, pages visited, interactions, and referrers, plus coarse location (country/region/city) derived from IP (via ip-api.com and geoip-lite when enabled).

Cookies and similar storage: session and security cookies, preference cookies (such as locale, theme, and profile selection), referral and onboarding cookies, and analytics or marketing identifiers (such as PostHog and Facebook Pixel).

We use the information collected to:

• Provide, operate, and maintain the Platform;

• Create and manage accounts, profiles, and team access;

• Process payments, subscriptions, and credit usage;

• Deliver emails and notifications (such as login links and profile invites);

• Measure usage, run analytics, and improve features (including AI);

• Prevent fraud, abuse, and security incidents;

• Communicate with you about product updates and marketing when permitted.

When applicable, we process personal data under the following legal bases:

• Performance of a contract (to provide the Platform);

• Consent (for certain communications, cookies, or marketing);

• Legitimate interests (to secure, operate, and improve the Platform);

• Compliance with legal or regulatory obligations.

We share personal data with service providers that help us operate the Platform. Depending on the feature you use, this may include:

• Payment processing (Stripe);

• Email delivery (Postmark);

• Analytics and feature flags (PostHog);

• Error monitoring (Sentry);

• Spam prevention (Cloudflare Turnstile);

• File uploads and storage (cloud storage such as Cloudflare R2 or S3-compatible storage);

• AI services (OpenAI, xAI/Grok, and fal.ai);

• Lead tracking and marketing automation (RD Station);

• Geo-location lookup (ip-api.com and geoip-lite).

If you connect third-party social platforms, we receive and share data with those platforms to provide the integration (for example, Google, Facebook, Instagram, and X).

We may also share information to comply with the law, enforce our Terms, or protect rights, safety, and security.

Our service providers may process data in other countries. When this happens, we use contractual and organizational measures designed to protect your data in accordance with applicable law.

We retain personal data for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data, subject to legal and operational retention requirements.

Depending on your location, you may have the right to:

• Confirm whether we process your data and access it;

• Correct, update, or delete your data;

• Request anonymization, blocking, or restriction of processing;

• Request data portability;

• Obtain information about sharing with third parties;

• Withdraw consent or object to certain processing activities.

To exercise your rights, contact us at [email protected].

We use cookies and similar technologies to keep you signed in, store preferences, and analyze usage. Examples include authentication cookies, preference cookies (locale and theme), profile selection cookies, and analytics or marketing identifiers (PostHog, Facebook Pixel, _fbp, _fbc).

You can manage cookies through your browser settings. Some features may not work properly if cookies are disabled. PostHog is configured to respect Do Not Track signals when available.

We use commercially reasonable measures to protect personal data, but no method of transmission or storage is 100% secure.

The Platform is not intended for individuals under 18. We do not knowingly collect personal data from minors.

We may update this Privacy Policy from time to time. Changes take effect when posted on this page.

Questions about this Privacy Policy? Contact us at [email protected].