Privacy Policy

50.302.917 ARTHUR BALBOA DE MEDEIROS MARTINS is the controller of the personal data described here. Contact: privacy@aferium.com.

If you buy an Aferium report

• What: your email address, the deal details you enter, whether you said you were evaluating the deal, your optional feedback (including anything you write in its free-text box), and payment records from our payment processor. We do not receive your card details.
• One feedback reminder: about a week after you buy, if you have not answered the feedback questions or said you had not decided yet, we send one email to the address you gave, linking to them. It is the only reminder for that report, and you do not need to answer it (legitimate interest).
• Why: to deliver the report you asked for and send you its link (performance of a contract), and to understand whether the Service is useful (legitimate interest).
• Rate limiting: we count requests per IP address and per email address to stop abuse. IP addresses are stored only as a keyed hash, never in readable form.
• Your rights: you can ask for access to or erasure of your data, or object to its use, including to the feedback reminder, at privacy@aferium.com.

If you are a creator whose public profile was checked

• What: your public handle, your follower, following and post counts, and, for each of your public Reels in the period checked, its link, publication date, public view, like and comment counts, and whether it was pinned, a trial Reel, posted by another account, or marked as a paid partnership. We do not collect the text of your comments, who your followers are, or any private data, and we do not create a score or profile of you.
• Why: a buyer evaluating a proposed collaboration with you asked for a summary of your public performance (legitimate interest). Reports are private to that buyer.
• Your rights: you can object, ask for access or erasure, or contest a report through the Creator Rights page or at privacy@aferium.com. From the moment you make a request, your profile is not checked again while we handle it.

How long we keep it

• Raw data collected from the provider: 30 days.
• A report, the per-Reel figures behind it, and the buyer's email, deal details and feedback: 12 months, as the evidence for that report.
• Rate-limit counters: 2 days.

Who processes it for us

• Vercel (United States): hosting and running the website.
• Supabase (United States): the database where everything above is stored.
• Apify (Czech Republic): collecting creators’ public Instagram data.
• Stripe: payment processing. Stripe also processes payment data as a controller under its own privacy policy.
• Resend (United States): sending the report link and the feedback reminder by email.

We are based in Brazil, and most of these providers are in other countries. Each processes the data only on our instructions, under a data processing agreement that includes standard contractual clauses for international transfers (LGPD article 33; GDPR article 46).

Complaints

Write to us first at privacy@aferium.com. You can also complain to Brazil’s Autoridade Nacional de Proteção de Dados (ANPD) or, if you live in the European Economic Area or the United Kingdom, to the data protection authority where you live.