Privacy Policy

1. Who we are

SM Studio is the platform that helps dentists create and publish social media content automatically. This policy describes which personal data we process, for what purpose, who we share it with and how you can exercise your rights, in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD). SMLABS TECNOLOGIA LTDA acts as the controller of this data.

2. Data we collect

• Account data: name, email, phone number, clinic name and password (stored encrypted).
• Brand identity and preferences: logo, colors, visual style, content topics and publishing schedule.
• Images you upload: reference images and photographs attached to posts (for example, before-and-after treatment photos). By uploading patient photographs, you declare that you have the patient's consent for their use in creating and publishing the content.
• Generated content: images and captions created by the platform from your preferences and images.
• Connected Instagram account data: account ID, username and the access token provided by Meta, used exclusively to publish on your behalf.
• Subscription data: the plan you signed up for and payment status. We do not store credit card data on our servers.

3. How we use the data

• To generate content (images and captions) with artificial intelligence;
• To publish content to your Instagram account, always subject to your prior approval or to the schedule you configured;
• To operate, maintain and improve the platform;
• To manage your subscription and provide support;
• To comply with legal obligations.

4. Who we share the data with

We do not sell your data. We share it only with the processors required to run the service:

• Artificial intelligence providers: generation of images and text from your preferences and uploaded images. The current list of contracted providers can be requested at the email address given at the end of this page;
• Meta (Instagram): publishing approved content to your connected account;
• Cloud infrastructure providers: platform hosting, file storage and operational logs;
• Payment processors: subscription billing.

Some of these providers are located outside Brazil: our hosting and storage infrastructure operates in the United States. In such cases there is an international transfer of data, carried out under article 33 of the LGPD and subject to contractual safeguards equivalent to those required by Brazilian law.

5. Instagram integration

When you connect your Instagram professional account, we receive an access token from Meta that allows us to publish content on your behalf. We use that access only for the posts you approved or scheduled. You can disconnect your account at any time from the platform — the token is deleted immediately. If you remove SM Studio's access directly in your Instagram settings, Meta notifies us and we automatically delete the connection data. You can also request data deletion through Instagram itself; the confirmation is shown on our deletion status page.

6. Retention and deletion

• We keep your data while your account is active or while it remains necessary to provide the service;
• Photographs attached to posts that expired without being approved are automatically deleted from our servers;
• Instagram tokens are deleted when the account is disconnected or access is revoked;
• You can request the complete deletion of your account and associated data at the email address given at the end of this page.

7. Your rights (LGPD)

Under article 18 of the LGPD, you may request: confirmation that processing takes place, access to your data, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, portability, information about data sharing, and withdrawal of consent. To exercise any of these rights, write to the email address below — we respond as soon as possible.

8. Security

We adopt technical and organizational measures to protect your data, including encryption in transit (HTTPS), hashed password storage and access control through authentication. No system is completely immune to risk, but we work continuously to reduce it.

9. Cookies

We use only essential authentication cookies, required to keep your session active on the platform. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this policy to reflect changes to the platform or to the law. The date of the latest update appears at the top of the page. Material changes will be communicated through the platform or by email.

11. Contact

For questions about this policy or requests regarding your personal data, get in touch: contato@smlabs.ia.br.