Privacy Policy

1. Data we collect

• Account data: name, email and password (stored hashed) of the users your company registers.
• Content you provide: messages exchanged with the design agent, logos, brand guidelines and other uploaded files, and the designs generated.
• Waitlist data: name, email, anything else you tell us when you sign up, and which link or site brought you to us (where you came from).
• Usage and technical data: IP address, browser and device type, and the access logs needed to run and secure the service.
• Support data: what you write in the support chat or send us by email.

We do not collect sensitive data, and the service is not intended for anyone under 18.

2. How we use it

• To provide the service: authenticate users, generate and revise on-brand designs, and keep your history (legal basis: performance of contract).
• To send operational emails such as invitations, password resets, account notices and waitlist updates (performance of contract or pre-contractual steps).
• To keep the service secure, prevent abuse and fix errors (legitimate interests).
• To comply with legal obligations (legal obligation).

We do not sell your data. We also do not use your brand materials to serve other clients: each client's materials are kept isolated.

3. Sharing

We share data only with vendors that run the service on our behalf, under contractual confidentiality obligations:

• Hosting and infrastructure: Vercel, Railway and Supabase (database, authentication and file storage).
• AI: large language model providers (such as Anthropic), which process your requests to generate designs.
• Email and support: Resend (email delivery) and Tawk.to (support chat).
• Waitlist organization: Notion, where the team keeps track of who signed up.

We may also disclose data when the law or a competent authority requires it.

4. International transfers

Some of these vendors store or process data outside Brazil, mainly in the United States. Where that happens we rely on appropriate safeguards, such as standard contractual clauses.

5. Cookies and local storage

We use only essential cookies and local storage: to keep you signed in, remember preferences such as language and light/dark theme, and run the support chat. If you arrive through a campaign link, we keep in your browser which link it was, only to record where you came from if you join the waitlist. We do not use advertising cookies.

6. Retention

We keep data while your account is active or you are on the waitlist. After that, we delete or anonymize the data within a reasonable period, unless we must keep it to meet legal obligations or to establish or defend legal claims.

7. Security

We use technical and organizational measures to protect your data, including encrypted connections (HTTPS), role-based access control and hashed passwords. No system is completely secure. If a relevant incident occurs, we will notify affected users and the authorities as required by law.

8. Your rights

You may, at any time: confirm whether we process your data; access, correct or update it; request anonymization, restriction or deletion; request portability; find out who we share it with; and withdraw consent where applicable. You may also complain to Brazil's data protection authority (ANPD) or, if you are in the EU, to your local supervisory authority.

To exercise any of these rights, email privacidade@madsystem.com.br.

9. Data Protection Officer

You can reach our Data Protection Officer at privacidade@madsystem.com.br.

10. Changes

We may update this policy. The current version will always be on this page with its last-updated date, and we will announce material changes by email or in the platform.