Privacy policy

Media System is operated by Synergy Tecnologia Ltda (CNPJ 51.033.169/0001-89), Rua Vicente Oropallo, 70, Cidade São Francisco, São Paulo, SP 05351-025, Brazil. We decide how the data described here is used, and we are the controller of that data under Brazil's data protection law (LGPD).

Media System is a service for scheduling, publishing and measuring content on Instagram accounts and YouTube channels you own or manage. Access is by invitation, and only the owners of those accounts connect them.

Sign-in. Your Google account's name, email address and profile picture, used to confirm who is signing in.

YouTube. When a channel owner connects a channel, Media System reads, with read-only access, the channel's identity, its uploaded videos (titles, privacy status, scheduled publish time, tags) and YouTube Analytics reports (for example views, watch time and subscribers gained).

Instagram. When an account owner connects an Instagram professional account, Media System reads the account's identity, its media and their insights, and publishes the posts you approved.

Content. The media files, captions and production files (such as scripts, briefs and prompts) you upload.

Public Instagram data. For the accounts you choose to watch in Monitor, Media System stores public information available through Instagram's Business Discovery: usernames, follower counts, posts, and their like, comment and view counts. It also stores the comments it drafts for you and your edits to them.

openid, email and profile. We read your name, email address and profile picture to confirm who is signing in. We store them with your Media System account.

youtube.readonly. We read the connected channel's identity and the details of its uploaded videos. We use them to confirm the right channel is connected, to check that each upload landed on that channel with the right title and time, and to list your videos next to their results. We store these details in our database. This permission cannot change anything on your channel.

yt-analytics.readonly. We read YouTube Analytics reports, such as views, watch time and subscribers gained, to show you how your videos performed. We store these reports in our database. This permission cannot change anything on your channel.

Google data is sent over encrypted connections and shown only inside your Media System account. We do not share it except with the hosting providers listed below, and we never send YouTube data to AI models.

Media System's access to Google data is read-only and cannot upload videos. Uploads are made by the Media System desktop runner, which you start on your own computer. It operates YouTube Studio in a Chrome profile you sign in to yourself. We never receive your Google password, and that browser session stays on your computer.

Only to provide Media System: to confirm a connected account is the intended one, publish approved content, check that it went live, show you performance, draft suggested comments and send you notifications. We do not sell or rent this data, use it for advertising, or use it to train AI models.

Media System's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We share data only with the providers that run the service, and when the law requires it:

• Vercel hosts the application and stores uploaded files.
• Neon hosts the database.
• Railway inspects uploaded videos for their format and length and to extract a preview frame. It does not keep them.
• Google provides sign-in and the YouTube APIs. Its Gemini API drafts suggested comments from the Brand's name and voice and from the public post you may comment on, including its caption, account name and counts. YouTube data is not sent to Gemini.
• Meta provides the Instagram APIs, which receive the content you approve for publishing.
• Telegram delivers notifications, which can include a Brand or account name, a post's title and its outcome.

Media System uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Media System's access at any time on the Google security settings page.

We use a session cookie to keep you signed in. We use no advertising or analytics cookies. If you use the command-line tool, it stores your API keys in a private file on your computer, and the desktop runner keeps its own Chrome profile there.

The database and file store are hosted in the United States, so using Media System involves transferring your data out of Brazil, as needed to provide the service to you. Access tokens for connected accounts are encrypted at rest and are never shown in the interface or logs. We never collect your account passwords.

We keep data while your account stays connected. You can revoke access from the Google page above or from your Instagram settings (Apps and websites). After you revoke access, stored tokens stop working and we delete the related YouTube data within 30 days.

To have your data deleted, email luis@synergytec.com.br with the account concerned. We delete it as soon as possible and within 7 days. Deleted records can remain in database history for up to one more day.

Under the LGPD you can ask us to confirm whether we process your data, give you access to it, correct it, delete it or move it to another provider, tell you who we share it with, and withdraw your consent. You can also complain to Brazil's data protection authority (ANPD). We reply to requests within 15 days. We rely on your consent when you connect an account, on our contract with you to provide the service, and on legitimate interest for security and for public data in Monitor.

Media System is not intended for anyone under 18.

When we change this policy we update the date above, and we tell you directly about changes that materially affect you.

Questions or requests about your data: luis@synergytec.com.br.