Privacy Policy
Last updated: March 20, 2026
1. Introduction
Quiosque25 ("we", "our", or "platform") is a revenue-sharing platform that allows content creators to earn money by using licensed music from our catalog in their Instagram Reels.
This Privacy Policy describes how we collect, use, store, and protect your personal data, in compliance with the Brazilian General Data Protection Law (LGPD β Law No. 13,709/2018). By using the platform, you acknowledge and agree to the practices described in this document.
2. Data we collect
We collect the following personal data during your use of the platform:
- Registration data: email address and password (encrypted).
- Instagram data: username and unique identifier (instagram_pk). This data is provided by you during verification and collected from public Instagram data.
- Payment data: Pix key, bank details, or other information necessary to process withdrawals via Wise.
- Usage data: view counts for your Reels, Reel status on the platform, and earnings history.
- Technical data: IP address, browser type, operating system, and session data collected automatically during access.
3. Legal basis for processing (LGPD, Art. 7)
The processing of your personal data is carried out based on the following legal grounds:
- Consent (Art. 7, I): by creating your account and accepting this policy, you consent to the collection and processing of the data described in this document. You may revoke your consent at any time.
- Contract performance (Art. 7, V): data processing is necessary for the provision of the contracted service, including earnings calculation and payment processing.
- Legitimate interest (Art. 7, IX): we use data for fraud detection, platform security, and improvement of our services, always respecting your rights and expectations.
4. How we use your data
We use your personal data for the following purposes:
- Platform operation: authentication, Instagram verification, Reel tracking, and earnings calculation based on views.
- Payment processing: calculation of amounts owed, processing of withdrawal requests, and transfers via Wise.
- Fraud detection: monitoring of suspicious patterns, such as artificial views, duplicate accounts, or bot usage, to protect the integrity of the platform.
- Communication: sending notifications about withdrawals, changes to terms, platform updates, and operational communications.
- Analysis and improvement: aggregated and anonymized analysis of platform usage to improve user experience.
5. Data sharing
We do NOT sell your personal data. Your data may be shared only with the following partners, strictly for service operation:
- Supabase: hosting infrastructure, database, and authentication. Data stored on servers with encryption at rest.
- Wise (TransferWise): international payment processing. Only the data necessary for the transfer is shared.
- Instagram / Meta: we access only public data (public Reels and view counts). We do not access messages, private stories, or any non-public data from your account.
In case of legal obligation or court order, we may be required to share data with competent authorities, as provided by Brazilian law.
6. Storage and security
- Your data is stored on Supabase cloud infrastructure, with encryption in transit (TLS/SSL) and at rest.
- Passwords are stored using cryptographic hashing and never in plain text.
- Payment data is handled with additional security measures and restricted access.
- Retention period: your data is retained as long as your account is active. After account deletion, personal data is removed within 30 days, except when retention is required for legal or regulatory compliance (e.g., tax records may be kept for up to 5 years).
7. Your rights (LGPD, Art. 18)
As a data subject, you have the following rights:
- Confirmation and access: to know if we process your data and obtain a copy of it.
- Correction: to request correction of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion: to request anonymization or deletion of unnecessary data or data processed in non-compliance with the LGPD.
- Portability: to request the transfer of your data to another service provider, in a structured and interoperable format.
- Deletion of consent-based data: to request deletion of data processed based on your consent.
- Sharing information: to know which public or private entities your data was shared with.
- Consent revocation: to revoke your consent at any time, without affecting the legality of processing performed previously.
8. How to exercise your rights
You can exercise your rights in two ways:
- By email: send your request to support@quiosque25.com identifying yourself and describing the right you wish to exercise.
- Through the platform: use the "Delete my account" option available in your profile settings to request complete deletion of your data.
We will respond to your request within 15 business days, as provided by the LGPD.
9. Cookies and similar technologies
We use the following cookies and local storage technologies:
- Session cookies: necessary to maintain your authentication and security during platform use. Essential for service operation.
- Language preference: we store your language preference (locale) to provide the interface in your chosen language.
- Analytics cookies: we use analytics tools to understand how the platform is used and improve the experience. This data is collected in an aggregated and anonymized manner.
You can manage your cookie preferences in your browser settings. Note that disabling essential cookies may prevent the platform from functioning correctly.
10. Changes to this policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable legislation. In case of significant changes, you will be notified by email. The date of the last update will always be indicated at the beginning of this document. Continued use of the platform after the publication of changes constitutes acceptance of the updated version.
11. Data Protection Officer (DPO) Contact
For questions related to the processing of personal data, contact our Data Protection Officer:
Email: support@quiosque25.com
If you believe that the processing of your personal data violates the LGPD, you have the right to file a complaint with the National Data Protection Authority (ANPD).