Privacy Policy

Updated on October 19, 2026

This is a translation for convenience; the Portuguese version prevails. Read the Portuguese version

This policy explains how Agateo Tecnologia, CNPJ 41.030.944/0001-99 (“Agateo”), processes personal data in Nuncie (https://nuncie.com and https://app.nuncie.com).

Nuncie is a product of Agateo. The company's corporate website is at https://agateo.com.br.

Processing follows Brazilian Law 13,709/2018 (LGPD, the General Data Protection Law), the Brazilian Internet Civil Framework (Marco Civil da Internet, Law 12,965/2014) and, when the product uses a Meta platform, that platform's terms and policies.

Who the controller is

Agateo is the controller of the account data of whoever subscribes to Nuncie and of the data of anyone who writes to the company's contact channels.

Contacts, creatives, audiences and other third-party data that the customer sends to run campaigns are data under the customer's control. In that part, Agateo acts as a processor and handles the data to provide the contracted service.

Meta processes data in its own systems, under its own rules, when the customer connects an ad account, a Page or a WhatsApp number.

Product website

The website https://nuncie.com does not ask for sign-up and does not use tracking cookies, ad pixels or analytics tools. The server may record technical access logs, such as IP address, date, time and requested page, for security and operation.

When the law requires the retention of access records for internet applications, these logs are kept for the period set by the Marco Civil, in a protected manner and separate from campaign content.

Product data

Depending on use, Agateo may process:

• account identification and contact details: name, email, phone and company data;
• access credentials and authentication records;
• plan, billing and invoice data;
• data about the Meta connection: identifiers of the ad account and Page, permissions granted and tokens required for the API;
• campaigns, creatives, audiences and metrics the customer runs in Nuncie;
• support and security records.

Agateo does not buy contact lists and does not sell personal data. Data obtained through the Meta API is used only to provide the product, comply with the law and maintain security, within the permissions the customer authorized.

What we use it for

• creating and maintaining the account;
• running ad campaigns in Nuncie;
• connecting to and renewing access to Meta's official APIs;
• charging for plans, issuing tax documents and preventing fraud;
• answering data subject requests, including deletion;
• protecting the service, customers and Agateo's rights;
• complying with legal orders and the Marco Civil retention periods.

Legal bases

The legal bases used, as the case may be, are:

• performance of a contract or of preliminary procedures, to provide the product;
• compliance with a legal or regulatory obligation, including tax obligations and record retention;
• legitimate interest, for security, abuse prevention and essential improvement of the service;
• consent, when a communication or a Meta permission depends on it.

A customer who sends third-party data declares that it has a legal basis to do so, including consent when the LGPD or Meta's policy requires it.

Who we share it with

Agateo shares personal data only with those who need it for the service:

• Meta Platforms, for the ads API and, when the flow uses it, for WhatsApp, if the customer connects the account;
• Hostinger, which hosts Agateo's infrastructure on the VPS used by the product and by this website;
• Supabase, which supports authentication and data for Nuncie;
• Stripe, which processes payments for paid plans.

These processors handle data under contract and under instructions compatible with this policy. Public authorities receive data when the law requires it.

International transfer

Meta may process data outside Brazil, including in the United States and in other countries where it operates its APIs. Supabase and Stripe may also process data outside Brazil, depending on the contracted region.

When there is an international transfer, Agateo observes article 33 of the LGPD, with contractual clauses, platform rules and the safeguards required for that flow.

How long we keep it

Account data is kept while the account exists. After closure, Agateo deletes or anonymizes what it does not need to keep. Tax documents and records required by law are kept for the legal periods. Application access logs are kept for the period set by the Marco Civil.

How to request deletion is described in the Data Deletion Policy.

Data subject rights

Under article 18 of the LGPD, you may request:

• confirmation of processing and access to the data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data;
• portability, when regulations allow it;
• deletion of data processed with consent;
• information about sharing;
• withdrawal of consent, when that is the legal basis used.

Requests go to contato@nuncie.com. Agateo responds within 15 days. Identity confirmation may be required before the request is fulfilled. You may also petition the Brazilian National Data Protection Authority (ANPD).

Security

Agateo adopts technical and administrative measures to protect data against unauthorized access, loss and improper alteration. No system is free of risk. Account credentials must be kept safe by whoever receives them.

Children and adolescents

The product is not directed at people under 18. Agateo does not knowingly collect children's data. If that happens, the data is deleted once Agateo becomes aware of it.

Cookies and website measurement

To understand how the website is used, Nuncie sets its own cookies, with no personal data:

• nc_vid: a random code for the browser, for 1 year.
• nc_attr: where the visit came from (the link's utm_* parameters, whether it came from a click on a Meta or Google ad, and the referring website), for 90 days. When the account is created, this origin is stored with the account so we know which campaign brought it.
• nc_consent: your choice about cookies, for 180 days.
• nc_lang: the language you chose for the website, for 1 year.

With them we record visits, how far the page was scrolled, the sections viewed, button clicks and time on the page, as well as the device type, browser and operating system. On our own server, the visit's IP address is used only to estimate country, state and city, with a free location database from DB-IP. We store only this approximate location: the IP is not stored in this measurement nor sent to third parties. Records are deleted after 180 days.

Only if you tap Accept in the cookie notice do we load the Meta Pixel, which sets the_fbp and _fbc cookies and reports visits and clicks to Meta to measure and improve our ads. With Essential only, the Pixel is not loaded. To change your choice, delete this website's cookies in your browser.

The Nuncie app sets a strictly necessary cookie to keep the authenticated session.

Changes

The current version of this policy is on this page, with the date at the top. Relevant changes for account holders are communicated to the registered email.

Controller contact

Agateo Tecnologia
CNPJ 41.030.944/0001-99
Email: contato@nuncie.com
Phone: (11) 98001-3828
Website: https://agateo.com.br

Requests about these terms and about deletion may also be made by that email. See the Terms of Use.