Skip to content
Alkansa
Português · English · Español

Alkansa Privacy Policy

Last updated on October 1, 2026.

1. Data controller

The controller of your data is Marcos Vinithius, who operates Alkansa in Portugal. For any privacy matter, write to contact@alkansa.app. We have not appointed a data protection officer (DPO), because the law does not require one for our activity; that contact handles requests.

2. Data we process

  • Account: name, email, profile photo (if you upload one), language, time zone, theme and login sessions.
  • Team: the people in each account, their roles, invitations and who created each post.
  • Connected social networks: identifier, username and name of the account or page, permissions granted, connection validity and the access tokens, which we store encrypted.
  • Content: uploaded images, layouts, texts, captions, schedule and the result of each post (for example, the address of the published post).
  • Billing: plan, subscription status, payment and invoice history and the Stripe customer identifier. Card details stay with Stripe and never reach us.
  • Communications: emails we exchange with you and the notices we send (invitations, plan changes, waiting list confirmation).
  • Technical data: IP address, browser, times and errors, for security and diagnosis, and the anti-bot check at sign-up.
  • alkansa.app website: the email and language of people who join the waiting list and, only with your consent, visit and campaign measurement data.

3. Social network data

We ask the networks only for the permissions needed to identify the connected account and publish what you approve. We do not read direct messages, follow, like or comment, and we do not collect follower data. Data received from the networks (including Instagram, Facebook, Threads, TikTok and LinkedIn) is used only to provide the service to you: we do not sell it, use it for advertising, share it with data brokers or use it to train AI models.

When you disconnect a network, we delete its tokens. You can also revoke access directly in the network, in the connected apps and websites settings of Instagram, Facebook, Threads, TikTok or LinkedIn.

4. Purposes and legal bases

  • Providing the service you signed up for (account, team, creation, publishing, scheduling, support and billing): performance of a contract.
  • Complying with legal obligations (invoices, taxes, requests from authorities): legal obligation.
  • Security and abuse prevention (technical logs, anti-bot check, publishing limits, spam investigation) and improvements using aggregated data: legitimate interest, balanced so it does not override your rights.
  • Measurement and advertising on the alkansa.app website, and launch emails to the waiting list: consent, which you can withdraw at any time.

5. Service providers

We work with providers that process data on our behalf, under contract and only for the purposes above:

  • Supabase: authentication and database, hosted in London (United Kingdom).
  • Cloudflare: hosting, network, queues, image storage and anti-bot check (Turnstile).
  • Stripe: payments and subscriptions.
  • Resend: email delivery.
  • Google (Analytics and Ads) and Meta (Pixel): visit and campaign measurement, only on the alkansa.app website and only with your consent.

Social networks receive the content you ask us to publish, as independent controllers, under their own policies. If you connect an AI assistant to Alkansa, its provider processes the data that assistant accesses, under its own policies. We do not sell personal data.

6. International transfers

Some providers process data outside the European Economic Area or Brazil. In those cases we rely on the safeguards provided by law, such as adequacy decisions (for example, the one for the United Kingdom), the EU-U.S. Data Privacy Framework or standard contractual clauses. You can ask for more details at the contact above.

7. Visibility

Projects, layouts and posts are restricted to your account and the people you invite. Post images can be reached by anyone with their address, because social networks need to fetch them. Do not upload confidential material. Deleting a record does not delete copies already published on the networks.

8. Cookies and local storage

In the app (my.alkansa.app), we only use cookies and local storage needed for login, language and theme; they do not require consent. On the alkansa.app website, we store your cookie choice and, only if you accept, load the measurement and advertising tools listed in section 5. You can change your choice by clearing the website's cookies, and the notice will appear again.

9. How long we keep data

Account data is kept while the account exists. The content of posts already published or discarded is removed after 90 days, and the record after 180 days; active posts are preserved. Images uploaded for posts may be removed after 30 days; permanent design assets are kept while needed. Billing data and invoices are kept for the period required by tax law. The waiting list is kept until you leave it. Providers' technical logs, caches and backups follow their own short periods; we do not promise instant deletion of every copy.

10. Your rights

Under the GDPR, Brazil's LGPD and other applicable laws, you can request confirmation and access, correction, erasure, anonymization or blocking, restriction, portability, information about sharing, and object to processing. Where processing relies on consent, you can withdraw it without affecting what was done before. You can correct or delete some data yourself in My account.

Send requests to contact@alkansa.app, without passwords or tokens. We may ask for proportionate confirmation of identity. We answer without undue delay and, as a rule, within 15 days, within the deadlines of the GDPR (art. 12) and the LGPD (art. 19). You can also complain to the competent European authority, such as the CNPD in Portugal, or to the ANPD in Brazil.

11. Security

We use encrypted connections (HTTPS), per-account data isolation in the database, encrypted social network tokens, an anti-bot check and human approval before every post. No system is invulnerable: if you suspect an incident, tell us at the contact above. Duties to investigate, notify and remedy follow the law.

12. Children

Alkansa is not intended for people under 16, and we do not knowingly collect their data. If you know of such a case, write to contact@alkansa.app.

13. Changes

We update this policy when the data processed, the purposes or the providers change. Material changes are announced by email and in the dashboard before they apply and, where the law requires it, we ask for your consent again.

Privacy · Terms of use · Data deletion