Last updated: October 30, 2026
Privacy policy
This policy explains what personal data SpotFacil processes, why, who we share it with and what your rights are, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018). The data controller is SpotFacil. If you live in another country, you also have the rights granted by your local law, where applicable.
Controller: SpotFacil, CNPJ —, —. Contact: contato@spotfacil.com.br.
This is a translation provided for convenience. In case of any discrepancy between language versions, the Portuguese text prevails.
1. Data we process
Account data: name, email, password (stored in encrypted form), phone number when provided, and language.
Company data, when you provide it: legal name, tax ID (CNPJ) and address, used for billing and tax documents.
Payment data: payments are processed by Stripe (card) or Banco Inter (Pix and boleto). We do not store your full card number; we only receive the confirmation and summary details, such as card brand and last digits.
Content you create or upload: briefs, scripts, texts, voice recordings, your own music and the audio we generate.
Usage and technical data: access logs (IP address, date and time), browser, credit usage and production history.
2. How we use it
To provide the service: writing scripts, generating voices, transcribing recordings, mixing and delivering spots (performance of contract).
To bill plans and packs, issue tax documents and meet legal and regulatory obligations.
To keep the site secure, prevent fraud and abuse (such as repeat accounts to get the free spot) and automatically review text that breaks the terms of use (legitimate interest).
To send account communications, such as confirmations, billing notices and changes to the terms. Marketing messages are sent only with your consent, which you can withdraw at any time.
3. Storage of your content
Texts, recordings and audio files are kept in private storage, outside the public area of the site. Access to files is tied to your account; we do not publish your productions or share them beyond the suppliers listed in this policy.
4. Suppliers and sharing
We share data only with suppliers that need it for the service to work, always limited to what is necessary:
ElevenLabs (United States): receives the text to be narrated and, when you upload a recording, the audio for transcription.
Anthropic (United States): receives the brief details (product, offer, audience, tone and length) to write the script.
Stripe: processes card payments. Banco Inter (Brazil): processes Pix and boleto.
Amazon Web Services: sends system emails.
AI providers receive only what they need to produce the result, without your account or payment details. We may also share data when required by law or by an order from a competent authority. We do not sell personal data.
5. International transfers
Some suppliers are located outside Brazil, mainly in the United States. In these cases, the transfer is made to perform our contract with you and with contractual data protection safeguards, as provided in art. 33 of the LGPD.
6. Retention and deletion
We keep your data while your account exists. You can request deletion of your account and data at contato@spotfacil.com.br.
After deletion, we remove your data and files, except what the law requires us to keep: tax and financial records for the legal period, and access logs for at least 6 months (Brazilian Internet Civil Framework). Backups are overwritten on a regular cycle.
7. Security
We use encrypted connections (HTTPS), hashed passwords, private storage for files, access controls and encrypted integration keys.
No system is infallible. If a security incident poses a significant risk, we will notify Brazil’s data protection authority (ANPD) and the people affected, as required by law.
8. Cookies
We use essential cookies for the site to work: session, protection against cross-site request forgery, language and display preferences. These do not require consent.
With your permission in the cookie notice, we also use tools to measure visits and campaigns. Without permission, they are not loaded. You can change your choice at any time through the cookies link in the footer.
9. Your rights
Under art. 18 of the LGPD, you can request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about who we share it with, information about the option not to consent, and withdrawal of consent.
Send your request to contato@spotfacil.com.br. We may ask for confirmation to make sure it is really you. We respond within 15 days. You can also file a complaint with the ANPD.
10. Data protection officer and updates
Our data protection officer can be reached at contato@spotfacil.com.br.
This policy may be updated. The date of the last revision appears at the top of the page, and material changes are announced by email or on the site.