Service provider
ImpulsIA is operated by Koativa Tecnologia, Brazilian company registration (CNPJ) 61.000.463/0001-48. Contact: contato@impulsia.io. These documents cover the public website, application, portals and integrations provided through the platform.
Our data processing roles
Koativa determines how account, billing, security and operational data is processed. For contacts, clients, campaigns and materials submitted by a team, the client may act as controller and ImpulsIA as processor, depending on the activity. Teams must establish their legal basis and handle the rights of the people whose data they submit. Social networks and payment services may also process data under their own policies.
Data and purposes
We process names, email addresses, profiles, preferences, teams, permissions, billing details, support information and technical access data. Selected functions may involve text, files, images, voice, video, reference documents, AI conversations, calendars, CRM contacts, links, clicks, advertising and metrics. Integrations include profile and Page identifiers, permissions, authorisation credentials and data permitted by the network. We use this data to fulfil requests, organise teams, publish, report available results, bill, prevent fraud and provide support. We do not request your social network password to establish an OAuth connection.
Legal grounds
Depending on the purpose, processing relies on performance of a contract or requested steps, compliance with legal duties, the exercise of rights and legitimate interests assessed for necessity and impact. We request consent where required, including optional website navigation analytics. Consent can be withdrawn without affecting the lawfulness of prior processing. Sensitive data requires its own legal ground and should not be included in content or documents without necessity and authority.
Providers and international transfers
Operation uses hosting, storage, email, authentication, payment, AI and social network services. The product integrates Asaas for payments, Firebase for authentication and enabled analytics, storage and email services, and OpenRouter for access to selected AI models. Prompts and necessary files may be sent to the provider performing the generation. Services may process data outside Brazil. Transfers must comply with the LGPD and ANPD rules using the mechanism applicable to the operation. We do not claim that all providers store data in Brazil or follow identical retention or training policies. Contact us for information about a particular processing activity.
Visibility, security and retention
Team drafts and files have controlled access; portals, bio pages, links and explicitly shared posts have the selected visibility. Forums and rankings may display public participation information. Access controls, team segregation, credential protection and audit records reduce risk but do not eliminate it. Data is retained for the purposes and legal duties that apply. Access records covered by Brazil’s Internet Civil Framework must follow the statutory six-month period. Financial records and security evidence may require additional retention. Account deactivation does not mean immediate physical deletion of every record or backup.
Your rights and contact
You may request confirmation and access, correction, information about sharing, review of solely automated decisions where applicable, objection, portability under applicable rules, and anonymisation, blocking or deletion where legally required. Your profile includes export and account closure requests. Requests may require proportionate identity verification and assessment of retention duties. A complete access statement must follow the statutory deadline of up to 15 days; other requests follow their applicable deadlines and requirements. Send requests to contato@impulsia.io with “Privacy” in the subject or use support. You may also contact ANPD and consumer protection authorities.