Privacy Policy

Last updated: November 4, 2026

Painel Social is a reporting tool for social media agencies. When a client connects their YouTube channel, Facebook Page, Instagram professional account or Meta ad account, Painel Social reads performance metrics and turns them into a dashboard for that client and their agency. This policy explains what we access, why, and how you can remove it.

Data we access

• YouTube (via YouTube API Services): channel name, thumbnail and subscriber count; your public video list (title, thumbnail, publish date, link); and channel analytics such as views, watch time, average view duration, subscribers gained and lost, impressions and click-through rate. Scopes: youtube.readonly and yt-analytics.readonly (read-only).
• Facebook and Instagram: Page and professional account name and picture, posts and Reels (caption, thumbnail, date, link), and their insights: reach, views, engagement and follower counts.
• Meta ads (only if you connect an ad account): campaign names, daily spend, reach and impressions.
• Agency staff accounts: email address and password (stored hashed by our authentication provider) and a session cookie to keep you logged in.

We never post, comment, send messages, upload, delete or change anything on your accounts. We do not access private messages, payment data or your contacts.

How we use it

Only to show performance reports to you and to the agency that invited you. We do not use the data for advertising, profiling, selling, or training AI models.

Google user data: Limited Use

Painel Social's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Painel Social uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

Sharing

We do not sell or share your data. A client's dashboard is visible to the agency that manages it, and to anyone the agency sends a private share link to. The agency can turn that link off at any time. We use these service providers to run the app: Vercel (hosting) and Supabase (database and login). They process data only on our behalf.

Storage and security

Access tokens are encrypted with AES-256 and are never sent to the browser. Data is transmitted over HTTPS. Metrics are refreshed automatically at least once a day while an account is connected.

Cookies

We use only a login session cookie for agency staff. No advertising or tracking cookies.

Retention and deletion

• You can revoke access at any time: Google at myaccount.google.com/permissions; Facebook at Settings → Business integrations.
• When access is revoked, we can no longer collect any new data.
• When a connection is removed in the app, its metrics and tokens are deleted immediately.
• Any other deletion request is completed within 30 days. See Data deletion.

Children

Painel Social is a business tool and is not directed to children under 13.

Changes

If we change this policy we will update the date above. Material changes will be communicated to connected agencies.

Contact

Questions or deletion requests: nathalia@every.is