Privacy Policy

Metropolle ("we", "our" or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and protect your information in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018) and GDPR.

Legal Entity: Neves Participações Ltda
CNPJ: 05.589.844/0001-33
Registered Address: Rua Desembargador Barcelos, 1311 — Nova Suíça, Belo Horizonte — MG, 30421-124, Brazil
Product: Metropolle Platform (metropolle.com)
DPO Contact: Contact us

We collect the following types of personal data:

• Identity Data: name, email, username
• Session Data: IP address, user agent, device type
• Activity Data: pages visited, interaction events

We use your data to:

• Provide and maintain our services
• Authenticate and manage your account
• Analyze platform usage for improvements
• Comply with legal obligations

Data processing is carried out based on your consent (Art. 7, I of LGPD) and our legitimate interest (Art. 7, IX of LGPD) for service improvement.

Your data is retained for the following periods:

• Session and activity data: 90 days
• Identity data: until account deletion
• Audit logs: 1 year (legal requirement)

You may explicitly connect your own social media accounts (e.g. Google, YouTube, Meta, TikTok, LinkedIn and others) to build your verified profile. When you do, we access the provider's official OAuth API on your behalf, in read-only mode, to verify account ownership and collect aggregate metrics.

YouTube / Google API data: if you connect your YouTube account, we use the YouTube Data API v3 with the youtube.readonly scope to collect your channel's aggregate metrics only: subscriber count, video count, total views and channel creation date. This data is displayed only to you and, if you explicitly opt in, on your own public profile. We store OAuth tokens (encrypted) and aggregated counters; posts, comments and video content are fetched on demand and never persisted.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube API Services Terms of Service.

We do not sell, rent, or transfer Google user data — raw or aggregated — to any third party, data broker, or advertiser. Google user data is never used for targeted advertising, lending, or to develop, improve, or train AI/ML models, and it is never transferred to third-party AI/ML services. It is used solely to provide the user-facing identity-verification features described above.

You can disconnect any social account at any time in your profile settings — disconnecting revokes our access token at the provider and deletes the associated data.

You have the right to:

• Access: request a copy of all your data
• Correction: correct incomplete or inaccurate data
• Deletion: request the deletion of your data
• Portability: receive your data in a structured format
• Revocation: withdraw your consent at any time

To exercise your rights, access the "My Data" section in your profile or contact us.

We use the following types of cookies:

• Essential: necessary for basic functionality
• Analytics: to understand how you use the platform (with your consent)

Analytics cookies are disabled by default and load only after you opt in. You can manage your cookie preferences or withdraw consent at any time.

We implement technical and organizational measures to protect your data, including: encryption in transit (HTTPS), multi-factor authentication for administrators, role-based access control, and continuous security monitoring.

We may update this policy periodically. Significant changes will be communicated via email or through a notice on the platform.

For questions about this policy or the processing of your data, please contact us.