Privacy Policy

1. Data we process

Account and profile data: name, email, phone, agency and professional licence number, which you provide to appear on your video end card.

Uploaded content: photos, videos, audio, property address and text. This content may include third parties’ personal data (faces, licence plates, documents); that is why we offer the "Hide personal info" edit and ask you not to upload images of people.

Payment data: processed directly by Stripe. We do not store card numbers.

Style preferences: the tone, calls to action and hashtags you set on the "My style" page, and the usage signals the AI uses to adapt to you (camera moves kept or changed, edits to generated copy, 👍/👎 ratings and photo edits used), plus an AI-written summary of that profile.

Technical and usage data: IP address, browser type, pages visited and feature usage, for security, abuse prevention and quota control.

2. Why we use it and on what legal basis

To deliver the service you signed up for (contract performance); to bill and issue invoices (legal obligation); to prevent fraud and abuse and improve the product (legitimate interest); and to send marketing only with your consent, which you can withdraw at any time.

2.1 E-mails we send

Essential account e-mails (confirmation code, password reset, payments, declined charges, renewal and usage notices) are always sent because they are part of the service. We also send relationship e-mails about your use of ListFly: reminders when a video was left unfinished or a payment wasn’t completed (including discount offers), tips, satisfaction surveys and news, based on legitimate interest. Every relationship e-mail has a one-click unsubscribe link, and you can also turn them off in Plan & profile. We use usage data (last visit, whether you uploaded photos, generated or exported a video, or started a payment) only to choose which message is relevant.

2.2 Property pages, leads and teams

When you publish a property link, anyone with the link can see: the published video, the project photos, title, price, city, the listing copy and your name, phone, agency and licence number (address and e-mail are not shown). You can turn the link off at any time. We count visits and WhatsApp clicks without identifying visitors.

The data of people who fill in the interest form (name, phone, optional e-mail and message) is sent to the advertiser, who is the controller of that data and responsible for using it only to answer the request. ListFly acts as processor: it stores the contacts in the advertiser’s account and sends the e-mail notice. Data subjects can ask the advertiser or our contact e-mail for deletion.

On the Max plan, the team owner sees each invited agent’s name, e-mail and usage volume. Each agent’s projects and leads remain visible only to that agent.

3. Who we share it with

Only with providers needed to run the service, acting as processors: OpenAI (USA): copy and photo editing; MiniMax (Singapore/China): video scene generation; Mapbox (USA): satellite image of the address when you use the location opening; Stripe (USA/Brazil): payments; Resend (USA): e-mail delivery; and our hosting provider Convex and Vercel (USA). Each one receives only the content needed for the feature you triggered.

We do not sell personal data. Your style profile is used only to personalise results for your own account; it is not shared with other customers or used to train third-party models.

4. International transfers

The providers above may process data outside Brazil and the European Union. These transfers are necessary to perform our contract with you and rely on appropriate contractual safeguards under article 33 of the LGPD and chapter V of the GDPR.

5. Storage and retention

Projects, photos, videos and your style profile are stored in the cloud (Convex), linked to your account. AI providers may temporarily retain processed content under their own policies (for example, generated videos are available for download for a limited time).

We keep account data while the account exists and tax records for the legally required period. When you delete your account, we delete or anonymise the remaining data within 30 days.

6. Cookies and local storage

We use the browser’s local storage and session cookies to keep you signed in and to store preferences (such as language). If we add analytics or advertising tools, we will ask for your consent first.

7. Your rights

You may request confirmation of processing, access, correction, portability, anonymisation, deletion, information about sharing and withdrawal of consent, and complain to Brazil’s ANPD or your local data protection authority. Contact our Data Protection Officer: contato@backlineai.com.br. We reply within 15 days.

8. Security and minors

We apply reasonable technical and organisational measures, such as encrypted connections and API keys kept server-side only. The service is not intended for anyone under 18.