Privacy Policy

MKTSYS (MKTSYS.io) is the trade name of 29.982.013 Lenoir Seibert, a sole-proprietor technology and automation company registered in Brazil under CNPJ (Brazilian company registry) no. 29.982.013/0001-95 and operated by Lenoir Seibert. This website serves institutional and commercial purposes, presenting our automation, digital marketing and intelligent systems services.

This policy covers both the mktsys.io website and the applications we operate on the Meta Platform — mktsys-chat (ID 1673744990409857) and MktFull Connect (ID 106909992491881) — which we use to handle Facebook and Instagram messages and comments on behalf of our clients.

If you have questions about this policy, get in touch: contato@mktsys.io

We collect only the data necessary to provide our services:

• Contact data: name, email, phone number and message voluntarily provided through the contact form.
• Browsing data: IP address, browser type and pages visited, collected automatically for security purposes and to improve the site.
• WhatsApp communication data: when you start a conversation through the WhatsApp button, that data is also subject to WhatsApp's (Meta) privacy policy.
• Data received from the Meta Platform: described in section 3.

MKTSYS operates the mktsys-chat (ID 1673744990409857) and MktFull Connect (ID 106909992491881) applications, which connect to Facebook Messenger and Instagram Direct through Meta's official APIs. When a client business connects its own Facebook Page or Instagram professional account to one of these applications, we begin receiving and replying to messages and comments on that business's behalf.

In this context the client business is the controller of the data and MKTSYS acts as a processor (art. 5, VI and VII of the LGPD), handling the data solely according to its instructions.

Data received from Meta. While processing these conversations, we receive and store:

• The user's platform identifier (Messenger PSID or Instagram IGSID) — an app-scoped ID that does not reveal your personal profile;
• Public name and profile picture, when made available by the platform;
• The content of direct messages and comments sent to the connected Page or account, including attachments;
• Date, time and technical metadata of the conversation (source channel, Page or Instagram account identifier);
• Identifiers of the connected Pages, Instagram accounts and Business Managers, plus the access tokens issued by Meta.

Permissions we request and why. Depending on the application and the features contracted, we request only the minimum required for the service to work:

• pages_messaging — receive and reply to direct messages on Messenger;
• pages_manage_metadata — subscribe to the connected Page's webhooks;
• pages_read_engagement — read the Page's comments and public content;
• pages_manage_engagement — reply to comments on behalf of the Page;
• pages_show_list — list the user's Pages during initial connection;
• instagram_basic — identify the connected Instagram professional account;
• instagram_manage_messages — receive and reply to Instagram direct messages;
• instagram_manage_comments — read and reply to Instagram comments;
• business_management — operate the assets the client business authorised in its Business Manager.

Purpose. Data received from Meta is used exclusively to deliver, answer and organise the client business's customer service, including automated replies, routing to human agents and conversation history. We do not use this data for targeted advertising, we do not sell it, and we do not transfer it to data brokers or to any third party not required to operate the service.

To request deletion of the data handled by these applications, see the Data Deletion Instructions.

Your data is used exclusively to:

• Reply to your messages and quote requests;
• Deliver the services you have contracted, including the message and comment handling described in section 3;
• Send service-related communications (no spam);
• Measure site and campaign performance, in aggregate form and only with your consent (section 9);
• Comply with legal obligations.

We do not sell, rent or share your data with third parties for marketing purposes.

Processing of your data is grounded on the following legal bases set out in the Brazilian General Data Protection Law (Law No. 13.709/2018):

• Consent: when you fill in the contact form and when you accept analytics and marketing cookies;
• Performance of a contract: for clients with active services, and to handle the messages you send to our clients' Pages and accounts;
• Legitimate interest: for security, fraud prevention and site improvement.

Data is stored on infrastructure services that meet adequate security standards, with encryption in transit (TLS) and at rest, and access restricted to the personnel who need it.

Processors and vendors we use:

• Vercel — website hosting and aggregate audience metrics;
• Supabase — database for conversations and client records;
• n8n (MKTSYS-hosted instance) — automation flow orchestration;
• Meta Platforms — source and destination of Facebook and Instagram messages;
• Google (Tag Manager / Analytics) — site measurement, only with your consent.

Some of these vendors process data outside Brazil. In those cases, the international transfer relies on the grounds set out in art. 33 of the LGPD and on adequate contractual safeguards.

Retention periods: contact form data is kept for up to 24 months after the last contact; conversations and comments handled by the Meta applications are kept for the duration of the contract with the client business and for up to 90 days after it ends, unless a different period is set by the client itself or required by law. After that, data is deleted or anonymised.

You may request deletion of your data at any time, including data obtained through Facebook or Instagram. The full procedure, timelines and required details are described on the Data Deletion Instructions page.

In short: send an email to contato@mktsys.io with the subject "Data deletion". We acknowledge receipt within 5 business days and complete the deletion within 30 days.

You have the following rights regarding your personal data (art. 18 of the LGPD):

• Confirm whether we process your data;
• Access the data we hold about you;
• Correct incomplete or inaccurate data;
• Request anonymisation, blocking or deletion of unnecessary data;
• Withdraw your consent at any time;
• Request data portability;
• Object to processing based on legitimate interest.

To exercise any of these rights, contact us at contato@mktsys.io. When we act as a processor on behalf of a client business, we forward the request to the controller and support them in fulfilling it.

This site uses essential technical cookies required for it to work (such as your theme preference and the record of your consent) and, only after you accept the cookie banner, measurement and marketing technologies:

• Google Tag Manager / Google Analytics — audience and site performance measurement;
• Meta Pixel and Meta's Conversions API — Facebook and Instagram Ads measurement, using the _fbp and _fbc cookies;
• Vercel Analytics — aggregate traffic metrics.

Until you accept the banner, these scripts are not loaded. You can also disable cookies in your browser settings, but doing so may affect your browsing experience.

Our services are not directed to anyone under 18 and we do not knowingly collect data from that age group. If we identify such data, it will be deleted.

This site contains links to external platforms (LinkedIn, GitHub, WhatsApp, Facebook, Instagram). We are not responsible for the privacy practices of those platforms and we recommend reading their policies.

This policy may be updated from time to time. The date of the last update is always shown at the top of this page. Continued use of the site or our services after changes implies agreement with the version then in force.

Data Protection Officer (DPO): Lenoir Seibert.

MKTSYS.io — 29.982.013 Lenoir Seibert
CNPJ: 29.982.013/0001-95
Email: contato@mktsys.io
WhatsApp: +55 (49) 98404-0935