Privacy Policy

Kentor AI (LUIGI DE CARLI ANDRADE MARREY SANCHEZ (58.635.024), CNPJ 58.635.024/0001-05, Rua Patápio Silva, 191 — São Paulo, SP — CEP 05436-010) builds artificial intelligence systems for businesses. This policy applies to the kentor.com.br website and to the platforms we build for our clients, including the “Kentor Ads AI Manager” app, which connects to the Meta APIs.

For the ad account data our clients connect, we act as a processor under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018): we process the data only to provide the contracted service and in accordance with the instructions of the client, who is the controller.

We only access assets that the business owner shares with us in Meta Business Manager, and only while that sharing is active. With this authorization, we can read:

• Structure and settings of the ad accounts: campaigns, ad sets, ads, budgets, statuses and schedules.
• Ad performance metrics: spend, impressions, reach, clicks, frequency, conversions and cost per result.
• The creatives used in the ads: copy, images, videos and Facebook Page or Instagram posts linked to those ads.
• Basic information about the shared Pages and Instagram accounts (name, identifier and published content).
• Status and aggregated events of the shared pixels/datasets, to check the health of measurement.
• Identification data of platform users (name and email) for login and for recording who made each decision.

We do not collect personal data of the end consumers who saw or clicked on the ads. The metrics we receive from Meta are aggregated.

• Show the client how the ad accounts are performing against the goals the client has set.
• Generate optimization recommendations (for example, reallocating budget or pausing an ad) for the client to approve or reject.
• Carry out in the ad account only the actions the client expressly approves, recording who approved them and when.
• Analyze the content of the creatives to explain why one ad performs better than another.
• Create custom audiences in the client’s account, when the client requests it.

We do not use the data for our own advertising, we do not sell or rent data to third parties, and we do not use one client’s data to serve another.

Some of the analyses are written by language models contracted by Kentor (such as Anthropic). These providers receive only the numbers and text needed for each analysis, under a contract that prohibits using this data to train their models. The numbers shown are always calculated by our system and checked before they reach the client.

On kentor.com.br, the interactive demo and the “Ask” feature send the text you type to Anthropic's API, which acts as a processor, solely to generate the response shown on screen. Kentor does not store this text. For that reason, do not enter personal or confidential data in these fields.

To prevent automated abuse of these features, we use Cloudflare Turnstile, which checks whether the access comes from a person and, to do so, processes technical browser data and the IP address. We also apply a usage limit per IP address, without storing the content typed. These providers may process the data outside Brazil.

• Infrastructure providers that host the system and the database (such as Vercel, Railway and Supabase), under contract and with restricted access.
• Artificial intelligence providers, under the conditions in section 4.
• Cloudflare, to protect the site against abuse (Turnstile), under the conditions in section 4.
• Authorities, when required by law or by court order.

Data is stored on servers with encryption in transit, login-based access and audit logging. Meta access tokens are kept in a secrets vault, outside the code. We retain the data while the contract with the client is active and delete it within 30 days of a deletion request or the end of the contract, except for what the law requires us to keep.

You may at any time request access to, correction, portability or deletion of your data, and revoke your authorization. Write to contato@kentor.com.br. We reply within 15 days.

To remove Kentor’s access to your Meta assets, simply remove Kentor as a partner in your Business Manager. See also the data deletion instructions.

Data protection officer and questions about this policy: contato@kentor.com.br. If this policy changes, the date at the top of the page will be updated.