Privacy Policy

1. Who we are

Workmind (https://workmind.tech) is an advertising campaign management platform operated by WORKMIND PROVEDOR DE CONTEUDO LTDA (“we”, “us”). This policy explains what data Workmind processes, why, how it is protected and what your rights are. It is written to comply with the Brazilian General Data Protection Law (LGPD – Law 13.709/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

Access to Workmind is restricted to team members approved by an administrator. For any privacy question, contact contato@mrcsrc.com.

2. Information we process

• Account data: name, email address, profile picture (when you sign in with Google), a hashed password if you use email sign-in, and your role and permissions in the team.
• Session and security data: session cookies, IP address, browser information and technical access and error logs, used to keep you signed in and to protect the service.
• Meta (Facebook) Ads data: if you connect a Meta account, an access token and data from the ad accounts you authorize — Business Managers, ad accounts, campaigns, ad sets, ads, creatives and performance metrics.
• Google Ad Manager data: revenue reports and targeting key-values from the Ad Manager networks of the organization operating Workmind, read through that organization’s service account.
• Content you upload: images, videos, ad texts, campaign spreadsheets and campaign batches you create.
• Preferences: interface settings such as theme and filters, stored in your browser or account.

3. Sign-in with Google (OAuth)

You can sign in to Workmind with your Google account using Google OAuth. Workmind only requests the basic scopes needed to identify you (openid, email and profile) and receives your name, email address and profile picture after you explicitly approve it on Google’s consent screen. We use this information only to create your Workmind account, authenticate you and show your name and picture in the app. Workmind does not request access to your Gmail, Google Drive, Google Ads or any other Google data.

4. Use of data from Google APIs

Workmind’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described in this policy (signing in and identifying you).
• We do not sell Google user data and do not use it for advertising, retargeting or to build user profiles.
• We do not transfer Google user data to third parties, except as necessary to provide the service, to comply with law, or as part of a merger or acquisition with prior notice.
• Humans do not read Google user data, unless you give consent, it is necessary for security purposes, or it is required by law.

5. Meta (Facebook) integration

The Meta connection happens only when you authorize Workmind through Facebook’s official login. Workmind requests the ads_read, ads_management and business_management permissions, used exclusively to read ad accounts and metrics, upload creatives and manage campaigns you choose to operate. Access tokens are stored encrypted on our servers and are never shown to other users.

6. How we use information

• To authenticate users and control which areas each member can access.
• To display spend, performance and revenue dashboards for the accounts you connected.
• To prepare campaigns: build campaign batches and bulk-import files, and upload creatives to the ad accounts you select.
• To translate and adapt ad texts and images when you use the translation tools.
• To keep the service secure, investigate errors and meet legal obligations.

We do not sell personal data and we do not use it for third-party advertising.

7. Sharing

We share data only with providers needed to run the service:

• Meta Platforms and Google, when you use the corresponding integrations.
• Artificial intelligence providers (such as Google Gemini and Anthropic), which receive only the ad texts and images you submit for translation — never login data, tokens or Google user data.
• Our hosting and infrastructure provider, where the servers and database run.
• Public authorities, when required by law or court order.

8. Storage and security

Data is stored on servers with restricted access. All traffic uses encrypted HTTPS connections, passwords are stored hashed, and third-party access tokens are encrypted at rest. Servers may be located outside Brazil; in that case international transfers follow the safeguards required by the LGPD.

9. Retention and deletion

We keep data while your account is active or while it is needed for the purposes above. Creatives moved to the trash are deleted automatically after the retention period. Technical logs are kept only as long as needed for security and legal obligations. When your account is deleted, your account data, connected tokens and associated records are deleted within 30 days, except where the law requires us to keep them.

10. How to revoke access and delete your data

• Google: remove Workmind’s access at any time at myaccount.google.com/permissions.
• Meta: disconnect your Meta account in Workmind’s Integrations page (tokens are deleted immediately), or remove Workmind under “Business Integrations” in your Facebook settings.
• Account and data deletion: email contato@mrcsrc.com from your account’s email address with the subject “Data deletion”. We will delete your data within 30 days.

11. Your rights

You may request confirmation of processing, access, correction, anonymization, portability or deletion of your data, information about sharing, and withdrawal of consent, by writing to contato@mrcsrc.com. We reply within 15 days.

12. Cookies

Workmind uses only essential session and authentication cookies, plus local browser storage for interface preferences. We do not use advertising or third-party tracking cookies.

13. Children

Workmind is a professional tool and is not intended for people under 18.

14. Changes

We may update this policy. The date at the top shows the current version, and relevant changes will be communicated to users. Use of Workmind is also subject to our Terms of Service.

15. Contact

WORKMIND PROVEDOR DE CONTEUDO LTDA — data protection contact: contato@mrcsrc.com.