Privacy Policy

Last updated: November 6, 2026 · Versão em português

anftri studio is anftri's platform to create, schedule and publish content to your own social media accounts, answer comments and track ads and metrics. It is used by the people and businesses who create an account in studio (content creators, hosts, small businesses and teams), each in their own workspace, which can have several people. This page explains what data studio stores, why, who it is shared with, for how long and how to delete it.

Who is responsible

anftri is the controller of the data processed in anftri studio. For anything about your data, email suporte@anftri.com.

How a social account is connected

A person on the team connects the account through the network's own login (OAuth). The network password is typed only on the network. studio never sees or stores it.
Before the login, studio shows each permission it asks for and why. The network shows the list again on its consent screen.
The network gives studio an access token. With it, studio reads and publishes only what is described below.
None of the data below exists in studio before someone connects the account.

What we collect from each network

Instagram

Through the Instagram API with Instagram Login:

Profile: id, username, name, profile picture and account type.
Publications: the photos, videos and captions the team creates in studio to publish.
Comments on the account's posts, for the Comments screen and the reply rules: id and username of the commenter, the text and the time.
Private replies (direct messages) sent by comment rules.
Account and post metrics: followers, reach, views, interactions, likes, comments, shares and saves.

Threads

Through the Threads API:

Profile: id, username, name and profile picture.
Publications: the posts the team creates in studio.
Replies to the account's posts, for the Comments screen and the reply rules: who replied, the text and the time.
Metrics: views, likes, replies, reposts, quotes and followers.

TikTok

Through TikTok Login Kit, the Display API and the Content Posting API:

Profile: open_id, username, display name and avatar.
Account stats: followers, following, likes and number of videos.
The account's list of videos with views, likes, comments and shares for each, for the metrics in Analytics.
The videos and photos the team publishes. They only go to TikTok after a person confirms posting on screen.
The notices TikTok sends studio about the account and its posts (for example, when a post becomes public or when the person removes the app). When the person removes the app on TikTok, the account and everything that came from it are deleted immediately.

X

Through the X API:

Profile: id, username, name and profile picture.
The account's public counts, such as followers and number of posts.
The posts the team publishes through studio and the public metrics of each.
When a post is deleted or made private on X, its metrics leave studio at the next sync (within 24 hours).

Meta Ads

Through Facebook Login, with the ads_read and ads_management permissions:

Identification: the person's app-scoped id provided by Facebook, and their name.
The list of ad accounts the person can access (id, name, currency, status and time zone), for the account picker.
Campaigns, ad sets, ads and their metrics. All of this is read live when someone opens the screen and is not stored in studio.
Changes made through studio (pause, activate and change the daily budget) are logged with the before and after values and who made them.

Studio accounts

Name and email of each person on the team.
The password, stored only as an scrypt hash. Nobody can read the password, not even the team.
Login sessions: when they expire and the browser used.

How we use it

Only for studio's features: publishing what the team creates, answering and organizing comments, applying reply rules, showing metrics in Analytics and tracking and adjusting ads.
Nothing is published unless a person on the team creates the post and confirms posting or scheduling.
We don't sell data. We don't build advertising profiles. We don't use data to show ads to anyone.

With the network itself, to publish or read what the team asked for.
With the providers that run the infrastructure: the server that hosts studio, a VPS in the United States, and Cloudflare, which handles DNS and stores backups. Because the server is in the United States, data is transferred outside Brazil.
Only for anftri's own workspace, internal failure notices go to anftri's team WhatsApp group, with the post title and the account username. Nothing from other workspaces is sent there.
Automations of the workspace itself, such as AI agents the team connects through studio's API or MCP, can read and create content in that workspace. They use keys the team creates and can't reach other workspaces.
Other than that, nobody receives data from studio.

Security

Network tokens are stored encrypted in the database with AES-256-GCM.
All access to studio goes over HTTPS.
Each workspace has roles: admin, editor and viewer. Each person only sees and does what their role allows.
API keys and passwords are stored only as hashes.

How long we keep it

A daily cleanup deletes whatever is past its period.

Data	Period
Comments and replies received, with the reply sent by a rule	180 days after receipt
Posting history of each post (attempts, errors and network confirmations)	365 days
Metrics collected from accounts and posts	2 years after collection
Log of changes made to ads	2 years
Login sessions and logins in progress	Deleted once expired
Log of deletion requests (code, date and number of accounts deleted)	2 years, as proof
Posts, photos and videos created in studio	Until someone on the team deletes them
Network access tokens	Discarded immediately when the account is disconnected
Backups	Up to 14 days

When an account is deleted, the periods above no longer apply to it: everything that came from the account is removed immediately. Only backups take up to 14 days to clear.

How to delete your data

Disconnecting an account in Accounts discards the tokens immediately. History is kept.
Delete data, in Accounts, immediately deletes the account and everything that came from it.
Removing the app in Instagram, Facebook or Threads settings makes Meta notify studio, and the account and everything that came from it are deleted immediately.
Removing the app in TikTok settings makes TikTok notify studio, and the account and everything that came from it are deleted immediately.
On X, removing the app cuts access immediately. To delete what was already collected, use Delete data or email suporte@anftri.com; we handle it within 24 hours.
Posts deleted on the network itself leave studio's metrics at the next sync.
Backups are cleared within 14 days.

The step-by-step for each network is on the data deletion page.

Your rights

Under Brazil's General Data Protection Law (LGPD, Law 13,709/2018), you can request access to your data, correction, deletion, portability, information about who we share it with and withdrawal of consent. This also applies to people who commented on or replied to a post of an account connected to studio.

Email suporte@anftri.com. We reply within 15 days.

Contact

anftri · suporte@anftri.com