postSOMA
The LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018) guarantees that you know how your data is used and that you decide on whatever depends on your will. This document summarizes that. The full details are in the Privacy Policy.
1. What you accept by checking the box
By checking the "LGPD Consent" ("Consentimento LGPD") box at sign-up, you declare that you:
- were informed, prominently, that the processing of the data listed in section 2 is a condition for using postSOMA (LGPD, art. 9, § 3);
- have read the Privacy Policy and know who the data is shared with, how long it is kept, and how to exercise your rights;
- agree to the processing that depends on consent listed in section 4, under the conditions described there.
This box does not authorize any other use. If one day we want to use your data for a new purpose that depends on consent, we will ask separately and specifically.
2. Data needed to use postSOMA
| Data | What for |
|---|---|
| Full name and e-mail | Create the account, log in, send codes and notices |
| Country, CPF (Brazilian individual taxpayer number) or CNPJ (Brazilian company taxpayer number) (required in Brazil) | Identify who is responsible for the account, prevent fraud and fake accounts and, when there is a paid plan, issue an invoice |
| Date of birth | Confirm you are 18 or older |
| CEP (Brazilian postal code) (optional) | Complete your billing details, if you want |
| Network accounts you connect and encrypted tokens | Publish and run automations on your networks |
| Posts, media, and automations | Store, schedule, and send what you create |
| IP, date, time, and platform | Security, proof of acceptances, and access records required by the Marco Civil da Internet (Brazilian Internet Civil Rights Framework) |
Without this data, it is not possible to provide the service. You may choose not to provide it but, in that case, you will not be able to use postSOMA (LGPD, art. 18, VIII).
3. What does not depend on your consent
Most of the processing has another legal basis, explained in the table in section 4 of the Privacy Policy:
- Performance of a contract (art. 7, V): account, login, connection to networks, posts, and automations.
- Compliance with a legal obligation (art. 7, II): access records for 6 months, proof of acceptances, and handling your rights.
- Legitimate interest (art. 7, IX): security, prevention of fraud and of use by minors.
- Regular exercise of rights (art. 7, VI): defense in legal proceedings.
That is why withdrawing a consent does not stop this processing. To end it, you can delete your account, and we will delete everything the law does not require us to keep.
4. What depends on your consent
| Processing | How you choose | How to turn it off |
|---|---|---|
| Device notifications (posts made, failures, required actions, reminders) | Through the notification permission on iPhone, iPad, Mac, or Android | In the notification settings of the device or the app |
| postSOMA news e-mails | Optional, separate box, which comes unchecked | Through the link in any news e-mail or at contato@digitaisoma.com |
Biometrics (Face ID, Touch ID, and similar). It is optional and you turn it on in the app. The check happens only on your device: postSOMA receives only the answer "confirmed" or "not confirmed" and never receives your fingerprint, your face image, or any biometric data. You can turn it off in the app or in the device settings.
Refusing or withdrawing these consents does not prevent you from using postSOMA. Withdrawal applies from then on; what was done before remains valid (LGPD, art. 8, § 5).
5. Your rights
You can ask, at no cost (LGPD, art. 18), for:
- confirmation that we process your data and access to it;
- correction of incomplete, wrong, or outdated data;
- anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the law;
- portability of the data to another provider;
- deletion of data processed based on consent;
- information about who we share your data with;
- information about the possibility of not giving consent and its consequences;
- withdrawal of consent;
- review of decisions made solely by automated means (art. 20).
6. How to exercise your rights
- In the app, under Account and privacy ("Conta e privacidade"; in the web app, under "Contas"): use "Download my data" ("Baixar meus dados") to receive a copy, disconnect or pause networks, turn off notifications, or delete the account.
- By e-mail, to contato@digitaisoma.com, with the subject "Privacidade postSOMA" (postSOMA Privacy). Preferably send it from the account's e-mail.
- We may ask for confirmation that the request is yours, with the minimum of data. We never ask for your password.
Deadlines: confirmation and simplified access immediately; complete declaration within 15 days (LGPD, art. 19); other requests as soon as possible, with an explanation if we cannot comply.
If you are not satisfied, you can complain to the ANPD (Brazilian Data Protection Authority) (gov.br/anpd).
7. Data Protection Officer (DPO)
Caíque Patti da Gama, data protection officer of DIGITAI SOMA LTDA. Contact: contato@digitaisoma.com.
8. Record of your acceptance
We keep proof of your acceptance: document, version (2026-11-04), date, time, IP address, and platform. This record cannot be edited, is kept while the account exists and for 6 more months after deletion, tied to an identifier that does not directly reveal who you are. If this document changes in an important way, we will ask for new acceptance.
↑ Back to top