SmartFlow360 ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, and disclose personal information in connection with our services.

By using SmartFlow360, you agree to the practices described in this policy.

SmartFlow360 is a digital marketing management platform operated by Wagner Garcia and Thiago Neves, based in Queensland, Australia. We provide social media management, advertising strategy, and content workflow tools for businesses and agencies.

Contact: privacy@smartflow360.io

We may collect the following categories of personal information:

• Account information: Name, email address, password (hashed), and profile details provided during registration.
• Client data: Business names, contact details, campaign briefs, brand assets, and marketing materials uploaded to the platform.
• Usage data: Pages visited, actions performed within the platform, timestamps, and feature interactions.
• Technical data: IP address, browser type, device information, and session identifiers.
• Social media data: Content, performance metrics, and account identifiers accessed through authorised Meta (Facebook/Instagram) API connections.

We use collected information to provide and improve the platform, manage client accounts and campaigns, generate advertising strategies and reports, communicate service updates, comply with legal obligations, and detect and prevent fraud or unauthorised access.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

SmartFlow360 integrates with the Meta for Developers API (Facebook and Instagram Graph API) to enable social media management features. By connecting a Meta account, you authorise SmartFlow360 to access your Pages and Business accounts, create and publish content on your behalf, and retrieve engagement metrics and ad performance data.

Our use of data obtained through the Meta API complies with Meta's Platform Terms. We do not share Meta-derived data with third parties except as required to deliver our services. Access tokens are stored securely and you may revoke access at any time through your Meta account settings.

We may disclose your personal information to trusted third-party service providers bound by confidentiality obligations, Meta Platforms Inc. as required to operate API-connected features, legal authorities where required by law, and in the event of a business transfer subject to equivalent privacy protections. We do not disclose personal information to overseas recipients without taking reasonable steps to ensure compliance with the Australian Privacy Principles.

Your information is stored on secure servers. We implement industry-standard security measures including HTTPS/TLS encryption, hashed password storage, access controls, and regular security reviews. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches (NDB) scheme.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to access, correct, and request deletion of your personal information, interact with us anonymously where lawfully possible, and lodge a complaint with us or escalate to the OAIC if unresolved.

To exercise any of these rights, contact us at privacy@smartflow360.io. We will respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated date. Continued use of SmartFlow360 after changes constitutes acceptance of the updated policy.