This policy explains what data BG Coding ("we") collects when you use the bgcoding.com website or the admin panel, or interact with the BG Coding and @guilherme.coding profiles and automations on Instagram, and what we do with it. We follow the EU General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD, Law 13,709/2018).
1. Data we collect
- Website forms: your name, phone (WhatsApp) number, email, company and the project description you send us.
- Direct contact: the content of messages you send us by email or, from our app development page (/apps), on WhatsApp.
- Instagram interactions: when you comment a keyword (for example, "APP100K") on one of our posts, Meta shares with us your username, account ID, the comment text and the post it was made on. If you reply to our direct message, we receive the content of that conversation.
- Browsing data: cookies and identifiers from the measurement tools described in section 4, according to your choice in the cookie banner.
2. Why we use it and on what legal basis
- Replying to your request and preparing a proposal for an app, website or software: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
- Sending the direct message you asked for by commenting the keyword on Instagram: your request and our legitimate interest in replying (art. 6(1)(f)).
- Organizing our leads and measuring the results of our posts: legitimate interest (art. 6(1)(f)).
- Measuring visits and ad performance with cookies: your consent (art. 6(1)(a)), which you can withdraw at any time.
We do not sell your data or share it with third parties for their own marketing.
3. Instagram and Meta platforms
Our Instagram automations only use Meta’s official APIs (Instagram API), with the permissions the professional account grants to our app. We only receive data from people who voluntarily interact with our posts or messages. The use of these APIs is subject to Meta’s Terms and Privacy Policy (facebook.com/privacy/policy).
4.1 Ad measurement on the e-commerce form (Meta)
When you submit the e-commerce strategy-call form (bgcoding.com/ecommerce and its English and Spanish versions) with marketing cookies enabled, BG Coding sends a "Lead" event to Meta Platforms (Facebook and Instagram) through the Meta Pixel in your browser (only with your marketing-cookie consent) and through Meta’s Conversions API from our server.
Data sent by our server:
- email address, phone number, first name and country, always pseudonymised with SHA-256 hashing before leaving our server;
- IP address and browser user agent;
- Meta cookie identifiers (_fbp and _fbc) or the ad click ID (fbclid) from the ad link;
- an internal lead identifier, also hashed.
Purpose: measuring and improving our own ads on Meta (attribution, conversion measurement and campaign optimisation). Later status updates of your request (contacted, qualified, closed, call scheduled) may also be sent as events with the same hashed identifiers, so that our ads can optimise for quality.
Legal basis: your marketing-cookie consent (or, where the banner rules allow it, our legitimate interest, which you can object to at any time under "Cookie settings" in the footer). Without that basis, nothing is sent to Meta from our server. You can withdraw your consent at any time by writing to contact@bgcoding.com. Meta processes this data under its own policy (https://www.facebook.com/privacy/policy/).
5. Where data is stored and for how long
Contact data is stored on Supabase infrastructure (São Paulo region, Brazil), with access restricted to the BG Coding team by login and password. We keep these records while there is a business relationship, or for up to 24 months after the last interaction, and then delete or anonymize them.
Transfers outside the EU: we are based in Brazil, and Meta, Google and Microsoft may process browsing data in other countries, including the United States, under their own terms and international transfer mechanisms (such as Standard Contractual Clauses).
6. Your rights
You can ask at any time to access, correct, port or delete your data, restrict or object to processing based on legitimate interest, and withdraw your consent. Just write to contact@bgcoding.com. You also have the right to lodge a complaint with the data protection authority in your country.
7. How to delete your data
Send an email to contact@bgcoding.com with the subject "Data deletion", including the Instagram username, email or WhatsApp number you used to contact us. We confirm the deletion within 7 business days. You can also remove our app’s access under Instagram → Settings → Website and apps.
8. Children
Our website and services are aimed at businesses and professionals. We do not knowingly collect data from anyone under 18.
9. Changes
We may update this policy to reflect legal changes or changes to our services. The date at the top shows the current version.
10. Data controller and contact
The data controller is BG Coding (bgcoding.com). For questions and requests about your data, email us at contact@bgcoding.com.