Privacy Policy

Account information. When you sign up, we collect your email address and password (handled by our authentication provider, Supabase, which means we never see or store your password in plain text).

Content you provide. The description of your business you type in to generate posts, and, if you use the optional "Add your branding" section, your logo image, Instagram handle, brand color, and any phone numbers you enter. These are stored so your generated content can be edited and re-downloaded later.

Payment information. Payments are processed entirely by Stripe. We never see or store your card number; we only receive confirmation that a payment succeeded, its amount, and the tier purchased.

Usage and device information. IP address and basic request metadata (used to enforce the free-generation rate limit and prevent abuse), and standard analytics data (pages viewed, buttons clicked) collected through Google Analytics and the Meta (Facebook/Instagram) Pixel, described below.

• To generate your Instagram content: your business description is sent to Anthropic (the AI provider behind Claude) to write captions and headlines, and to OpenAI to generate a matching photo for each slide.
• To create, secure, and let you access your account.
• To process payments and unlock the content you purchased.
• To prevent abuse of the free generation tier (rate limiting, and an automated check that a submitted description describes a real business rather than spam or disallowed content).
• To measure how people find and use the site, and to measure the performance of our own ads, through Google Analytics and the Meta Pixel/Conversions API.
• To send you account and purchase-related communications.

We don't sell your data. We share the minimum necessary with the vendors that make the product work:

• Supabase: database, authentication, and file storage.
• Anthropic: generates the AI copy from your business description.
• OpenAI: generates each slide's background photo, using short descriptive phrases and the post's own generated text (never your raw business description).
• Stripe: payment processing.
• Meta (Facebook/Instagram) and Google: advertising and analytics. This can include a hashed version of your email address (never in plain text) used to measure ad performance, and standard identifiers like your IP address and browser cookies.

We use cookies set by Supabase (to keep you signed in), and, where configured, by Google Analytics and the Meta Pixel (to measure traffic and ad performance). You can block these in your browser's privacy settings; the product still works without them, though sign-in requires the authentication cookie.

We keep your account and generated content for as long as your account exists, so you can come back and re-download or edit it. You can request deletion of your account and associated data at any time by contacting us (see below).

You can access, correct, or request deletion of your personal information at any time by emailing privacy@mafinho.com. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA; we honor those requests regardless of where you're located.

Mafinho is a business tool and is not directed at, or knowingly used to collect data from, children.

If we make material changes to how we handle your data, we'll update the date at the top of this page and, where appropriate, notify you directly.

Questions about this policy? Email privacy@mafinho.com.