1. Who we are
BlogAI Pro is an AI-powered content creation, optimization and publishing platform built and operated by Monzart (Júnnior Monzart).
This policy applies to https://monzart.com.br, the Android app (br.com.monzart.blogai) and the official API.
2. Data we collect
We only collect what is needed to run the service:
- Account data: name, display name, email, birth date (optional), language, country and time zone.
- Profile picture (avatar), when you upload one.
- Generated content: articles, pages, clusters, schedules, custom links and Smart Profile preferences.
- Usage data: in-app activity logs, credit consumption and generation history.
- Payment data: plan, subscription status, transaction history and gateway identifiers. We never store card numbers.
- Technical data: IP address, device type, browser, language and error logs required for security and support.
3. Why we collect it
- Create and maintain your account and authenticate access.
- Generate, store, optimize and publish your content.
- Manage credits, plans, billing and referral rewards.
- Display performance metrics for your blog.
- Prevent fraud, abuse and misuse of the platform.
- Provide support and announce relevant service changes.
4. How we store it
Data is hosted on managed infrastructure (PostgreSQL database and object storage) encrypted in transit (HTTPS/TLS) and at rest.
Records are isolated per user through row level security (RLS). Administrative operations run only on the server, never in the browser.
5. Third-party integrations
We share data only with providers required by features you enable:
- Google Sign-In (OAuth): we use your name, email and public picture for authentication only. We never see your Google password.
- Blogger API: with your authorization we list your blogs and publish the articles you request. You can revoke access anytime.
- Google Search Console: read-only access to performance metrics (clicks, impressions, CTR and position) for properties you authorize.
- Stripe: international payment processing (USD). Card data is handled directly by Stripe.
- SyncPay: BRL payment processing (Pix). Financial data is handled directly by the provider.
- AI providers: receive only the topic and instructions required to generate text and images.
- Google AdSense: may display ads in free areas of the platform, per Google policies.
6. Artificial Intelligence
When generating an article, image or page, we send the AI provider only the required instructions (topic, keywords, style and Smart Profile preferences).
We do not use your private content to train our own models. Generated content belongs to you, as stated in the Terms of Use.
7. Avatar uploads
Uploaded images are stored in a dedicated bucket bound to your account. You can replace or remove them anytime in My Profile.
9. Credits and payments
We record credit balance, per-operation consumption and purchase history for transparency, support and tax obligations.
We have no access to full card data: it is processed exclusively by the payment gateways.
10. Security
- Encrypted communication (HTTPS/TLS) on every request.
- Per-user data isolation with database RLS policies.
- Secret keys stored server-side only, never exposed to the app.
- Short-lived authentication tokens with automatic refresh.
- Audit logging for sensitive operations.
11. Your rights (GDPR / LGPD)
- Confirm processing and access your data.
- Correct incomplete or outdated data directly in My Profile.
- Request portability or a copy of your data.
- Withdraw consent and disconnect integrations anytime.
- Request deletion of your account and associated data.
12. Data deletion
You can delete your account anytime in My Profile → Security → Delete my account.
Deletion removes your profile, articles, pages, schedules, connections, avatar, invite codes and activity history. Financial records required by law are anonymized and kept only for the legal retention period.
You may also request deletion by email at junnior.monzart.santtos1997@gmail.com; we respond within 30 days.
13. Retention
We keep data while your account is active. After deletion, data is erased immediately, except anonymized financial records required by law.
14. Children
The service is not intended for children under 13. Accounts identified as such will be removed.
15. Contact
Privacy questions: junnior.monzart.santtos1997@gmail.com. Data controller: Júnnior Monzart (Monzart).