Privacy Policy

Huginn Digital · Huginn Reply · Huginn Social · Last updated: 29 October 2026

Huginn Digital ("we") provides Huginn Reply, a customer-service automation platform that answers WhatsApp messages on behalf of small businesses ("clients"), such as gyms.

Data we process

• WhatsApp messages sent to a client's business number, and the replies sent back, including the sender's phone number and profile name.
• Business information our clients provide (prices, schedules, addresses) used to generate replies.

Why we process it

Solely to provide automated customer-service replies for the business you contacted, and to hand the conversation to a human when needed. We do not use message content for advertising and we do not sell data.

How it works

Messages are received through the WhatsApp Business Platform (Meta). Reply text is generated using Anthropic's Claude API. Conversation history is stored encrypted at rest on Amazon Web Services in São Paulo, Brazil (sa-east-1).

Retention

Conversation history is retained while the business remains a client, to provide context in ongoing conversations, and deleted upon client termination or verified deletion request.

Sharing

Data is shared only with the processors named above (Meta, Anthropic, AWS) as required to deliver the service, and with the business you messaged, who can read its own customer conversations.

Your rights

Under LGPD (Brazil) and GDPR (EU) you may request access, correction, or deletion of your personal data. Contact us or ask the business you messaged.

Huginn Social (Instagram)

Huginn Social, at app.huginndigital.com, prepares Instagram posts for our clients. The business owner reviews each post, edits, accepts or denies it, and Huginn Social publishes the accepted posts through Meta's Instagram API. You sign in with Facebook (Facebook Login for Business). We never see or store your Facebook or Instagram password.

Data we receive from Meta when you sign in

• Your Facebook user ID and name.
• The Facebook Pages you manage and the Instagram professional accounts linked to them: ID, name, username and profile picture.
• An access token that lets us publish to the accounts you choose. It is stored encrypted on our servers and never sent to your browser.
• The ID and link of each post we publish for you.

We do not read your private messages, comments, followers or insights, and we do not post anything to Facebook.

Data you give us

• Information about your business (description, tone, words to avoid, call to action, brand colours and logo) and how often and when you want to post.
• Photos and videos you upload for your posts.
• The posts we prepare (images, videos, captions, hashtags, music choice), your edits, and your review decisions with the time and the person who made them.

How we use it

Only to prepare, show and publish your posts, and to keep a record of who accepted what. Captions may be drafted with Anthropic's Claude API from the information you gave us. We do not use your data for advertising, we do not sell it, and it is never used to train AI models.

Where it is stored and who processes it

Meta (sign-in and publishing), Vercel (the app), Supabase on Amazon Web Services in São Paulo, Brazil (database and media, encrypted at rest) and Anthropic (caption drafts). Media for posts that are not yet published is only shown, through short-lived links, to people with access to that account.

Retention

We keep your data while your account is connected. When you disconnect or ask for deletion, we delete it within 30 days. Posts already published stay on your Instagram account; you can delete them there.

Deleting your Huginn Social data

You can ask us to delete all data we hold about you and your Instagram accounts at any time, in any of these ways:

1. In the app: app.huginndigital.com → Conta → "Desconectar e apagar dados".
2. On Facebook: Settings & privacy → Settings → Business integrations → Huginn Publicator → Remove. We are notified and delete your data.
3. By email: write to [email protected] with the subject "Delete my Huginn Social data" and your Instagram username.

We delete your access tokens immediately, and all other data (business information, media, posts, review history) within 30 days, and confirm by email. You can also revoke our access yourself in Facebook's Business integrations at any time.

Contact

Huginn Digital — [email protected]
Maricá, Rio de Janeiro, Brazil