DMThe Dream Makers

Legal information

Privacy Policy

This policy explains how The Dream Makers handles information in connection with its website and private internal platform, including OSCAR-IA.

1. Scope

The Dream Makers operates this website and the privately developed OSCAR-IA business management platform. OSCAR-IA is an internal-use tool and is not offered to the public, clients or unrelated third parties.

2. Information we process

Depending on the function used, we may process:

  • basic account and authentication information needed to identify the authorised user;
  • OAuth authorisation tokens required to connect to Google services;
  • Google Ads account identifiers, campaign settings, keywords, advertisements, recommendations and performance statistics;
  • Meta advertising account, Facebook Page and Instagram professional account identifiers, access tokens, posts, media, comments, messages, insights and campaign statistics;
  • WhatsApp Business messages and media sent to or from the authorised business number, together with delivery status and operational metadata;
  • internal reports, campaign drafts and optimisation recommendations generated from authorised advertising data; and
  • security and operational records such as access events, errors and approval history.

This website does not intentionally collect sensitive personal information from the general public.

3. How information is used

Information is used only to operate, secure and improve our internal business tools; authenticate authorised access; retrieve and present Google and Meta business information; prepare reports, drafts, media and recommendations; communicate through the authorised WhatsApp Business account; and execute external account changes that have been explicitly approved by the authorised user.

4. Google user data and Limited Use

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only to provide or improve user-facing features that are prominent in OSCAR-IA. It is not sold, used for personalised advertising, transferred to data brokers or used to create advertising profiles unrelated to the authorised internal purpose.

5. Meta, Instagram and WhatsApp data

OSCAR-IA uses official Meta Platform APIs to read authorised advertising and account information, prepare and publish approved content to business-owned Facebook and Instagram accounts, and send or process messages through the authorised WhatsApp Business account. This information is used exclusively for the internal administration of TOAST Cafe Bar & Food Hall and The Dream Makers.

Meta, Instagram and WhatsApp data is not sold, rented, used to create unrelated advertising profiles or shared with unrelated third parties. OSCAR-IA is not affiliated with or endorsed by Meta Platforms, Inc.

6. Sharing and disclosure

We do not sell or rent personal information or Google user data. Information may be processed by infrastructure providers strictly as necessary to host, secure or maintain the platform, subject to appropriate confidentiality and security obligations. We may also disclose information when legally required or when necessary to protect rights, security and platform integrity.

7. Storage, retention and deletion

OAuth tokens and application credentials are stored in protected server-side systems and are not exposed publicly. Information is retained only for as long as it is reasonably needed for the internal business purpose, security, accounting, legal compliance or recovery from operational incidents. Data and tokens are deleted or anonymised when no longer required, subject to applicable legal obligations.

To request deletion of information associated with Meta, Instagram, WhatsApp or OSCAR-IA, email oscargoulart@gmail.com with the account identifier and the request. We will verify authority, revoke applicable access, and delete or anonymise stored data unless retention is legally required. Access may also be revoked directly through the relevant Google or Meta account settings.

8. Security

We use reasonable administrative and technical safeguards designed to prevent unauthorised access, disclosure, alteration or loss. Access is restricted to authorised internal users, secrets are protected on the server and connections use official Google and Meta authorisation mechanisms. No method of electronic storage or transmission can be guaranteed to be completely secure.

9. User control and revocation

The authorised user may review or revoke OSCAR-IA's access to their Google Account through the Google Account connections page. Revocation prevents future API access but may not automatically delete records that must be retained for legitimate security or legal purposes.

10. Children

The website and internal platform are intended for business use and are not directed to children.

11. Changes to this policy

We may update this policy when our practices, legal obligations or platform functions change. The effective date shown on this page will identify the latest version.

12. Contact

Questions or requests concerning this policy may be sent to oscargoulart@gmail.com. We may need to verify the requester's identity and authority before disclosing, correcting or deleting protected information.