Last Updated: January 8, 2026
1. Introduction and Identity
BOOM (“we”, “us”, or “our”), operated by André Bartholomeu Fernandes, is a digital advocacy and influence infrastructure platform. We provide a SaaS solution that enables organizations to coordinate human influence through communities. Our core mission is to transform authentic human connections into measurable economic value.
2. Data Collection and Usage
To provide our services, specifically through our Ray-X Pipeline and Influence Infrastructure, we collect the following categories of data:
- User-Provided Information: Name, email, and professional affiliation.
- Authentication Data (OAuth Tokens): When you connect your social media accounts (LinkedIn, Instagram, TikTok, Facebook), we receive access tokens required to retrieve post-performance metrics.
- Content Metadata: We process public posts shared via our platform, including text, images, and videos, to ensure compliance with brand guidelines and campaign rules.
- Transaction and Financial Data: For participants using our Wallet/PIX module, we collect necessary KYC (Know Your Customer) information to facilitate rewards and micro-donations in compliance with local regulations.
3. How We Use Social Media API Data
Our use of information received from Social Media APIs adheres to the platform’s respective Developer Policies. We strictly implement:
- Deterministic Attribution: Using post IDs and metrics (impressions, engagement) to calculate the Generated Economic Value (GEV) of a post.
- Compliance and Brand Safety (Ray-X): Our AI-driven pipeline analyzes content to detect NSFW material, sensitive language, and alignment with specific campaign goals.
- No Commingling: We do not sell user social media data to third parties or use it to build shadow profiles.
4. Data Processing and Storage
- Infrastructure: All data is processed using AWS (Amazon Web Services) and MongoDB with high-level encryption at rest and in transit.
- AI Processing: Content analysis via Ray-X uses non-persistent processing for sensitive metadata. We do not store biometric data or individual private messages.
- Retention: We retain data only as long as necessary to provide influence metrics for the campaign or as required by law for financial transactions.
5. User Rights and Data Deletion
In compliance with LGPD (Brazil) and GDPR, users have the right to:
- Access, rectify, or export their data.
- Revoke API Access: Users can disconnect their social media accounts at any time via the Boom dashboard.
- Data Deletion: To request full account deletion and the removal of all associated tokens, users can contact [email protected] or use the “Delete My Data” feature in settings.
6. Third-Party Sharing
We share data only with:
- The Sponsoring Organization: To report the performance of their influence campaigns.
- Payment Processors: To execute PIX transfers and ensure anti-fraud compliance.
- Legal Authorities: When required to comply with regulatory obligations or valid legal processes.