Privacy Policy
Effective July 26, 2026. What data we collect, how we use it and how to request deletion — no fine print.
1. Who operates the site
- Brasileiros FL is operated by its administration, established in Palm Beach County, Florida, United States ("we", "us"), responsible for the data described in this policy.
- For any privacy matter, use the site's “Contact” form.
2. Data we collect
- Account: the email address you provide when signing in via a link sent to your email (magic link); or, when Google sign-in is enabled, the name, email and profile photo received from Google. We never receive your password from that provider.
- Advertisers: business and owner name, phone, WhatsApp, email, Instagram, service description, business hours, languages, any professional license number provided, logo and work photos.
- Reviews: name, contact info (email and phone) and, for negative reviews, the reason and an explanation of what happened. The administration knows the full identity of every reviewer, even when the site displays only a partial name.
- Private complaint evidence: receipts, conversations and photos sent to the administration during an investigation — visible only to the administration and never published.
- Payment: when the online subscription is active, card data is collected, processed and stored by Stripe, Inc. (PCI-DSS certified). The site does not keep card numbers on its servers; we receive only subscription identifiers, the card's last 4 digits and the payment status.
- Cookies: we use only strictly functional cookies (keeping your sign-in session and remembering your language). We do not use advertising cookies or cross-site tracking.
3. How we use it
- Operating the directory: displaying listings, county and category searches and the 0–5 score.
- Moderating reviews: confirming identity, investigating complaints and ensuring the right of reply.
- Billing listing plans: by direct arrangement with the administration or, when purchased through the site, via the Stripe subscription — with billing starting only after listing approval, monthly renewal and handling of cancellation and failed payments.
- Communicating about your account and listing: approval, payment and notices about changes to this policy or the Terms.
- We never sell or rent your personal data to anyone.
4. Who we share it with
- Providers that run the site on our behalf: Supabase (database, authentication and photo storage, with servers in the United States), Vercel (hosting), Stripe (payments) and Google (authentication only, when you choose to sign in with Google).
- These providers process the data only to deliver the contracted service and do not use it for their own purposes.
- Public authorities, only when required by law, court order or to protect the rights, safety and integrity of the platform.
- We do not sell personal data and we do not share your data with advertisers for marketing purposes.
5. What is public and what is private
- Public: the advertiser's profile (name, business contacts, photos, score) and approved reviews, shown with the reviewer's partial name.
- Private: complaint evidence (receipts, conversations, photos) and reviewers' full identification data — visible only to the administration.
- The administration knows the full identity of every reviewer, even when the site displays only a partial name.
6. Data deletion
- You may request deletion of your account and data at any time, in 3 steps: (1) use the “Contact” form, write “delete my account” as the subject and provide the email linked to the account; (2) we will confirm your identity to protect you against fraudulent requests; (3) we will delete the account and associated data within 30 days and send you a confirmation.
- If you signed in with Google, this same procedure deletes the data received from the provider (name, email and profile photo). You can also disconnect the site in your Google account settings.
- Deletion does not cover records the law requires us to keep, nor the minimum administrative history needed for community safety (for example, ban records).
- Payment data stored by Stripe follows Stripe's retention policy and applicable tax and accounting obligations.
7. Your rights
- Access and correct your data, update your listing information and close your account at any time.
- Request deletion of your data — the step-by-step guide is in the “Data deletion” section above.
- Channel to exercise any right: the site's “Contact” form. We will respond within a reasonable time.
8. Security and incidents
- We adopt reasonable technical and organizational security measures to protect your data, including encryption in transit and at rest and restricted administration access to private data.
- Payment card data is processed and stored by Stripe, Inc. (PCI-DSS certified); we do not store card numbers on our servers.
- In the event of a security incident affecting your personal data, we will notify those affected in accordance with the Florida Information Protection Act (Fla. Stat. § 501.171) and other applicable laws — as a rule, within 30 days of determining the incident.
- Records that are no longer needed are securely destroyed or anonymized.
9. How long we keep data
- Account and listing data is kept for as long as the account or listing exists. After closure, we delete or anonymize the data within 90 days, unless the law requires retention.
- The administrative history (decisions, suspensions, bans and complaint evidence) is kept, with restricted access, for the safety of the community, even after an advertiser leaves.
10. Minors
- The service is intended for people 18 or older — to advertise, review and create an account.
- We do not knowingly collect data from children under 13 (COPPA). If we learn that a child's data is in our systems, it will be deleted immediately.
11. “Do Not Track” signals
- The site does not track users across other sites and shows no behavioral advertising; therefore it does not change its behavior in response to browser “Do Not Track” signals — there is no tracking to turn off.
12. Changes to this policy
- This policy may be updated. The current version is always on this page, with the effective date at the top.
- Material changes will be announced prominently on the site and, when appropriate, by email to registered users, before taking effect.
Effective date: July 26, 2026. In case of conflict between the Portuguese and English versions, the English version prevails.