This is a courtesy translation. In case of any conflict, the Portuguese version prevails.
E-migrantes ("we") respects your privacy. This Policy explains what personal data we collect, how we use it, who we share it with and what rights you have. It applies to e-migrantes.com and any associated service.
1. Data controller
The entity responsible for processing your personal data is the E-migrantes team. For any privacy question, write to geral@e-migrantes.com.
2. What data we collect
- Account data — email, display name, profile photo (when uploaded), authentication method (email/password, magic link or Google OAuth).
- Business data — for verified owners: business name, address, phone, WhatsApp, website, photos, opening hours, offerings, coupons.
- Usage data — pages visited, listings viewed, searches performed, basic interactions (favourites, reviews).
- Messages — the content of conversations you start with businesses through the platform chat, stored so both parties can consult the history.
- Business data from public sources — to build the directory, we import publicly available business information (name, address, phone, website, opening hours and photos, via Google Places). We do so on the basis of our legitimate interest in building a directory useful to the community. If any of this data identifies you (e.g. a sole-trader business), you can claim the profile to manage it, correct it, or request removal at geral@e-migrantes.com — we remove it, no questions asked.
- Approximate location — only with your explicit consent, to show you nearby businesses. Precision is that of the browser (city-level by default).
- Technical data — IP address, browser type, operating system, language, referrer, cookies (see section 5).
3. What we use the data for
- Operating and improving the platform.
- Authenticating accounts and keeping sessions secure.
- Personalising search results by proximity and origin.
- Showing relevant advertising (including, in the future, Google AdSense network ads — see section 6).
- Preventing fraud, abuse, spam and violations of the terms.
- Meeting legal obligations (invoicing, tax retention for paid advertising requests).
4. Legal basis (GDPR)
- Performance of a contract — registration, authentication, owner listing management.
- Consent — geolocation, advertising and analytics cookies, marketing communications.
- Legitimate interest — fraud prevention, platform security, service improvement, directory built from publicly available business information.
- Legal obligation — accounting and tax records.
5. Cookies
We use essential cookies (session, location preferences, consent) and, with your consent, analytics and advertising cookies. See the details in the Cookie Policy.
6. Analytics and advertising
With your consent (the "Accept all" option in the cookie notice), we use Google Analytics 4 (visit and interaction measurement, with IP anonymisation) and Microsoft Clarity(heatmaps and anonymous session recordings — mouse movement, clicks and scrolling, with automatic masking of sensitive content). If you choose "Essential only", neither service is loaded.
When we activate advertising, Google and partners may use cookies to serve ads based on previous visits to this site. Google uses the DART cookie, which enables serving ads based on your visits to other sites on the Internet. You can opt out at adssettings.google.com.
7. Data sharing
We share personal data only with:
- Supabase (database, authentication, image storage) — European provider, sub-processor.
- OpenAI— when you use AI features (e.g. "Enhance photo with AI"), the source content is sent to the OpenAI API. We do not send personal identifiers.
- Google — Google Analytics (active, per your consent) and AdSense once advertising is activated.
- Microsoft — Clarity (experience analytics, active per your consent — see section 6).
- Public authorities — only when legally required.
We never sell your personal data.
8. International transfers
Some processors (e.g. OpenAI, Google, Microsoft) may process data outside the EU. When this happens, we ensure adequate safeguards (European Commission standard contractual clauses).
9. Retention
- Account data: while the account is active + 90 days.
- Listing data: while the page is published + 12 months.
- Technical logs: 90 days.
- Invoices and tax records: 10 years (legal obligation).
10. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your data, to portability, and to withdraw consent at any time. To exercise these rights, write to geral@e-migrantes.com. You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD) or with the data protection authority of your country of residence. For users outside the EU (e.g. Brazil/LGPD, United Kingdom/UK GDPR), we apply the same principles and the same rights.
11. Security
We use encryption in transit (TLS), encryption at rest in the database, hardened authentication for administrators and role-based access control. Still, no system is 100% secure — if you suspect a breach, contact us immediately.
12. Children
E-migrantes is not intended for anyone under 16. If we learn we have collected data from a minor without parental consent, we delete it.
13. Changes to this policy
We may update this Policy. When we do, we update the date above and, for significant changes, notify you by email.