Privacy policy

Who we are

Aldeia is a directory of family services in Florianópolis, run by Edra Grey. For any question about personal data (informal DPO), write to contato@somosaldeia.com.br.

What data we collect

We collect only what each feature needs:

• Account: email (magic-link login via Better Auth). Optional: name, home neighborhood, family stage (pregnancy, baby, etc).
• Submissions: businesses, events, swaps, questions and photos you publish — content, your author identity, and the neighborhood.
• Semanal newsletter: email and (optional) home neighborhood for regional segmentation. Confirmed via double opt-in.
• Business claim: the business email (public on Google Maps) used to confirm you operate the page.
• Technical logs: Vercel (hosting) records IP, user-agent and request path for operations and security.
• Analytics and marketing (opt-in): if you accept on the cookie banner, we load Vercel Analytics/Speed Insights (anonymous Core Web Vitals) and the Meta Pixel (anonymous PageView to measure campaigns). Full list at Cookies.

Why we collect (legal basis)

• Performance of contract (LGPD art. 7, V): to maintain your account, process claims, and display the submissions you publish.
• Consent (art. 7, I): Semanal newsletter, analytics (Vercel Analytics) and marketing (Meta Pixel). You can withdraw consent at any time — click "Manage cookies" in the footer.
• Legitimate interest (art. 7, IX): operational logs, anti-spam protection (Cloudflare Turnstile) and transactional communication about your account. Also covers strictly necessary cookies (login session, locale preference).
• Legal compliance (art. 7, II): responding to court orders and LGPD subject-access requests.

Who we share with

None of the partners below receive data beyond what's strictly necessary for their function:

• Vercel Inc. (USA) — site hosting, image storage (Vercel Blob), and with consent: Analytics and Speed Insights.
• Meta Platforms Ireland Ltd. — when you accept marketing cookies, we send an anonymous PageView event to the Meta Pixel (ID 1544222417412344) to measure Instagram/Facebook campaign reach. What's shared: page URL, browser/device metadata. What's NOT shared: email, phone, name, or any form data (Automatic Advanced Matching is disabled). Meta acts as a joint controller for ad-attribution purposes.
• Neon (AWS, sa-east-1, São Paulo) — Postgres database storing your account and submissions. Processor.
• Brevo (EU) — magic-link login email, transactional notifications and Semanal newsletter. Processor.
• Cloudflare (global) — Turnstile (anti-spam protection on forms). Processor.
• OpenStreetMap — map tiles loaded by your browser when you open a page with a map.

We don't sell personal data. We don't use your data to train AI models.

How long we keep it

• Account: while it exists. You can request deletion at any time.
• Published submissions: kept indefinitely as directory content unless you ask for removal.
• Newsletter subscriptions: until you unsubscribe (link in every email).
• Technical logs: per Vercel's policy (~30 days).

Your rights (LGPD art. 18)

You can request, at any time:

• Confirmation that we process your data, and access to it;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary data;
• Portability to another service provider;
• Deletion of data processed under your consent;
• Information about who we share with;
• Withdrawal of consent.

To exercise any right, write to contato@somosaldeia.com.br — we respond within 15 days. Business owners can request listing removal at the same address.

Cookies

See the dedicated Cookies page for the full list of what loads and when.

Changes to this policy

We may update this policy. The date at the top shows the most recent change. Material changes will be communicated to the email on file.