Privacy policy

BC Agora, Balneário Camboriú/SC, Brazil. Data protection officer: privacidade@bcagora.site.

Clicks on outbound buttons (WhatsApp, directions, tickets, website, Instagram, job application): time, source page, language, device type and a random attribution code. We do not store your IP address, phone number, location or any identifier that could lead back to you. To avoid counting the same click twice, a scrambled hash of the request stays in server memory for 30 minutes and is then discarded.

Usage counts: how often each page was viewed and how often each card appeared on screen, summed per day, with the visit's source type (search, social, direct), language and device type. Totals only: no per-visitor record and no cookies. To credit a tap to a showcase, the browser keeps that showcase for 30 minutes in tab storage (sessionStorage), cleared when the tab closes.

Event and job suggestions you send: the content and, if you choose, an email or WhatsApp so we can reply. Your IP is used for at most one hour, in memory only, to stop spam, and is never stored.

Property enquiries: only when you tick the consent box, and only to pass them to the listing's broker.

On your device: a cookie with your language and your saved list (kept only in your browser). We use no advertising or cross-site tracking cookies.

Partner and staff accounts: name, email, a hashed password and a log of changes made in the dashboard.

Clicks are anonymous data used to show businesses how many people were interested in them (LGPD art. 12).

Contact details sent with a suggestion are used to reply, based on your consent (art. 7, I), which you can withdraw at any time.

Property enquiries are shared with the broker only with your specific consent.

Partner account data is used to perform the advertising contract and meet legal obligations.

Advertisers receive only aggregate numbers and the attribution code you carry in your own message, if you decide to write to them.

Providers who run the service for us: Supabase (database, USA), Vercel (hosting, USA) and OpenFreeMap (maps: your browser downloads them directly, so they receive your IP). Weather and sea data are fetched by our server from Open-Meteo, with no data about you.

International transfers rely on contractual clauses and the safeguards in LGPD art. 33.

We do not sell personal data.

Anonymous clicks: up to 24 months.

Suggestions and their contact details: up to 12 months after review.

Partner accounts: for the life of the contract and the legally required period after it.

You can ask for confirmation, access, correction, anonymisation, portability, deletion, information about sharing, and withdraw consent (LGPD art. 18). Write to privacidade@bcagora.site. We reply within 15 days.

You may also complain to Brazil's data protection authority (ANPD).

The database accepts encrypted connections from our server only. Tables block all public access and the dashboard requires login with separate roles.

The service is not aimed at children under 13 and does not knowingly collect their data.

If this policy changes, the date below changes too. Material changes will be announced on the site.