Provisional draft — review with a lawyer before publishing.
Privacy Policy
Provisional version of November 9, 2026. Drafted on the basis of the Lei Geral de Proteção de Dados (Brazilian General Data Protection Law, LGPD, Lei 13.709/2018).
1. Who is the controller
Ancorei (provisional name), which is being incorporated, is the controller of the personal data processed on the platform. The company name, CNPJ (Brazilian corporate taxpayer ID) and address will be published before payments are enabled. The marina you book processes the reservation data in order to provide the service and, in that respect, is also a controller.
Data Protection Officer (DPO): to be appointed. Meanwhile, contact [email protected] with the subject "Privacy".
2. What data we collect
- About the boater: name, email, phone, CPF or ID document (when required for payment or by the marina), booking details.
- About the boat: name, Navy/Harbor Master registration, length, beam, draft, flag and insurance, when provided.
- From the marina and its team: name of the person in charge, CNPJ (Brazilian corporate taxpayer ID), email, phone, login and payout details.
- Technical: IP address, date and time of access, browser and device type, usage logs (art. 15 of the Marco Civil da Internet, Brazil's Internet Civil Framework).
- Payment: transaction status and ID. Card details are handled directly by the payment processor (for example, Mercado Pago, not yet contracted) and are not stored by us.
3. What we use the data for and on what legal basis
| Purpose | Legal basis (art. 7 of the LGPD) |
|---|---|
| Create and manage reservations, generate the QR, send receipts | Performance of a contract |
| Process payments and payouts | Performance of a contract; legal and regulatory obligation |
| Issue tax documents, keep records, respond to authorities | Compliance with a legal or regulatory obligation |
| Prevent fraud and ensure platform security | Legitimate interest; credit protection |
| Handle requests, withdrawals and complaints | Performance of a contract; regular exercise of rights |
| Receive news and offers | Consent (may be withdrawn at any time) |
| Improve the service with usage statistics | Legitimate interest |
4. Who we share it with
- The marina you booked: receives what is needed for the stay (name, contact, boat details, dates, services).
- Payment processor, to charge and pay out.
- Technology providers (hosting, email, security), which process data on our behalf.
- Authorities, when there is a court order or legal obligation.
We do not sell your personal data.
5. International transfer
Some providers may store data outside Brazil. When that happens, we will adopt the safeguards provided for in arts. 33 et seq. of the LGPD.
6. How long we keep it
For as long as necessary for the purposes above and to meet legal deadlines (for example, tax-related and for defense in legal proceedings). Application access records are kept for six months, as required by the Marco Civil da Internet (Brazilian Internet Civil Rights Framework). After that, we delete or anonymize the data.
7. Your rights (art. 18 of the LGPD)
You may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data; portability; information about data sharing; deletion of data processed with consent; withdrawal of consent; and review of automated decisions. To exercise these rights, write to [email protected]. We respond within the legal deadlines. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, Brazilian National Data Protection Authority).
8. Security
We use an encrypted connection (HTTPS), access control and other technical and administrative measures to protect data. No system is completely invulnerable; in the event of an incident involving significant risk, we will notify you and the ANPD (Brazilian National Data Protection Authority) as required by law.
9. Cookies and local storage
We use the browser's local storage and essential cookies to operate the service (for example, to keep you signed in). Measurement or advertising cookies, if used, will depend on your consent.
10. Children and teenagers
The platform is intended for people over 18. We do not intentionally collect data from minors. If minor crew members are reported by the person responsible for the reservation, that person is responsible for that information.
11. Changes to this policy
We may update this policy and will publish the new version with its date. Significant changes will be notified by email.
12. Contact
Questions, requests and complaints about personal data: [email protected]. See also the Terms of Use and the withdrawal form.