BrasileirosFLMiami-Dade · Broward · Palm Beach
Advertise

Privacy Policy

Effective September 26, 2026. What data we collect, how we use it and how to request deletion — no fine print.

1. Who operates the site and the app

  • Brasileiros FL is operated by its administration, established in Palm Beach County, Florida, United States ("we", "us"), responsible for the data described in this policy.
  • For any privacy matter, use the site's “Contact” form.

2. Data we collect

  • Account on the site or app: the email address used for magic-link sign-in, display name, preferred language and city and, if you upload one, a profile photo. We also keep records of permission for public use of the photo. When Google sign-in is enabled, we may receive name, email and profile photo from Google. We never receive your password from that provider.
  • Advertisers: business and owner name, phone, WhatsApp, email, Instagram, service description, business hours, languages, any professional license number provided, logo and work photos.
  • Reviews: name, contact info (email and phone) and, for negative reviews, the reason and an explanation of what happened. The administration knows the full identity of every reviewer, even when the site displays only a partial name.
  • Private complaint evidence: receipts, conversations and photos sent to the administration during an investigation — visible only to the administration and never published.
  • Payment: when the online subscription is active, card data is collected, processed and stored by Stripe, Inc. (PCI-DSS certified). The site does not keep card numbers on its servers; we receive only subscription identifiers, the card's last 4 digits and the payment status.
  • Cookies: we use only strictly functional cookies (keeping your sign-in session and remembering your language). We do not use advertising cookies or cross-site tracking.

3. How we use it

  • Operating the directory: displaying listings, county and category searches and the 0–5 score.
  • Moderating reviews: confirming identity, investigating complaints and ensuring the right of reply.
  • Billing listing plans, while billing is active: by direct arrangement with the administration or, when purchased through the site, via the Stripe subscription — with billing starting upon payment confirmation, monthly renewal and handling of cancellation and failed payments.
  • Communicating about your account and listing: moderation decisions, payment and notices about changes to this policy or the Terms.
  • We never sell or rent your personal data to anyone.

4. Who we share it with

  • Providers that run the site on our behalf: Supabase (database, authentication and photo storage, with servers in the United States), Vercel (hosting), Stripe (payments), DeepSeek and Anthropic (automatic translation of public text and automated review of images uploaded by advertisers) and Google (authentication only, when you choose to sign in with Google).
  • Automated image review: every photo or logo uploaded by an advertiser and every profile photo uploaded by an account holder is sent to one of these artificial intelligence providers to be checked against the Content Policy in the Terms of Use. The image is used only for that check; account name, email and identifier are not sent with it. While review is pending, the image stays in a private area.
  • These providers process the data only to deliver the contracted service and do not use it for their own purposes.
  • Public authorities, only when required by law, court order or to protect the rights, safety and integrity of the platform.
  • We do not sell personal data and we do not share your data with advertisers for marketing purposes.

5. What is public and what is private

  • Public: the advertiser's profile (name, business contacts, photos, score), approved reviews shown with the reviewer's partial name, and an account holder's profile photo only while that person has separate, current permission for public use.
  • Blocking authors in the app: public reviews linked to the same account receive an opaque identifier, also public, so readers can hide that author. The identifier makes it possible to link the same person's reviews across profiles, but does not reveal the account ID, email or phone number. Reviews without a linked account do not receive this identifier.
  • Private: a profile photo without current public-use permission, complaint evidence (receipts, conversations, photos) and reviewers' full identification data — visible only to the account holder and to the administration when needed.
  • The administration knows the full identity of every reviewer, even when the site displays only a partial name.

6. Data deletion

  • You can delete your own account directly from Your account on the site or in the app. Explicit confirmation ends linked recurring subscriptions, removes the sign-in identity and deletes data covered by the flow, including the private photo. If you cannot sign in, use the Contact form for help; requests requiring manual verification are completed within 30 days.
  • If you signed in with Google, this same procedure deletes the data received from the provider (name, email and profile photo). You can also disconnect the site in your Google account settings.
  • Deletion does not cover records the law requires us to keep, nor the minimum administrative history needed for community safety (for example, ban records).
  • Payment data stored by Stripe follows Stripe's retention policy and applicable tax and accounting obligations.

7. Your rights

  • Access and correct your data, update your listing information and close your account at any time.
  • Request deletion of your data — the step-by-step guide is in the “Data deletion” section above.
  • Channel to exercise any right: the site's “Contact” form. We will respond within a reasonable time.

8. Security and incidents

  • We adopt reasonable technical and organizational security measures to protect your data, including encryption in transit and at rest and restricted administration access to private data.
  • Payment card data is processed and stored by Stripe, Inc. (PCI-DSS certified); we do not store card numbers on our servers.
  • In the event of a security incident affecting your personal data, we will notify those affected in accordance with the Florida Information Protection Act (Fla. Stat. § 501.171) and other applicable laws — as a rule, within 30 days of determining the incident.
  • Records that are no longer needed are securely destroyed or anonymized.

9. How long we keep data

  • Account and listing data is kept for as long as the account or listing exists. When closure follows a deletion request you made, the deadline in section 6 applies — within 30 days. For all other closures, we delete or anonymize the data within 90 days. Where both deadlines could apply, the shorter one governs, unless the law requires retention.
  • The administrative history (decisions, suspensions, bans and complaint evidence) is kept, with restricted access, for the safety of the community, even after an advertiser leaves.

10. Minors

  • The service is intended for people 18 or older — to advertise, review and create an account.
  • We do not knowingly collect data from children under 13 (COPPA). If we learn that a child's data is in our systems, it will be deleted immediately.

11. “Do Not Track” signals

  • The site does not track users across other sites and shows no behavioral advertising; therefore it does not change its behavior in response to browser “Do Not Track” signals — there is no tracking to turn off.

12. Changes to this policy

  • This policy may be updated. The current version is always on this page, with the effective date at the top.
  • Material changes will be announced prominently on the site and, when appropriate, by email to registered users, before taking effect.

13. The Brasileiros FL app

  • This policy also covers the Brasileiros FL app for iPhone and Android, published by the same administration. Where it says “the site”, read “the site and the app”, except where this section says otherwise.
  • The app is free, sells nothing inside it and lets anyone browse the directory without an account. Optional magic-link sign-in gives access to the same profile as the site, requests, personal-data export and account deletion. Listings and subscriptions continue to be purchased on the site.
  • Location: if you tap “use my location”, the app asks for the device permission and uses the coordinate to pick, ON THE PHONE ITSELF, the nearest covered city. The coordinate is not sent to our servers, never appears in a page address or an access log, and is not stored anywhere. What leaves the device is the city and county names. Declining the permission does not limit the app: choosing a city by hand does the same thing.
  • Favorites: the list of saved professional identifiers and the dates you saved them stay on your device, without copying business contact details. When you open the list, the app queries each saved profile through the API to refresh its availability. Your selected language is sent with queries to receive translated content. Uninstalling the app or clearing its data removes the local list.
  • The app has no advertising, uses no behavioral analytics SDK, collects no advertising identifier and does not track you across other apps or sites.
  • Searches: the selected city and county names and the search term you type are sent to the server to query the directory. GPS coordinates are not sent. We do not create a search history linked to an app account.
  • Blocks: your choices to hide professionals, authors or reviews stay only on your device, as a list of identifiers without names or review text. You can restore content in the app; clearing its data or uninstalling removes the blocks. A server security-key change can change author identifiers and require you to block them again.
  • Reports: the button opens a draft in your email app with the public content reference. You choose what to write and whether to send it. If you send it, the administration receives your email and the information you provide to investigate the report; sections 2, 5, 6 and 9 govern report handling and retention. The app does not send reports automatically.
  • Abuse protection: our servers receive the request's IP address and derive a keyed hash identifier to limit automated access. The rate limiter stores that identifier and access counters, not the original IP address, and does not link them to an account. These records are not ephemeral: automatic cleanup runs as the service is used, without a guaranteed maximum retention of 25 hours.
  • Deletion: uninstalling the app removes local favorites and blocks, but does not delete an account or immediately erase technical abuse-protection records. If you signed in, use Your account to delete the account directly and end linked recurring subscriptions. Without an account or access, open Help and contact in the app or brasileirosfl.com/en/contato; we delete identifiable data covered by the request within 30 days, except where legal obligations or minimum security records require retention, which we explain in our reply. We do not keep a personal search history.

Effective date: September 26, 2026. In case of conflict between the Portuguese and English versions, the English version prevails.