Privacy notice
This is a summary in English of how Borrifei handles data today. The full, canonical notice is published in Portuguese at /privacidade.
Account and public listings
Authentication and platform data run on Supabase. Completing your profile and publishing any listing, including a free one, requires name, WhatsApp number, city, and a Brazilian CPF (tax id). Name, WhatsApp, city, state, and profile photo can appear on listings and on your public profile so buyers and sellers can contact each other directly.
Payments
Publishing a listing and viewing a seller's WhatsApp are free. When a seller pays for an optional highlighted listing, a protected server routine accesses name, email, WhatsApp, and CPF, and that data, together with billing details, is sent to Mercado Pago to create and track the Pix charge. Borrifei keeps only the identifier and status needed to reconcile the payment; the payment provider applies its own policy to the financial data it processes.
Analytics
Google Analytics and Borrifei's own event log in Supabase are only enabled after you choose to allow metrics in the cookie banner; declining does not block browsing, listing, or using your account. The consent choice is stored in a host-only cookie named dehor_consent for up to 180 days.
Requests
To request access, correction, or deletion of your data, email [email protected]. A request may require proof of ownership. Account, listing, or payment records may need to be kept for security, fraud prevention, or legal obligations.
This English page is a summary; the Portuguese notice at /privacidade is the reference version and is updated first.