OPERATIONAL DRAFT (v1.1) — Subject to professional legal review before final publication.
Last updated: July 26, 2026
Version: 1.1
1. Who we are
V-Indo ("we", "our") is an intermediary platform between requesters and travelers. This Policy explains how we process your personal data in compliance with LGPD (Brazil) and GDPR (European Union), where applicable.
Contact: contato@v-indo.app
2. Data we collect
3. Purposes and legal bases
4. Sharing with third parties
We do not sell your personal data.
5. Sensitive data in communications
5.1. Delivery details, addresses, phones, and delivery/pickup PIN codes are shared only between active match participants, in chat (except PIN), Trip Kit offline, and authorized transactional emails.
5.2. Emails with meeting data or PIN may be saved or printed by recipients; do not share the PIN via chat or phone; we recommend public meeting places.
5.3. Public share links do not include this data.
6. Images
6.1. Product photos and chat images are stored on Cloudinary (authenticated type).
6.2. View URLs are temporary and signed.
6.3. Chat images may be analyzed by automatic moderation (OpenAI).
6.4. Staff may access content for support, security, and legal compliance.
7. Retention
8. Your rights
Depending on jurisdiction, you may request:
Access to your data
Correction of inaccurate data
Account deletion (via app or API)
Portability (in development)
Objection or restriction of processing
Withdrawal of consent (where applicable)
Contact contato@v-indo.app. We will respond within legal timeframes.
9. International transfers
Data may be processed outside your country (e.g., USA — Firebase, Cloudinary, Stripe). We use sub-processors with adequate contractual safeguards.
EU users may in future be routed to an EU MongoDB cluster (`MONGODB_URI_EU`).
10. Security
We apply technical and organizational measures: Firebase auth, signed media URLs, chat moderation, rate limiting, audit logs.
11. Minors
The Service is not intended for users under 18.
12. Changes
We will update this Policy when needed. Material changes require new acceptance (`privacyVersion`).
13. Contact and authority
Contact: contato@v-indo.app
Supervisory authority (Brazil): ANPD.
European Union: authority in your country of residence.
*See also Terms of Use.*