Privacy Policy

1. Data controller

The company based in the Federative Republic of Brazil that operates the Lo Encuentro brand acts as data controller; its company name and CNPJ are provided on request through the channel below. Contact channel for data subjects: [email protected].

2. Data we process

• Account data: name, email, phone (optional), password (stored only in encrypted, irreversible form) and, if you sign up with Google, that account's identifier.
• Profile and organization data: account type, agency or organization name, city, bio, photo and, if provided, license number and service area. Anything you mark as a public profile will be shown to any visitor.
• Listings: property or car details (features, city, advertiser category), title, description, photos, price and currency, and the contact details you choose to publish.
• Contact messages: name, email, phone and text you send to an Advertiser.
• Technical data: IP address, browser and device type, approximate country, pages visited, session cookies and, with your consent, marketing cookies.
• Visit origin: campaign parameters (UTM) from your first visit, to measure which channels bring users.
• Aggregated metrics: number of views and clicks per listing, without identifying who generated them.

We do not ask for sensitive data (health, religion, ethnic origin, etc.). Please do not include it in listings or messages.

We do not request a VIN/chassis number or license plate number as car listing data. Do not include them in text, photographs or messages, or send vehicle documents. Although these are not requested fields, a photo or text you submit may contain identifiers or other people's data: review and conceal them before submitting. This instruction does not imply automatic concealment or ownership verification.

3. Why we use it

• To create and manage your account and let you publish and manage property and car listings (performance of the service you request).
• To forward your messages to the Advertiser and show your contact details on the listings you publish.
• To send operational emails: confirmations, password recovery, notices about your account or listings.
• To prevent fraud, spam and abuse and protect the Platform's security (legitimate interest).
• To measure and improve the Platform and our advertising campaigns (legitimate interest or consent, as applicable).
• To comply with legal obligations and requests from competent authorities.

4. Who we share it with

We do not sell your personal data. We only share it with:

• Advertisers: when you send them a message, they receive the details included in it.
• Platform visitors: the data you choose to make public in listings or on your profile.
• Service providers bound by confidentiality: hosting and database (Fly.io, Supabase), network and security (Cloudflare), sign-in (Google), email delivery (Resend) and advertising measurement (Meta, which receives data such as your email in hashed form).
• Cloudflare Workers AI: uploaded listing photographs are checked automatically to verify they are photographs rather than logos or text images. We send a reduced copy without location metadata; account data is not sent with the image.
• Authorities, when required by law or court order.

5. International transfers

Our servers and providers may be located outside the User's country (mainly Brazil and the United States). We choose providers that apply appropriate security measures and data protection agreements.

6. Cookies

We use essential cookies (session, language, security), which cannot be disabled, and analytics and marketing cookies (Google Analytics, Meta Pixel and Microsoft Clarity), which you can refuse at any time on the Cookies page.

7. Retention

We keep account data while the account is active. When it is closed, we delete or anonymise the data, except what we must keep by law or to defend against claims, for the applicable limitation period. Contact messages are kept while useful to the Advertiser and the Platform, and technical logs for short periods.

8. Your rights

You may request access to, correction, updating, erasure, objection to and portability of your data, and withdraw consent where it is the legal basis. Much of your data can be edited directly in your account; for anything else, write to [email protected]. We will reply within a reasonable time and no later than any deadline set by applicable law.

You may also ask who we share your data with and lodge a complaint with Brazil's National Data Protection Authority (ANPD). If you live in another country, you keep the rights granted by your local law (see Annex).

9. Security

We apply reasonable technical and organizational measures: encrypted connections (HTTPS), hashed passwords, permission-based access control and abuse protection. No system is infallible; if we detect an incident affecting your data, we will inform you where appropriate.

10. Minors

The Platform is not intended for anyone under 18 and we do not knowingly register accounts for minors.

11. Changes to this Policy

We may update this Policy. The current version and its date will always be published on this page, and we will notify registered Users of material changes in advance.

The Spanish, Portuguese and English versions are equally valid; in case of discrepancy, the interpretation most favorable to the User prevails.

Annex — Users in Paraguay

Users keep the rights to privacy and habeas data under articles 33 and 135 of the Constitution of the Republic of Paraguay, and any rights granted by Paraguayan personal data protection law, and may exercise them through the channel above or before the Paraguayan courts.