Skip to content
Viva o Paraíso

Draft pending legal review. Minimal, provisional text; it must be reviewed by a qualified professional before the public launch.

Courtesy translation. In case of any discrepancy, the Portuguese version prevails.

Privacy policy

Last updated: 22/09/2026

Viva o Paraíso is designed to collect as little data as possible. Visitors do not need an account to use the map.

What we record

  • WhatsApp clicks (leads): the chosen place, where the click came from, the page, campaign UTM parameters, date and time, and a reference code. We do not record your name, phone number or IP address.
  • Abuse protection: a pseudonymised identifier (a keyed hash) of the IP address sits temporarily in the rate-limit table and is overwritten with each time window.
  • Administrator account: email, name, password hash and audit records of editing and publishing actions.

Location

Your device location is only requested when you tap “Near me” and confirm. It is used to calculate distances; we send the server only rounded coordinates (~100 m), which are neither stored nor included in the shareable page address. You can decline and mark a point by hand instead.

WhatsApp

Once WhatsApp opens, the conversation happens directly between you and the business, under the policies of WhatsApp/Meta and of the business itself.

Audience measurement

We use Google Analytics 4 to understand how many people visit the site, which pages they read and where they came from. It stores cookies in your browser and sends that data to Google, acting as our processor. The admin panel is not measured, and we never send Google your name, phone number or anything you type. You can block these cookies in your browser settings or with an extension and the site keeps working.

Retention

Lead records are kept for a configured period and then deleted automatically by the retention routine. Audit logs follow their own period.

Your rights

You may request information, correction or deletion of personal data through the contact channel the controller will publish before launch. [To be completed: legal entity, tax number, data protection officer email.]