Privacy Policy

• Account — name, email address, and password (stored only as a hash by our authentication provider; we never see it). Optionally company name, phone number and location.
• Listings — everything you enter to advertise: description, price, location, photos and the technical details of the item. This is published, and you choose what goes in it.
• Talent profiles — if you register as a pilot or mechanic: full name, nationality, city, and optionally date of birth, ANAC/licence number, photo, licences, ratings, training and work history. We do not ask for your CPF, RG or any identity document, and we do not collect dados pessoais sensíveis as the LGPD defines them (health, biometrics, race, religion, political opinion or union membership).
• Messages — when you contact a seller or us, we store your name, email, optional phone number and the message, so the recipient can reply.
• Payments — we record the amount, currency, status and the payment reference. Card numbers never reach our servers: checkout runs on a specialist payment provider that handles the card directly.
• Technical — IP address and browser data needed to keep sessions working, rate-limit abusive traffic and keep an audit trail of administrative actions.

• Running your account and publishing your listings — performance of a contract (Art. 7, V).
• Processing payments and issuing receipts — performance of a contract and compliance with legal obligations (Art. 7, V and II).
• Delivering messages between buyers and sellers — performance of a contract; it is the service you asked for.
• Security, fraud prevention, rate limiting and audit logs — legitimate interest (Art. 7, IX), limited to what security actually requires.
• Publishing your talent profile to subscribers — consent (Art. 7, I), given when you submit the profile. You can withdraw it by writing to us, and we take the profile off the directory within 15 days.
• Marketing emails — consent (Art. 7, I). Service and transaction emails are not marketing and are sent under the contract.

You have the right to be told which specific companies we have shared your data with: ask us and we will name them. We also disclose data when the law or a court requires it.

• Account data — while your account exists, and afterwards only where a legal obligation requires it.
• Listings — while published, plus a period afterwards so the history of a negotiation stays available to both sides.
• Messages — kept so buyer and seller can refer back to what was agreed.
• Payment records — kept for five years, the period Brazilian tax and commercial law generally requires.
• Security logs — kept only as long as they are useful for detecting abuse, then discarded.

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or out-of-date data;
• anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• portability of your data to another provider;
• deletion of data processed on the basis of your consent;
• information about the public and private bodies we have shared your data with;
• information about your option not to consent, and what happens if you decline;
• withdrawal of consent at any time;
• objection to processing you believe breaches the law;
• review of decisions made solely by automated means.

You can do much of this yourself: edit your account and listings from your account, and edit your talent profile from its own page. Removing a talent profile, and anything else on this list, is done by writing to us, and we answer within 15 days. We may need to confirm your identity first, so that nobody else can obtain your data by asking.

You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).