Privacy Policy – QViagem

Last updated: January 28, 2026

At QViagem, privacy and transparency are fundamental. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018).

1. Data We Collect

To provide our AI trip‑planning services, we collect the following categories of data:

1.1. Data You Provide

Registration Information: Name and email address when creating an account or using social login (Google).
Profile Data: Language, currency preferences, and profile photos (if provided).
Planning Content: Trips you create, destinations you search, document photos (if uploaded to the documents area), and the prompts you send to the AI.

1.2. Payment Data

When you subscribe to a paid plan, your billing data (credit card, CPF, address) is processed directly by our payment partners (Asaas).
QViagem does not store your card’s sensitive data on our servers. We only receive payment confirmation and subscription status.

1.3. Automatically Collected Data

Access Logs: IP address, browser type, operating system, pages visited, and access times.
Cookies and Tracking Technologies: We use cookies to keep you signed in, remember preferences, and analyze platform usage via analytics tools.

2. Purpose of Data Processing

We use your data to:

Provide the Service: Create your account, save trips, and process AI requests.
Improve the Experience: Personalize travel suggestions and optimize the user interface.
Communication: Send service updates, payment confirmations, and marketing messages if authorized.
Security: Prevent fraud and unauthorized access.
Legal Compliance: Meet tax and legal obligations.

3. Legal Bases for Processing

Under the LGPD, we process your data based on:

Performance of Contract: Necessary to provide the requested service (Art. 7, V).
Consent: When you explicitly authorize it (e.g., marketing or third‑party cookies) (Art. 7, I).
Legitimate Interest: Product improvement and security, respecting your fundamental rights (Art. 7, IX).

4. Data Sharing with Third Parties

QViagem shares data with essential partners:

Supabase: Database storage and authentication.
Google Cloud / Gemini: Travel prompts are processed by the Gemini API.
Asaas: Payment processing.
Vercel: Platform hosting and performance monitoring.

International Transfers Note: Some providers (such as Google and Supabase) may store data on servers outside Brazil (e.g., the U.S.). We ensure these partners meet international data protection standards.

5. Your Rights as a Data Subject

You have the following rights, which can be exercised in account settings or by contacting us:

Confirmation and Access: Know whether we process your data and obtain a copy.
Correction: Update incomplete or outdated data.
Deletion: Request deletion of your personal data (subject to legal retention obligations).
Portability: Receive your data in a structured format.
Withdrawal of Consent: Revoke authorization for specific uses.

6. Security and Retention

6.1. We implement technical measures (encryption, firewalls, RLS in the database) to protect your data. However, no internet system is 100% secure.

6.2. We retain your data while your account is active or as needed for the purposes described in this policy. Data from canceled subscriptions may be retained longer for accounting and tax purposes.

7. Cookies and Analytics

You can manage cookie preferences via your browser settings or the consent panel in our platform. Disabling certain cookies may affect specific features.

8. Contact and Data Protection Officer (DPO)

If you have questions about how we handle your data or wish to exercise your rights, contact us through our official channel:

Contact: contact

QViagem Contact: contact