🔒 Privacy Policy

1. Introduction

Sierra Cultural ("we", "our", "us", "Sierra") respects the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, and protect your information.

2. Information We Collect

We collect information you voluntarily provide to us:

• Name and Email: When you create a preview or buy an itinerary
• Preferences: Atmosphere, pace, interests, and budget
• Payment Information: Processed via MercadoPago/Stripe (we don't store card data)
• Location: Country detected automatically (optional)

3. How We Use Your Data

Your data is used only for:

• ✅ Generate your personalized preview or itinerary
• ✅ Send purchase confirmations and itineraries by email
• ✅ Allow you to access your itineraries on the site
• ✅ Communicate about updates or offers (with your permission)
• ✅ Comply with legal obligations (LGPD, taxes)

4. Data Protection

Your data is protected by:

• 🔐 SSL/TLS Encryption: Secure transmission over the internet
• 🔐 Encryption at Rest: Data encrypted on servers
• 🔐 Secure Authentication: Access via unique token (paymentId)
• 🔐 Automatic Backups: Supabase with ISO 27001 certification
• 🔐 Row Level Security: Each user sees only their data

5. Data Sharing

Your data is NOT shared with:

• ❌ Travel agencies or operators
• ❌ Advertising platforms (Google Ads, Facebook)
• ❌ Third parties for marketing
• ❌ Any company without your explicit consent

We share data ONLY with:

• ✅ MercadoPago/Stripe: To process payments (necessary)
• ✅ Resend: To send emails (necessary)
• ✅ Google Cloud: For APIs (Google Maps, Geocoding)

6. Data Retention

• Payment data: Retained as long as necessary (min. 2 years for taxes)
• Itineraries: Retained indefinitely for your access
• Emails: Retained for 12 months after last access
• Activity logs: Deleted after 90 days

7. Your Rights (LGPD)

Under Brazil's General Data Protection Law (LGPD), you have the right to:

• 📋 Access: All your data in readable format
• 📋 Correct: Inaccurate data
• 📋 Delete: Your data at any time
• 📋 Portability: Receive your data in standard format
• 📋 Opt-out: Stop receiving marketing emails

To exercise these rights, send an email to contato@sierracultural.com with "LGPD" in the subject.

8. Cookies

We use cookies only for:

• Keeping you logged in
• Remembering your preferences
• Basic analytics (Google Analytics - anonymous)

You can disable cookies in your browser, but some features may not work.

9. External Links

This site contains links to third-party sites. We're not responsible for their privacy policies. We recommend reviewing any site's privacy before providing personal data.

10. Contact

Questions about privacy? Contact us:

• 📧 Email: contato@sierracultural.com