Parece que estás en United States. Ver anuncios de United States

Anyza

Privacy Policy

Last updated: 14 de septiembre de 2026 · version 1.0

This policy explains what data Anyza collects, why, who we share it with and how you stay in control. It follows Brazil's data protection law (LGPD, Law 13.709/2018) and mirrors the rights granted by the GDPR.

1. Who handles your data

Controller: Anyza. For privacy matters and to exercise your rights, contact our data protection officer: legal@anyza.market.

2. What we collect

You give us:

  • Account: e-mail, display name, username, profile picture, bio, region and language.
  • Verification: a confirmed e-mail (level L1) and, optionally, a phone number. For level L2, a photo of an official document, reviewed by a person on the moderation team and deleted as soon as there is a decision, approved or not. From that review we keep only the document type, the issuing country and the date — never the document number, never the image.
  • Listings: title, description, photos, price, category, item details and the location you provide.
  • Interactions: chat messages, public questions and answers, reviews, favourites, reports.

We generate or receive automatically:

  • Usage and security data: IP address, browser and device, pages visited, date and time, error logs and moderation records.
  • Cookies and local storage (see the Cookie Policy).
  • Approximate location when you use "near me" or set a listing's location.

3. How we use it, and on what legal basis

  • Performing the contract: creating and keeping your account, publishing listings, search, chat, questions, deal records and reviews.
  • Legal obligation: keeping access logs as required by Brazilian law and responding to authorities.
  • Legitimate interest: security, fraud and abuse prevention, content moderation, rate limits, aggregate product metrics and service improvement.
  • Consent: optional communications and sharing precise browser location.

We do not sell your data and we do not run behavioural advertising.

4. What is public

  • Your public profile shows username, display name, picture, bio, region, verification level, rating, number of deals and join date — plus "online now" or "last seen", rounded to 5 minutes.
  • Your listings, your questions and published reviews are public.
  • We never display your e-mail, phone, identity document or the exact address of a listing. Location is shown at city level and, on the map, as an approximate zone of about 1 km — the exact coordinate you provide stays on the server and is not accessible to other users.
  • We strip photo metadata (EXIF), including camera geolocation, on upload.
  • Whoever files a report is never revealed to the reported party.

5. Who we share with

We use processors acting on our behalf, under contract:

  • Supabase — database, authentication and file storage.
  • Vercel — hosting and site execution.
  • Cloudflare — DNS, abuse protection and anti-bot verification (Turnstile).
  • Twilio — verification SMS.
  • Resend — e-mail delivery.
  • Anthropic — automated review of listing content (text and photos) for moderation.
  • CoinGecko — currency and bitcoin rates.
  • OpenStreetMap — maps.
  • Error monitoring and product analytics tools, when enabled.

We may also share data with authorities under a legal obligation or court order, and with third parties in a corporate reorganisation, keeping this policy in force.

Some of these providers are outside Brazil. International transfers rely on the safeguards foreseen in the LGPD (contractual clauses and the provider's security commitments).

6. How long we keep it

  • For as long as the account exists. A deactivated account keeps its data, hidden from the public, until you reactivate.
  • Permanent erasure: you can request it at any time at legal@anyza.market. We anonymise the profile and delete personal data. What remains, by legal obligation or legitimate interest: access logs for the legal period, deal records and reviews (shown as "removed user"), moderation and sanction records, and data needed for ongoing proceedings.
  • Access logs: 6 months. Tax and contractual records, where they exist: 5 years.

7. Your rights

At any time you may: confirm that processing exists; access your data; correct incomplete or outdated data; request anonymisation, blocking or deletion; request portability; know who we share with; withdraw consent; and object to processing based on legitimate interest.

Much of this you can do yourself on the site: edit your profile, change e-mail and phone, delete listings, deactivate the account and choose categories you don't want to see. For the rest, write to legal@anyza.market — we answer within 15 days.

8. Security

Row-level protection on every database table, encrypted traffic, no passwords at all (one-time codes), sensitive columns unreachable from the browser, rate limits against abuse and a log of every moderation action. No system is perfect: in a significant incident we will notify you and the authority, as the law requires.

9. Children

Anyza is for people aged 18 and over. We do not knowingly collect data from minors. If that happens, the account is closed and the data deleted.

10. Changes

We may update this policy. The current version is always on this page, dated; material changes are announced on the site or by e-mail.