Legal

This Privacy Policy describes how Walvee Consultoria e Tecnologia Ltda ("Walvee", "we", "us") collects, uses, stores, and protects your personal data when you use the Walvee platform ("Platform"). This policy is compliant with the Brazilian General Data Protection Law (LGPD — Lei 13.709/2018) and the European General Data Protection Regulation (GDPR — Regulation 2016/679).

Walvee Consultoria e Tecnologia Ltda
CNPJ: 45.622.630/0001-36
Address: Rodovia José Carlos Daux, 4120, Sala 05, Centro de Inovação ACATE Primavera, Saco Grande, Florianópolis, SC, 88032-005, Brazil
Contact: legal@walvee.com

3.1. Data provided directly by you: Name and email address (via Google Sign-In), profile photo (via Google), preferred name (if updated by you), travel preferences and interests.

3.2. Data collected automatically: Session data (pages visited, features used), device type and browser information, approximate geographic location (city-level, for trip suggestions), AI Concierge interaction logs (conversation content used to generate itineraries).

3.3. Data from third parties: Google account profile information (via OAuth 2.0).

3.4. We do NOT collect: payment information (all transactions occur on third-party websites), precise GPS location, government-issued identification numbers, biometric data.

We process your personal data for the following purposes and legal bases:

• To provide and operate the Platform (performance of contract / LGPD Art. 7, V)
• To generate personalized travel recommendations via AI (legitimate interest / LGPD Art. 7, IX)
• To display your public profile and trips to other users (consent / LGPD Art. 7, I)
• To communicate service updates and changes (legitimate interest / LGPD Art. 7, IX)
• To improve the Platform and fix technical issues (legitimate interest / LGPD Art. 7, IX)
• To comply with legal obligations (legal obligation / LGPD Art. 7, II)

5.1. Your data is stored on cloud infrastructure provided by Google Cloud Platform, with servers located in accordance with applicable data protection laws.

5.2. Personal data is retained for as long as your account is active. Upon account deletion, your personal data will be deleted within 30 days, except where retention is required by law.

5.3. AI conversation logs are stored in session memory only and are not permanently retained after your session ends.

6.1. We do NOT sell your personal data to third parties.

6.2. We may share data with: Google Cloud Platform (infrastructure provider), Google Maps API (map rendering), analytics tools (aggregated, anonymized data only).

6.3. When you click on external booking links, you will be redirected to third-party websites that have their own privacy policies.

Your data may be processed in servers located outside of Brazil, including in the United States (Google Cloud). Such transfers are conducted in accordance with LGPD Art. 33 and GDPR Chapter V, using appropriate safeguards including Standard Contractual Clauses.

Under LGPD and GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Request data portability
• Withdraw consent at any time
• Object to processing based on legitimate interest
• Request information about data sharing with third parties

To exercise any of these rights, contact us at legal@walvee.com. We will respond within 15 business days.

The Platform uses session storage (not persistent cookies) to maintain your experience during a browsing session. No tracking cookies from third-party advertisers are used. Session data is cleared when you close your browser.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

We implement technical and organizational security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via Google OAuth 2.0
• Access controls and role-based permissions
• Regular security reviews

We may update this Privacy Policy periodically. Material changes will be communicated via the Platform. The "Last updated" date at the top of this policy indicates the most recent revision.

For any questions regarding this Privacy Policy or to exercise your data rights:

Email: legal@walvee.com
Walvee Consultoria e Tecnologia Ltda
CNPJ: 45.622.630/0001-36
Florianópolis, SC, Brazil