Privacy policy

Last updated: 1 Oct 2026

This policy explains what personal data we collect, why, and how you can exercise your rights, in line with the LGPD and GDPR.

1. Data we collect

Account: name, email, phone, photo and language.
Bookings: dates, guests, messages, reviews and reported issues.
Payments: processed by Stripe; we only receive the status and the card's last digits.
Payout details: the bank details you add for withdrawals are encrypted and only used to send your payments.
Usage: IP address, device, pages visited and language and currency preferences.

2. How we use it

To process bookings, payments, payouts and refunds.
To enable communication between guests, hosts and support.
To prevent fraud and keep the community safe.
To send messages about your bookings and, with your consent, news.

3. Sharing

We share with the host or provider only what the booking requires (name, number of guests and, after confirmation, contact details). We use vendors such as Stripe (payments) and email and hosting providers, under contract. We do not sell personal data.

4. Retention

We keep data while your account is active and for the period required by legal, tax and fraud-prevention obligations.

5. Your rights

Access, correct or export your data.
Request account deletion, subject to legal obligations.
Withdraw consent and object to processing.
To exercise your rights, email contact@agiltrip.com.