TrailMe Privacy Policy
This Policy explains how TrailMe processes personal data on its website, mobile application, public event pages and organizer area.
1. Controller and contact
TrailMe is operated by Felipe Pozueco Zaffari, Brazilian company registration CNPJ 16.710.566/0001-47, based in Porto Alegre, Brazil. Privacy requests may be sent to contato@trailme.com.br.
2. Data we may process
- Account data: account ID, name, email, profile photo, role, session, security and support records.
- Organizer and event data: organizer profile, contacts, social links, event title, description, date, location, price, duration, difficulty, images and registration links.
- Registration data: depending on the organizer's form, name, WhatsApp number, email, city, Brazilian taxpayer ID, birth date, emergency contacts, activity experience, transportation or accommodation preferences, and voluntarily provided health information relevant to the event.
- Instagram Platform Data: after a professional-account owner authorizes the integration, account ID, username, authorized media IDs, captions, media type, timestamp, permalink, media URLs, visual content and the access token required for the integration. TrailMe never receives the Instagram password.
- Technical data: browser, device, operating system, language, IP address, usage events, diagnostics, crashes and cookies or similar identifiers.
3. Purposes
We use data to provide and secure accounts, list and manage outdoor events, receive registrations, support organizers, prevent abuse, comply with law and improve reliability. With the organizer's authorization, TrailMe reads authorized Instagram posts and analyzes captions and images to prepare event candidates containing fields such as title, date, location, price, duration, difficulty and registration method.
4. Legal grounds
Depending on the context, processing may rely on performance of the requested service, consent or authorization, compliance with legal obligations and legitimate interests, while respecting the data subject's rights and applicable law.
5. Service providers and disclosures
TrailMe does not sell personal data. Data may be processed or disclosed as necessary to:
- Google LLC, through Google Cloud and Firebase, for authentication, hosting, backend functions, database, storage, queues, logging, security and analytics.
- Google Vertex AI, to analyze authorized post content and extract event information.
- Meta Platforms, to perform Instagram authorization and obtain data made available through the granted permission.
- Event organizers, who receive registrations for their own events in order to provide the activity.
- Public authorities or other parties when required by law or necessary to protect rights, safety and prevent fraud.
6. Instagram integration
- The connection is initiated only by an authorized organizer or administrator through Meta's official authorization screen.
instagram_business_basicis used to read basic professional-account information and authorized media.- The access token is encrypted before storage and restricted to TrailMe's backend.
- Imported content creates an event candidate. Publication requires human review and an explicit action in the dashboard.
- Disconnecting removes the active token and connection identifiers and stops future scans. It does not automatically delete events that were already published; those can be deleted in the service or through a request.
7. Retention and deletion
Data is kept only as long as needed to provide the service, meet the purposes above, protect the system and comply with legal obligations. Instagram tokens are retained until they expire or the organizer disconnects. Event candidates, events and registrations are retained while required by the organizer's workflow and may be deleted or anonymized as supported by the service and applicable law.
Account-deletion requests are processed within 30 days, subject to information that must or may be retained by law. See Account and Data Deletion.
8. International transfers and security
Google, Meta and their infrastructure may process data in other countries. TrailMe relies on the providers' contractual and security safeguards. We use access controls, environment separation, encryption in transit and at rest, additional token encryption and logging of sensitive operations.
9. Data-subject rights
Subject to applicable law, you may request confirmation of processing, access, correction, information about disclosures, anonymization, blocking or deletion where applicable, portability, review of relevant automated decisions and withdrawal of consent. Contact contato@trailme.com.br. We may verify your identity to protect the account.
10. Cookies, updates and contact
The website may use Google Analytics and similar technologies to measure usage and performance. This Policy may be updated when the product, providers or legal requirements change.
Controller: Felipe Pozueco Zaffari, CNPJ 16.710.566/0001-47, Porto Alegre, Brazil.
Email: contato@trailme.com.br.