Your data, without the fine print

Principles guiding the product

The product uses the principles in Article 6 of the LGPD as its reference: purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability.

A feature should not collect information merely because it is technically possible. Its purpose must be understandable, its scope proportionate, and an incompatible new use requires a separate assessment and notice.

• minimum collection for the feature selected;
• plain-language information in the portal’s three languages;
• restricted access and preventive measures proportionate to risk;
• no sale of personal data to advertising networks;
• no unlawful or abusive discrimination.

Data currently used and why

Depending on the feature, the service may use a Telegram ID, language, preferences, checklists, alerts, favourites, reminders, comments, listings and fields submitted for a business profile. Listing photographs are referenced by Telegram’s technical file_id.

The portal may also count broad actions using a random device identifier to understand whether a section works. Application analytics are designed not to store the IP address. A push subscription stores its technical endpoint until it is removed.

• account and language: recognise the session and show the selected interface;
• favourites, alerts and reminders: fulfil the user’s request;
• comments and listings: publish information the user chose to submit;
• reports and corrections: verify content and protect the community;
• broad metrics: detect failures without retaining message text.

AI assistant, voice and images

Question text may be sent temporarily to OpenAI to prepare an answer. A voice transcript or image should enter that flow only after a clear user action and consent. Questions are not retained in the user profile, and API response storage is disabled in the current configuration.

Remove full names, document numbers, contact details, signatures, children’s faces and sensitive data before sending. AI can be wrong; answers about documents, health, safety or law are general information and should point to official sources.

External services and publication

Telegram transports bot interactions; OpenAI processes a question when the assistant is used; hosting, database and notification infrastructure performs technical functions. Each external service also has its own terms and practices.

Comments, listings and business profiles expose only fields selected for publication. Data is not sold. A formal inventory of providers, roles, locations and contracts still needs to be completed before the final legal notice is approved.

Retention and deletion

Account-linked data should exist only while needed for the feature, security, moderation or an applicable obligation. Exact periods for each table and backup still need to be recorded in a validated technical inventory, so this page does not promise an unverified deadline.

Deletion may not cover genuinely anonymous aggregate counts that can no longer be connected to a person. Narrow legal retention grounds under Article 16 of the LGPD may also apply; each exception must be documented and does not permit incompatible reuse.

Rights under the LGPD

Where applicable, a person may request confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data, portability subject to regulation, information about sharing, and review of a decision based solely on automated processing.

When processing relies on consent, there are also rights to understand the consequences of refusal, withdraw consent and request the related deletion subject to legal exceptions. A person may object to unlawful processing and petition the ANPD. Exercising rights is free, although proportionate identity verification may be required.

How to delete through Telegram

Open @meurecifebot using the same account used with the portal, send /delete_me and confirm with the button shown. The flow removes the profile, preferences, linked analytics, checklists, alerts, favourites, reminders, feedback, reports, comments, listings and business submissions; connected-channel posts are removed as well.

The action cannot be undone. To correct or review only one publication, use its report/correction route first or contact the bot with the link and issue, without attaching personal documents.

Security, children and incidents

Access controls, usage limits, separation of duties and technical monitoring are applied in proportion to the product. No system promises zero risk. An incident that may create relevant risk or harm should be assessed, contained, documented and notified under the current LGPD and ANPD criteria.

Do not publish a child’s routine location, school, documents, intimate image or contact details. A legal representative may request removal through Telegram; review should prioritise the child’s best interests and avoid further exposure.