Privacy Policy

Who we are

VENTSY is a digital platform that connects people looking for event venues with owners of locations available for rent. We operate as a marketplace and are committed to transparency in the processing of personal data.

This Privacy Policy applies to all users of the VENTSY platform, including visitors, renters and registered owners, under the terms of the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).

What data we collect

We collect only the data necessary for the operation of the platform:

• Registration data: full name, taxpayer ID (CPF or CNPJ), date of birth, email address and phone number.
• Usage data: IP address, browser type, pages visited, searches performed and interactions with the platform.
• Payment data: transaction information processed by partner gateways. We do not store full credit card data.
• Venue data: address, photos, descriptions and prices registered by owners.
• Communications: messages exchanged between users within the platform.

How we use your data

We use your information to:

• Create and manage your account on the platform.
• Process bookings and facilitate contact between renters and owners.
• Send confirmations, booking notifications and relevant communications.
• Continuously improve the venue search and recommendation experience.
• Comply with legal obligations and prevent fraud.
• Send marketing communications, only with your consent.

Data sharing

Your data may be shared in the following situations:

• Between platform users: name and contact information are shared between renter and owner upon confirming a booking.
• Payment partners: payment processors (such as Stripe or MercadoPago) receive the data needed to process transactions.
• Infrastructure partners: cloud, hosting and database services that operate under confidentiality agreements.
• Legal authorities: when required by law, court order or competent authority.

Cookies and tracking

We use cookies and similar technologies to:

• Keep your session active after login.
• Remember your search preferences.
• Analyze page performance and identify improvements.
• Display relevant content based on your browsing history.

You can configure your browser to refuse cookies, but some platform features may be affected.

Information security

We adopt technical and organizational measures to protect your data against unauthorized access, alteration, disclosure or destruction, including:

• Data transmission via the HTTPS protocol with TLS encryption.
• Secure storage of passwords using hashing and salting.
• Role-based access control (RBAC) for our team.
• Continuous monitoring of access and intrusion attempts.

In the event of a security incident that may affect your data, we will notify you and the Brazilian National Data Protection Authority (ANPD) within the timeframes set by law.

Your rights (LGPD)

Under the LGPD, you have the right to:

• Access: request a copy of the personal data we process about you.
• Correction: update incomplete, inaccurate or outdated data.
• Deletion: request the deletion of your data, except where there is a legal obligation to retain it.
• Portability: receive your data in a structured format for transfer to another service.
• Withdrawal of consent: withdraw consent for processing based on that legal basis.
• Objection: object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, please contact us at privacidade@ventsy.com.br.

Data retention

We keep your data for as long as necessary to fulfill the purposes described in this policy or as required by law. Financial transaction data is retained for 5 years, in accordance with tax requirements.

After your account is closed, your data will be anonymized or deleted within 90 days, except for legal obligations that require retention for a longer period.

Minors

The VENTSY platform is intended for people aged 18 or older. We do not intentionally collect data from minors. If we identify that a minor has registered without authorization, we will delete the data immediately.

Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by a prominent notice on the platform at least 15 days in advance.

Continued use of the platform after the changes take effect implies acceptance of the new policy.

Contact

For questions, requests or to exercise your rights, please contact our Data Protection Officer (DPO):

• Email: privacidade@ventsy.com.br
• Service hours: Monday to Friday, 9 a.m. to 6 p.m.
• Response time: up to 15 business days