Privacy
Last updated: 1 November 2026
Who is responsible
4me - Brazil Hotels (brazilhotels.online) is operated by 4me.network inc, a Delaware corporation, USA (state file number 10758827), 16192 Coastal Highway, Lewes, DE 19958, USA, part of the 4me.network group. For any personal-data matter, including data subject requests: support@brazilhotels.online.
What we collect
Account: your e-mail (it identifies the account — there is no password, access is by a link sent to your e-mail). Booking: guest names, contact e-mail, phone, city/country, the stay details (hotel, dates, room, amount), the payment method chosen for bookings in reais (card or Pix, each with its own price) and the language you booked in — you can book as a guest, without an account. Club: when you subscribe, Stripe collects your name, phone and address on its own page, and we keep your name, phone, city and country in your profile. Searches: the destinations, dates, occupancy and nationality you search for, including what you looked for and did not find. Browsing: which pages of this site you open, with the page title, where the click came from and the language — only when there is a session (account or guest); visitors without a session do not enter that record. Checkout use: whether you started and submitted the booking form, the code of the error notice that appeared and whether you came back from payment without completing it — without what you type in the fields, tied to the same session. Visit to a hotel page: with no identification — only the hotel and the page language, no account, no cookie and no IP address stored. Make your offer (members): the room, the reference rate and the reduction you asked for. Affiliate and partner-hotel forms: name, e-mail, phone, channel or website and the message you write. AI assistant (members): we keep only a daily message count; the content goes to the AI provider to generate the reply. Virtual assistant (the site chat, open to any visitor): we keep the conversation messages, the e-mail you give us (to receive the verification code or look up a booking) and, if you are not signed in, your IP address, which ties the conversation to you; the content goes to the AI provider to generate the reply, and card numbers you type are deleted before saving. IP address: used in temporary counters that limit abuse and, in the virtual assistant, as described above.
What we do NOT collect
Card data. Payment happens on Mercado Pago's or Stripe's own page — your card number never touches our servers or stays with us. We use no tracking cookies, no advertising cookies and no ad networks, and we do not profile you for third parties: the browsing and checkout-use records described above are ours, stays with us, and is used for support and to improve the site. In the page addresses we record, sensitive parameters (such as token, e-mail and password) are removed before storage.
Who we share it with
The hotel and the distribution suppliers that place the booking (guest names and stay details). Mercado Pago and Stripe, to process payments and the Club subscription. Cloudflare, which receives your IP address and technical browser data for the anti-bot check (Turnstile) at sign-in. OpenFreeMap, which serves the map background (search and hotel page): when a map is displayed, your browser downloads the map style and tiles from it, and it receives your IP address and technical browser data. The suppliers that host hotel photos: many photos load directly from their servers, which therefore receive your IP address and browser data, as with any image on the web. Google Workspace, which transmits the e-mails we send (sign-in link, confirmation, voucher, notices). Anthropic, which processes the messages of the members' AI assistant and of the site's virtual assistant. And the 4me.network central service, which receives your e-mail to recognise a Club subscription taken out on another site of the group and your first booking in the group. We do not sell personal data.
Why we use it
To create your account, place the booking with the hotel, send confirmation and voucher, process payments, cancellations and refunds, run the Club, credits and affiliate commissions, provide support and meet tax and accounting obligations. Searches, browsing and checkout use help us understand what you look for, support you better when you contact us and improve the site; the IP counters protect the site against abuse. Legal basis: performance of the contract (the booking, subscription or sign-up you asked for), legal obligation, and legitimate interest for searches, browsing, checkout use and abuse prevention — which you can object to at the e-mail below.
How long we keep it
Paid bookings: at least 5 years (tax and accounting retention period). Checkouts that were never paid: the personal data (guests, e-mail, phone, city) is deleted after 90 days, leaving only the order's technical record. Searches, browsing records, checkout use and hotel-page visits: 180 days, deleted automatically. Technical record of supplier calls: the content (which includes the guest names of a booking) is removed after 21 days, and the record without content after 365 days. Virtual assistant conversations (messages, e-mail and IP): 180 days, deleted automatically; the verification code, after 1 day; the assistant's rate-limit and cost counters (with the IP), within 2 days. Other IP counters: deleted within a few hours. Account, Club profile, offers and affiliate or partner-hotel sign-ups: while the account or relationship exists — you can ask for deletion at any time.
AI assistants
If you use 4me - Brazil Hotels through an AI assistant (via our MCP server and your personal key), we record on the searches (including those with no result) and on the orders made that way that they came from the assistant, plus the app's name (e.g. Claude, ChatGPT, Cursor) as it identifies itself when connecting — only the name, no version and nothing from the conversation — so we know where each booking comes from. It is kept for the same period as the search or booking.
Your rights
You may ask for confirmation that we process your data, access, correction, anonymisation or deletion, portability, information on who we share it with, and withdraw consent where it applies. Write to support@brazilhotels.online — we reply within 15 days. Completed bookings may need to be retained for the tax period even after account deletion.
Tours and activities (Civitatis)
If you buy a tour, we collect the lead traveller's first name, last name, e-mail and phone, plus the answers that activity requires — they vary by activity and may include details of each participant, such as name, ID document or date of birth. This data goes to Civitatis (Civitatis Tours S.L., based in Madrid, Spain), the tour supplier, and through it to the local operator that runs the activity: the booking is made and the voucher issued with it. Civitatis handles that data under its own privacy policy. Tour photos load directly from Civitatis's servers, which therefore receive your IP address and browser data. Legal basis: performance of the contract (the purchase you asked for). We keep this data with the order for the same period as paid bookings (at least 5 years, for tax purposes); the technical log of the call to Civitatis, which also contains it, follows the technical-record period described above. Tour payment happens on Stripe — your card number never touches our servers.
International transfer
Our servers and those of our payment, e-mail and AI partners are in the United States or elsewhere outside Brazil, so your data is transferred out of the country to provide the service you asked for. Stay details go to the hotel in Brazil — that is what makes the booking possible.