Anyza
Sign in

Privacy Policy

Last updated: October 24, 2026 · version 1.4

This policy explains what data Anyza collects, why, who we share it with and how you stay in control. It covers every site in the Anyza family (Market, Club, Events, Radar, Anyza Pay, credits and anyza.net), which share one account. It follows Brazil's data protection law (LGPD, Law 13.709/2018) and mirrors the rights granted by the GDPR.

1. Who handles your data

Controller: Anyza. For privacy matters and to exercise your rights, contact our data protection officer: legal@anyza.net.

2. What we collect

You give us:

  • Account: e-mail, display name, username, profile picture, bio, region and language. If you sign in with Google, we receive your name, e-mail and picture from it.
  • Verification: a confirmed e-mail (level L1) and, optionally, a phone number (level L2). For level L3, a photo of an official document, reviewed by a person on the moderation team and deleted as soon as there is a decision, approved or not. From that review we keep only the document type, the issuing country and the date — never the document number, never the image.
  • Listings: title, description, photos, price, category, item details and the location you provide.
  • Communities and events: what you publish (posts, comments, chat room messages and direct messages, clips, lessons, files, poll votes, events, live streams), the communities you belong to and your city, if you appear on the members map.
  • Interactions: chat messages, public questions and answers, reviews, favourites, reports and the questions you ask the help assistant.
  • Payments and credits: purchases of credits, tickets and subscriptions (what, when, amount and status). If you use Anyza Pay as a merchant: the wallets you register (Solana addresses, Bitcoin extended public key, or xpub, and Lightning address). We never ask for or store private keys or recovery phrases, and we never see your card data.
  • Integrations: if you link Telegram, we store your Telegram ID and username; if you authorize Discord, we store your Discord ID and username. The Discord authorization (scopes "identify" and "guilds.join") is used once to add you to the server and is not stored.

We generate or receive automatically:

  • Usage and security data: IP address, browser and device, pages visited, date and time, error logs and moderation records.
  • Cookies and local storage (see the Cookie Policy).
  • Approximate location when you use "near me" or set a listing's location.
  • Push notifications: if you turn them on for a device, we store the technical delivery address your browser creates for that device.
  • Public blockchain data: to recognize payments, we read public transactions (address, amount, date, transaction ID) linked to the wallets involved.

3. How we use it, and on what legal basis

  • Performing the contract: creating and keeping your account, publishing listings and content, search, chat, questions, deal records and reviews, running communities, events, Anyza Pay, credits and the Telegram and Discord integrations you asked for.
  • Legal obligation: keeping access logs as required by Brazilian law and responding to authorities.
  • Legitimate interest: security, fraud and abuse prevention, content moderation, rate limits, aggregate product metrics and service improvement.
  • Consent: optional communications, push notifications and sharing precise browser location.

We use artificial intelligence, from a contracted provider, for content moderation, automatic translation of community content, robot posts written at the owner's request, community covers and icons, and the help assistant. We do not sell your data and we do not run behavioural advertising.

4. What is public

  • Your public profile shows username, display name, picture, bio, region, verification level, rating, number of deals and join date — plus "online now" or "last seen", rounded to 5 minutes.
  • Your listings, your questions and published reviews are public.
  • What you publish in a community is visible according to that community's settings, may be automatically translated into other languages and is also seen by the community's staff.
  • On the members map only your city appears, with the pin shifted a few kilometres from the city center, never an address. You can hide yourself from maps at any time.
  • We never display your e-mail, phone, identity document or the exact address of a listing. Location is shown at city level and, on the map, as an approximate zone of about 1 km — the exact coordinate you provide stays on the server and is not accessible to other users.
  • We strip photo metadata (EXIF), including camera geolocation, on upload.
  • Whoever files a report is never revealed to the reported party.
  • Blockchain transactions are public by nature: anyone can see addresses and amounts on the network, regardless of Anyza.

5. Who we share with

We use processors acting on our behalf, under contract:

  • Cloud infrastructure — database, authentication, file storage, hosting and running the sites.
  • Network and security — DNS, abuse protection and anti-bot verification.
  • Communication — e-mail delivery and verification SMS.
  • Artificial intelligence — automated review of content (text and images) for moderation, automatic translation, robot posts, community covers and icons, and the help assistant.
  • Video — hosting, conversion and streaming of clips (short videos).
  • Card payments — a payment processor for credit purchases and, when the owner or organizer chooses it, for their sales.
  • Google — sign-in with your Google account, when you choose it.
  • Telegram and Discord — only if you use those integrations.
  • Your browser's or operating system's push services (Apple, Google, Mozilla) — delivering the push notifications you turned on.
  • Blockchain access — providers of access to the public networks (Solana and Bitcoin) to recognize payments.
  • YouTube and other platforms — when a community owner embeds a video or live stream, the source platform receives viewers' technical data under its own policy.
  • Rates and maps — currency rate services and open map services.
  • Error monitoring and, only if you accept it in the cookie notice, product analytics (data stored in the European Union; typed fields, chats, wallets and payment details are hidden in session recordings).

We choose well-established providers, under contract and with security and data protection commitments. For security reasons we do not publish each provider's name; you can get the list on request at legal@anyza.net.

When you buy a subscription or a ticket, the community owner or event organizer receives the data needed to serve you. From then on, they are also responsible for that data.

We may also share data with authorities under a legal obligation or court order, and with third parties in a corporate reorganisation, keeping this policy in force.

Some of these providers are outside Brazil. International transfers rely on the safeguards foreseen in the LGPD (contractual clauses and the provider's security commitments).

6. How long we keep it

  • For as long as the account exists. A deactivated account keeps its data, hidden from the public, until you reactivate.
  • Permanent erasure: you can request it at any time at legal@anyza.net. We anonymise the profile and delete personal data. What remains, by legal obligation or legitimate interest: access logs for the legal period, deal records and reviews (shown as "removed user"), purchase and payment records, moderation and sanction records, and data needed for ongoing proceedings.
  • Access logs: 6 months. Tax and contractual records, where they exist: 5 years.
  • Integrations: leaving the group ends access; you can ask at any time for your Telegram or Discord account to be unlinked.

7. Your rights

At any time you may: confirm that processing exists; access your data; correct incomplete or outdated data; request anonymisation, blocking or deletion; request portability; know who we share with; withdraw consent; and object to processing based on legitimate interest.

Anyza is used worldwide. If you live outside Brazil, you also have the rights your country's or region's law grants (for example, the GDPR in the European Union), and you can exercise them through the same channels.

Much of this you can do yourself on the site: edit your profile, change e-mail and phone, delete listings and content, hide from the members map, turn off push notifications, deactivate the account and choose categories you don't want to see. For the rest, write to legal@anyza.net — we answer within 15 days.

8. Security

Row-level protection on every database table, encrypted traffic, no passwords at all (one-time codes), sensitive columns unreachable from the browser, rate limits against abuse and a log of every moderation action. On Anyza Pay we only store public wallet data: an extended public key (xpub) can generate receiving addresses but cannot spend. No system is perfect: in a significant incident we will notify you and the authority, as the law requires.

9. Children

Anyza is for people aged 18 and over. We do not knowingly collect data from minors. If that happens, the account is closed and the data deleted.

10. Changes

We may update this policy. The current version is always on this page, dated; material changes are announced on the site or by e-mail.