Last updated: June 18, 2026
Roteiro Solo is operated by ArtemisWorx LLC. Because Solo serves you directly (with no agency in the middle), ArtemisWorx is both the CONTROLLER and the PROCESSOR of your personal data under LGPD. This policy explains what data we handle, why, and what rights you have.
When you create an account, we collect your email and a hashed password (via Supabase Auth). When you build a trip — by forwarding or uploading a booking confirmation, or typing details — we store your travel data: names, dates, destinations, confirmation numbers, contact details, and identifiers contained in the booking such as CPF and date of birth where present. Usage logs (access times, browser type, approximate IP) are collected automatically for security.
We use your data solely to operate the service for you: to create, translate, display, update, and deliver your trip app; process payments; communicate material service changes; provide support; and prevent abuse and fraud.
We do not sell, rent, or trade your data. We do not share it with advertisers or data brokers. We do not use it for advertising, and we do not repurpose it for anything beyond delivering the service to you. We never store full payment card numbers.
Card data for your purchase is processed directly by Stripe and never touches our servers; we store only the Stripe customer identifier and purchase status. If a booking confirmation you upload happens to contain a card number, we retain only the masked digits already printed on it (e.g. •••• 5555) — never a full card number.
Supabase (hosting, database, auth), Stripe (billing), Resend (email), Anthropic / Claude (Ai features that generate and translate itinerary content), Replicate (Ai image generation), Google Places (activity photos), ElevenLabs (audio narration), Microsoft Clarity (analytics / session replay), Twilio (notifications), Open-Meteo (weather), and Netlify (web hosting). Each handles data only to provide its contracted function.
To diagnose issues and improve the product, we use Microsoft Clarity, which records anonymized session replays (page interactions) while you are signed in, configured to mask text and personal data. Used only for support and product quality — never for advertising.
We retain your data while your account is active. If you delete your account or request deletion, we remove the data within 30 days, except where we are legally required to retain records.
You may at any time: access your data, correct it, request deletion, export it, withdraw consent, and file a complaint with the relevant data-protection authority (ANPD in Brazil; state AG offices in the US). To exercise these rights, write to privacy@roteiroai.com.
We use session cookies to keep you logged in and localStorage for preferences (language, app state). We do not use third-party advertising trackers.
The service is not intended for anyone under 18. We do not knowingly collect data from minors.
Your data may be stored on servers in the United States or Europe (via Supabase and other subprocessors). We work to ensure appropriate contractual safeguards.
If we update this policy materially, we will notify you by email before the change takes effect.
Questions or requests: privacy@roteiroai.com