Privacy Policy

1. Who the controller is

HappyMobi, CNPJ 65.073.103/0001-27, at R. 239, 79 — Meia Praia, Itapema/SC, Brazil.

For privacy matters, including exercising your rights, contact our data protection officer at [email protected].

2. When you visit this site

• The map in the “Where to find us” section is embedded from Google Maps. Loading it lets Google collect data under its own privacy policy.
• This site has no forms and asks for no data. The buttons lead to WhatsApp, the phone and Instagram — what happens on those channels is also governed by those platforms' policies.

3. When you rent a scooter

• Identification: name, Brazilian taxpayer number (CPF), date of birth, address and phone. For visitors from abroad, the equivalent document and country of origin.
• About the rental: which scooter, pickup and return date and time, price, service point, discounts, notes and any record of swapping equipment.
• Verification: we check the CPF you give us against Brazil's Federal Revenue database through SERPRO. We get back the holder's name, registration status and date of birth, solely to confirm that the details presented match.
• Payment: processed by Mercado Pago. We neither receive nor store your card number. We keep the transaction ID, method, card brand, last four digits, number of instalments, amount and status.
• Late-return penalties and damage charges, where applicable.

4. When you message us on WhatsApp

We keep the number, the display name and the content of the conversation, along with the service history and call records.

This lets us pick up where we left off without you repeating yourself, and evidences what was agreed.

5. Internal security logs

The system we operate logs our team's actions — who did what, when and from which IP address. These logs exist for audit and security, and may reference the data of a rental.

6. Why we process, and on what legal basis

• To perform the rental agreement and the enquiries that precede it — LGPD art. 7, V.
• To meet legal, tax and accounting obligations — art. 7, II.
• Legitimate interest in fraud prevention, protecting our property and keeping the operation safe — art. 7, IX. This is where the CPF check belongs: we hand a valuable asset to someone who needs no driving licence, and verifying identity is what makes that workable.
• The regular exercise of rights, including in legal proceedings — art. 7, VI.

7. Who we share with

We do not sell personal data and do not pass it to third parties for advertising.

• SERPRO — CPF verification against the Federal Revenue database.
• Mercado Pago — payment processing.
• Meta — customer service through WhatsApp.
• Google — the map embedded in the “Where to find us” section.
• Accountants, lawyers and public authorities, where required by law or necessary to defend our rights.
• Brazilian credit bureaus, in the event of default, as provided in the agreement and subject to statutory requirements.

8. International transfers

Google and Meta may process data outside Brazil. The LGPD permits international transfers when supported by a lawful basis and adequate safeguards applicable to the processing.

9. How long we keep it

Rental and payment data: for as long as needed to perform the agreement and meet legal obligations, including the limitation periods that apply to collection and to defending our rights.

WhatsApp conversations: for as long as they remain useful for customer service and as evidence of what was agreed.

After those periods, data is deleted or anonymised.

10. Your rights

The LGPD gives you, at any time:

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate or outdated data.
• Anonymisation, blocking or deletion of unnecessary data or data processed unlawfully.
• Portability to another provider.
• Information about who we share your data with.
• Withdrawal of consent, where processing relies on it.
• Objection to processing carried out on the basis of legitimate interest.

11. How to exercise them

Write to [email protected]. We may ask for further details to confirm it is really you — that protects you. We respond within 15 days.

You may also complain to Brazil's National Data Protection Authority (ANPD).

12. Security

Access to data is limited to the staff who need it to do their work, protected by authentication and recorded in an audit log.

No system is entirely immune. If an incident occurs that poses a relevant risk to you, we will notify you and the ANPD as the law requires.

13. Children and teenagers

We do not rent to anyone under 16. Between 16 and 18, the rental is made with a responsible adult who signs the agreement — and whose data is likewise handled under this Policy.

14. Changes and languages

We may update this Policy. The version in force is always the one published on this page, with the date at the top.

Published in Portuguese, Spanish and English. In the event of any discrepancy, the Portuguese version prevails.