Privacy
AXITUR is the tourism platform of the State of Amapá. This page explains which personal data the site processes, what for, for how long and with whom, under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).
Community contributions
Submitted photos, stories, credits and sources are restricted to the responsible team until review. Approved photos and credits may appear on the place page. The original file is discarded and the review copy has no public address. Submission and review records are retained to track the content’s origin. Do not send personal documents or other people’s private information. Contact us about your data using the address at the end of this page.
Site visitors
You do not need an account to browse AXITUR, and the site does not store personal data about visitors. We do not use tracking cookies or third-party analytics tools: usage statistics are only daily totals that identify no one.
When you use “Where am I?” or “Sort by distance”, the comparison happens on your own device and your location is not sent to the server. What you download to use offline stays only on your device and can be deleted in the browser settings.
As on any website, the servers and the delivery network log the IP address and the requested page, for security and to investigate failures. These logs are kept for 180 days by the companies listed below. AXITUR does not store visitors' IP addresses in its own database.
Cookies
The site only uses technical cookies, and only for people who log in (partners and public servants): the session cookie, which keeps the person signed in, and the form protection cookie (csrftoken). That is why there is no cookie consent banner.
Partners and public servants with an account
For the account we keep name, e-mail and, if given, phone number. For the business, the CNPJ or CPF (Brazilian company and personal tax numbers), used to confirm identity and the Cadastur registration. The CNPJ and CPF never appear on public pages. For individuals, the address and map pin only appear if the person chooses to show them.
Retention periods: the account, while it exists; a rejected and never published registration, 180 days after the rejection; an unaccepted staff invitation, 30 days; a profile claim request, 1 year after the decision; the change history (who changed what and when), 5 years; backup copies, 30 days. A public servant account with no login for 90 days is deactivated.
Accepting the terms of use when creating the account means acknowledging the rules, not giving consent. The legal basis of each processing activity (performance of a contract or execution of public policies, depending on the contracting model) and the periods above are a proposal that the State Attorney General's Office validates before the public launch.
Your rights
You can delete your account at any time from the partner dashboard: the name and e-mail are also erased from the history and, for individuals, the CPF is erased from the business. Profiles created from Cadastur have an “I don't want to appear” link on their page.
The data controller and the data protection officer will be named on this page before the public launch, as defined by the State Attorney General's Office.
To request access to or correction of your data, or to ask about this page, write to:
Companies that process data for AXITUR
These companies process data on behalf of AXITUR. No personal data goes to a company outside Brazil without a contract with the standard international transfer clauses of the Brazilian National Data Protection Authority (Resolution CD/ANPD 19/2024).
- Google Cloud (Brazil, São Paulo): servers, database, automatic backups and technical logs.
- Cloudflare (global network): site delivery, visitors' IP addresses, the security check of the partner sign-up (Turnstile) and public files, such as photos and maps.
- Anthropic (United States): automatic translation of published texts, which may contain personal data written by individual partners, such as guides and artisans. It receives no one's e-mail, document or contact details.
- Amazon SES (Brazil, São Paulo): sending e-mails to partners and public servants.
- Magalu Cloud (Brazil): backup copy of the database and photos, outside the main provider.