OverlatamPrivacy policy
Last updated: Oct 7, 2026
This policy explains what data we keep about you, why, who we share it with and how to exercise your rights. At the end there is an annex by country with the law that protects you and the authority you can complain to.
1. Who is responsible for your data
Beeper Solutions, based in Uruguay. Contact for anything related to your data: overlatam.app@gmail.com.
Because the responsible party is in Uruguay, the processing of your data is mainly governed by Uruguay's Law 18,331 on Personal Data Protection, under the oversight of the Personal Data Regulatory and Control Unit (URCDP). You also keep the rights granted to you by the law of your own country (see the annex).
2. What data we keep
| Data | Where it comes from | Is it public? |
|---|---|---|
| Email address | You enter it to sign in | No. It is never shown. |
| Profile: name, username, country, travel mode, vehicle, "about you" and photo | You fill it in (country, vehicle, description and photo are optional) | Yes |
| Posts, comments and crossing reports (date, direction, wait, cost) | What you post | Yes, and search engines like Google can find them |
| "Helpful" votes | When you tap the button | Only the total is shown, not who voted |
| Moderation reports you send | When you report something | No. Only moderators see them |
| Technical data: IP address, browser, date and time of access | Generated when you use the site | No. Kept in our providers' logs for a limited time |
We don't use your location, don't show you personalized advertising and don't sell your data.
3. What we use it for
- To provide the service: your account, your profile and showing what you post. This is necessary to fulfill the Terms of use.
- To keep the community safe: moderating, stopping spam and preventing abuse. This is our legitimate interest and the community's.
- To send you sign-in links and important notices about your account. We don't send promotional emails without your consent.
- Optional data (photo, country, vehicle and description) is used because you chose to provide it; you can delete it whenever you want.
4. Who we share it with
We use these providers, which process data on our behalf and only to provide their service to us:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, accounts and photos | Servers in São Paulo, Brazil |
| Vercel | Website hosting | Servers in several countries, mainly the United States |
| Resend | Sending the emails with your sign-in link (only your email address) | United States company |
This involves international data transfers outside your country. Our providers apply security measures and contractual data protection commitments.
We may also share data if a competent authority requires it by law.
5. How long we keep it
- For as long as you have an account.
- If you delete your account, your profile, photo, posts, comments, votes and reports are deleted immediately. They may remain in backups for up to 30 days, until those are renewed.
- The moderation log keeps which action was taken and on which identifier, without the content, so decisions can be reviewed.
6. Your rights
You can access, correct, update, delete and take your data with you, and object to certain uses:
- Correct: by editing your profile in "My profile".
- Access and portability: with the "Download my data" button in "My profile" (JSON file).
- Delete: with "Delete my account" in "My profile".
- For anything else, write to overlatam.app@gmail.com. We reply within the deadlines set by the law of your country.
If you think we haven't respected your rights, you can complain to the authority in your country (see the annex).
7. Cookies
We only use the cookies needed to keep you signed in. We don't use third-party advertising or tracking cookies.
8. Minimum age
Overlatam is for people aged 18 or older. If we learn that an account belongs to a minor, we delete it.
9. Security
Data travels encrypted (HTTPS), database rules prevent one person from modifying another's data, and administrative access is restricted. No system is infallible: if an incident affects your data, we will notify you and the authorities as the law requires.
10. Changes
If we change this policy in an important way, we'll let you know on the site and ask you to accept it again.
Annex by country
| Country | Law that protects you | Authority to complain to |
|---|---|---|
| 🇦🇷 Argentina | Law 25,326 on Personal Data Protection | Agency for Access to Public Information (AAIP) |
| 🇧🇷 Brazil | General Data Protection Law (LGPD, Law 13,709/2018) | National Data Protection Authority (ANPD) |
| 🇺🇾 Uruguay | Law 18,331 on Personal Data Protection | Personal Data Regulatory and Control Unit (URCDP) |
| 🇨🇱 Chile | Law 19,628; from December 1, 2026, Law 21,719 | Personal Data Protection Agency |
| 🇵🇾 Paraguay | National Constitution (habeas data) and the personal data rules in force | Ordinary courts (habeas data action) |
| 🇧🇴 Bolivia | Political Constitution of the State (privacy protection action) | Ordinary courts |
| 🇵🇪 Peru | Law 29,733 on Personal Data Protection and its regulations | National Authority for Personal Data Protection (Ministry of Justice) |
| 🇪🇨 Ecuador | Organic Law on Personal Data Protection (2021) | Superintendency of Personal Data Protection |
| 🇨🇴 Colombia | Law 1581 of 2012 | Superintendency of Industry and Commerce (SIC) |
| 🇻🇪 Venezuela | Constitution (habeas data) | Ordinary courts |
| 🇵🇦 Panama | Law 81 of 2019 on Personal Data Protection | National Authority for Transparency and Access to Information (ANTAI) |
| 🇨🇷 Costa Rica | Law 8968 on the Protection of Individuals regarding the Processing of their Personal Data | Agency for the Protection of Inhabitants' Data (PRODHAB) |
| 🇲🇽 Mexico | Federal Law on the Protection of Personal Data Held by Private Parties (2025) | Secretariat of Anti-Corruption and Good Governance |
| 🇪🇺 European Union | General Data Protection Regulation (GDPR) | The data protection authority of your country |
If you live in another country, the rights granted by its law apply.