Privacy Policy

LOSI Sp. z o.o. (LOSI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Korytnicka 46/52, 04-109 Warsaw, Poland; KRS 0001146588, REGON 540499518 and NIP 1133154642 (LOSI or Stadami), is the controller for processing described in this Policy. Contact for privacy, support, complaints and rights: support@stadami.com.

This Policy covers stadami.com and its editions, web signup and login, the Stadami mobile apps, backend, accounts, profiles, directory, search, messages, reviews, Insights, subscriptions, trials, Boost and support. Real-world services supplied by Professionals and third-party services are governed by the respective provider’s policies.

Brazilian representative/establishment: see the current information at stadami.com.

We process data for legitimate, specific and disclosed purposes, limited to what is necessary, with transparency, security, prevention, non-discrimination and accountability under the LGPD and, where applicable, the GDPR.

Stadami does not process payment for real-world Services between a Client and Professional. Digital purchases are processed by Apple App Store or Google Play. Do not send a password, card data or unnecessary sensitive data in messages, support or free-text fields.

Categories depend on the features used, the Client or Professional role, choices and device permissions.

The specific basis depends on context and applicable law. Consent is not used where processing is strictly necessary for the service; legitimate interests do not replace consent required for analytics or marketing.

We receive data directly from you; automatically from browsers, apps, infrastructure and permitted technologies; from Google, when you choose to log in with your Google account; from Stores and providers to validate purchases; from other users through messages, reviews and reports; and from authorised or public sources where needed for safety and compliance.

Campaign parameters should not contain a name, email, phone number, password or other direct identifier.

Signup uses email, password and a verification code, or a Google account; Client signup also asks for a name. In web signup, credentials pass over a protected connection to the Stadami backend; the signup session (the code's identifier and, after confirmation, the new account's access token until the profile step ends) remains in an httpOnly cookie for up to 30 minutes. Clients may log in on the Website with the same Stadami account used in the apps: the login session remains in an httpOnly cookie (stadami_client) for up to 30 days or until logout, and the browser receives only the identifier and display name. We may record the accepted version, date, time and evidence.

On the Website, Client login and signup may also use a Google account (Google Identity Services). The Google login button loads only on the /login and /signup pages, when it is shown; when it loads, Google receives your IP address, browser and the page's origin, writes no cookie on the Website and processes the authentication as an independent controller under its own privacy policy. When you choose Google, the Website receives from Google a signed token with the Google account's identifier, email and name and hands it to the Stadami backend (the same one the apps use), which verifies it and stores the Google account identifier, the email, as the account's email, and the name. If a Stadami account with the same email already exists, the Google login is linked to it; if none exists, the account is created at once, without a verification code, and by continuing with Google you declare that you are 18 or over and accept the Terms of Use and this Policy. The session opened is the same login session described above; nothing else changes.

Stadami is for people aged 18 or over. We use in-flow confirmation, Store ratings, age signals and proportionate measures. If a minor is indicated, we may restrict access, verify in a data-minimising manner and provide a challenge route through support@stadami.com.

A public profile may include data and content selected by the Professional. The Website does not publish the account email or exact address; city and district may appear. The contact channels the Professional published in the app (for example WhatsApp, Instagram, Telegram or a website), which may contain a phone number or username, are shown only to Clients logged in on the Website, never to anonymous visitors or in the pages' code. Public content may be indexed, copied by third parties or remain temporarily in caches.

Reviews and content are subject to moderation, not universal verification of identity, licence, qualification, safety or quality. We may remove, restrict, de-index or anonymise content where required for law, safety, rules, fraud, a valid request or moderation.

Private messages are not public or used in advertising without separate express consent. We do not promise routine human reading. Authorised access may occur for a report, fraud, harassment, safety, support, dispute, legal obligation or evidence preservation.

Operational communications about accounts, security, purchases or material changes are not marketing. Electronic marketing is sent only with the required basis and opt-out.

Search and ranking may consider relevance, location, filters, completeness, activity, reviews, engagement, plan and Boost. Payment may influence visibility but does not prove quality or guarantee results.

If a solely automated decision has a significant effect, we provide information, challenge and human review as required. The Website quiz produces only a rounded estimate and no legal effect.

We share only as needed with hosting/infrastructure (including Vercel for the Website); backend, database, security, communications and email/OTP providers; Apple and Google for distribution and purchases; Google as the provider of login with Google, when you choose it; Google Analytics 4, Google Ads (via Google Tag Manager) and Meta Pixel after consent; AppsFlyer for links/attribution; support, analytics and moderation providers; confidential advisers; authorities when required; and a successor in a valid corporate transaction.

Apple, Google, Meta, WhatsApp, social networks and other third parties may also receive data directly when you use their services and act as independent controllers. In login with Google, Google is the independent controller of the authentication under its own privacy policy. We do not sell personal data.

LOSI is in Poland and users are in Brazil. Providers may process data in Brazil, the European Economic Area, the United States or other regions where they operate. Where required, we use a valid mechanism under the LGPD and ANPD Resolution No. 19/2024 and, where applicable, GDPR Chapter V, such as adequacy, standard contractual clauses or another lawful safeguard.

You may request information about recipients, countries and applicable safeguards at support@stadami.com.

We retain data only while needed for the purpose, legal obligations, safety, fraud prevention, disputes and establishment/exercise of rights. We then delete, anonymise or restrict it. Exact periods may vary with configuration, risk and obligations; we apply the criteria below.

Deleting an account does not automatically cancel a Store subscription. Deletion may not immediately erase independent third-party copies or data that law requires us to retain.

We use proportionate measures including protected connections, access controls, validation, attempt limits, session protection, logs, vendor management, backups and incident response. No system is absolutely secure.

Where an incident may cause relevant risk or damage, we notify the ANPD and affected people under applicable requirements and other authorities where required.

Subject to the LGPD, you may request confirmation/access; correction; anonymisation, blocking or deletion of unnecessary, excessive or unlawful data; portability when regulated; sharing information; withdrawal of consent; deletion of consent-based data subject to exceptions; objection; review/information about automated decisions; and petition to the ANPD.

Where the GDPR applies, rights may also include restriction, objection, portability, erasure and complaint to an authority, including Poland’s UODO. Send requests to support@stadami.com. We may verify identity proportionately and respond within legal periods.

You may adjust cookies at /cookies, device permissions on the device, marketing in the relevant channel, account data in the app and subscriptions in the Store. Rejecting analytics/marketing does not prevent basic content; blocking essential technology may prevent login, verification, language or security.

To delete the account, use Settings in the app or support@stadami.com. Deletion feedback is optional.

We may update this Policy for legal, technical, provider, purpose or product changes. We will highlight a material change and request renewed consent where necessary. A new version applies prospectively and does not remove accrued rights.

The PT-BR version is primary; English and Spanish are convenience translations. Version 1.1 adds Client login on the Website, its session cookie and the display of the contact channels published by Professionals to logged-in Clients. Version 1.2 adds login and signup with a Google account on the Website. Version 1.3 adds Google Ads, through Google Tag Manager, among the recipients after consent. Version 1.3. Effective: 3 November 2026. Controller: LOSI Sp. z o.o. Single contact: support@stadami.com.