Privacy Policy
Last updated: September 15, 2026
This Policy explains which data emRadios processes, what for, with whom we share it and what your rights are.
1. Who the data controller is
The controller of the personal data processed in the Services is Grupo Oplena, responsible for developing and operating emRadios. For any privacy matter, contact us at [email protected].
2. Data we collect
Playback log: when you play a station on emRadios, we record the date and time, the station, your IP address, your account (if signed in), the approximate location derived from the IP (country and city) and, only if you have already allowed location in your browser, your device coordinates — we never ask for that permission just for this. We use this data to measure each station’s audience and prevent counting fraud; the station’s manager sees only aggregated numbers (starts and unique listeners per day), never your IP or identity. We keep these records for up to 12 months and then delete them automatically.
- Account data: when you create an account we collect name, email and password (stored encrypted). This data is optional — much of emRadios can be used without logging in.
- Content and interactions: favourite stations, likes, comments and other interactions you create while using the Services.
- Usage and device data: technical information generated automatically, such as IP address, device/system type and version, app identifiers, pages visited, stations played and error logs.
- Communications: messages you send us (e.g. by email or through the contact forms).
2.1. Contact data of stations, public bodies and organisations
Besides data of those who use the Services, we keep a professional and institutional contact record — radio stations, public bodies and organisations — used to invite them to claim their emRadios profile and for commercial offers relevant to their activity.
- Source: public sources only — the station’s or organisation’s own website, official open databases and the Brazilian national company registry. We do not buy third-party lists.
- Legal basis: legitimate interest (arts. 7, IX and 10 of the Brazilian LGPD) for professional communication between companies and institutions, balanced against the data subject’s rights. The address mostly identifies an organisation rather than a person; where it identifies a person, the rights in section 9 fully apply.
- How to opt out: every message carries unsubscribe instructions, and replying STOP is enough to be removed. You can also use the privacy centre. The request takes effect immediately: the address enters a suppression list checked before any send.
3. How we use the data
- Provide, maintain and operate the Services (playback, favourites, dashboard, etc.).
- Authenticate your account and keep you securely signed in.
- Personalise the experience (e.g. remember your favourite stations).
- Improve performance, fix errors and develop new features.
- Send important notices, respond to requests and prevent fraud/abuse.
- Comply with legal and regulatory obligations.
4. Legal bases
We process your data on the basis of performance of the contract/provision of the service, your consent where applicable, compliance with legal obligations and legitimate interest in the security and improvement of the Services, always respecting your rights and freedoms.
5. Sharing with third parties
We do not sell your personal data. We share data only as necessary with:
- Infrastructure providers that host and operate the Services (e.g. cloud and email providers), acting as processors under our instructions.
- App stores (Google Play / App Store), which apply their own policies when distributing and updating the app.
- Third-party radio streams: when you play a station, the audio is served from the station’s own server, which may log technical connection data (such as the IP) under its own policies.
- Authorities, when required by law or court order.
6. Cookies and similar technologies
We use cookies and local storage only for essential functions, such as keeping your session and your preferences. You can manage or delete cookies in your browser settings; disabling them may affect parts of the Services.
7. Data retention
We keep your personal data only for as long as necessary for the purposes described in this Policy or as required by law. When you delete your account, we remove or anonymise the associated data, except what we must retain by legal obligation or to defend rights.
8. Security
We adopt technical and organisational measures to protect your data against unauthorised access, loss or alteration — such as password encryption, access control and HTTPS-protected traffic. No system is 100% infallible, but we work continuously to mitigate risks.
9. Your rights
As a data subject, you may at any time:
- Confirm the existence of processing and access your data;
- Correct incomplete, inaccurate or outdated data;
- Request anonymisation, blocking or deletion of unnecessary data;
- Request portability and deletion of data processed with your consent;
- Withdraw consent and obtain information about sharing.
10. Children’s privacy
The Services are not directed at children under 13 and we do not knowingly collect their data. If we identify such collection without guardian consent, we will remove the data.
11. Changes to this Policy
We may update this Policy from time to time. When there are relevant changes, we will revise the “last updated” date at the top and, if necessary, notify you through the Services.
12. Contact
Questions, requests or complaints about privacy and data protection can be sent to [email protected]. The fastest route is the privacy centre — it requires no account and issues a ticket immediately.
