Inteligência Imobiliária
Privacy Policy
Version 2026-11-01. This policy explains how we process personal data under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).
1. Controller and operator
Booleano Desenvolvimento de Software Ltda (CNPJ 59.213.733/0001-57), operating under the Inteligência Imobiliária brand, is the controller of account, authentication, billing, security, strictly necessary cookies and public-data intelligence. For brokerage inventory, properties, listings, clients, leads, visits, offers, dossiers and alerts, Booleano Desenvolvimento de Software Ltda acts as an operator following the brokerage's documented instructions and never use that data for our own purposes.
2. Data we process
- Account: e-mail, name, password hash, Google identifier, signup IP, locale, session and API keys.
- Billing: plan and Asaas identifiers; payment data is collected by Asaas.
- Inventory/CRM: address, unit, area, bedrooms, parking, characteristics, IPTU contributor number, coordinates, price, broker, seller, client, contacts, notes, leads, visits and offers.
- Public data: ITBI, IPTU, GeoSampa, IBGE and derived market data.
- AI chat: messages, tool arguments and tool results sent to OpenAI.
- Logs: access logs without query strings, AI/write audit metadata and consent records.
3. Purposes and legal bases
We process data to perform the contract (Art. 7, V), comply with legal obligations (Art. 7, II), exercise rights (Art. 7, VI), protect security and prevent fraud (Art. 7, IX) and, where applicable, with consent (Art. 7, I). Public-data intelligence relies on legitimate interest with a documented balancing test.
4. Sharing and international transfer
Subprocessors: OCI (hosting), Cloudflare (CDN/security), Resend/SMTP (e-mail), Asaas (payments), OpenFreeMap (maps), Nominatim (geocoding) and OpenAI (AI). Chat content is sent to OpenAI. We require data-processing agreements, standard contractual clauses and a no-training commitment.
5. AI payload
The chat may send the subject property's full address, area, bedrooms, parking, type, prices, estimates, ranges, scores and public ITBI data. We do not send broker, seller or client names, contacts, counterparties, notes, free-text characteristics, IPTU contributor numbers, matrícula or cartório. CPF/CNPJ, e-mail and phone patterns are masked before sending.
6. Retention
Pending signups 24 hours; reset tokens 1 hour; signup IP 180 days then anonymized; account data for the account life and legal periods; raw ITBI 6 years with legal-hold support; upload pending rows 90 days; dossiers expiry + 30 days; notifications 12 months; app/nginx/Cloudflare logs 90 days without query strings; encrypted backups 30 days daily and 12 months monthly; OpenAI per DPA/ZDR.
7. Your rights
You may request confirmation, access, correction, anonymization, portability, deletion, sharing information and consent revocation through your account or /privacy/export, /privacy/me, /privacy/delete and /privacy/consent. We respond within 15 days. For brokerage client data, the brokerage is the controller.
8. Security
Encryption in transit and at rest, encrypted backups, least privilege, MFA for operators, audit logs and an incident-response plan. Relevant incidents are notified to ANPD and data subjects as required.
9. Cookies
Only strictly necessary session, language and security cookies; no analytics or marketing cookies in this release. See the Cookie Policy.