Privacy policy.

Who is responsible for your data

The data controller is Fabrízio Gomes, an individual, licensed real estate broker, CRECI 5751 (9th Region, Brazil). Contact for any data request: the "Request about your data" form at the end of this page. As a small-scale processing agent he is not required to appoint a data protection officer (ANPD Resolution CD/ANPD No. 2/2022, art. 11), but he keeps this communication channel with the data subject (art. 11, § 1 of the Resolution, and art. 41, § 2, I of Law 13,709/2018).

What data and why

• Buyer or seller questionnaire: your answers, name, email and WhatsApp number, and the KML/KMZ file or coordinates of the property (if you send them), are stored only after you tick the consent box at the end. The language, source page and campaign (utm) and the date of consent are also kept. Purpose: so Fabrízio can review your profile and, if it makes sense, contact you for a second conversation, online.
• Free guide: if you request the guide, your name, email and profile (buy, sell, invest or just understand) are stored with the date of consent. Purpose: to unlock the guide and, if you wish, for Fabrízio to contact you.
• Profile score: the system gives each questionnaire a 0–100 score (hot, warm or cold) to organize the order of follow-up. Nobody is denied a review because of it, and you can ask Fabrízio to review it (LGPD, art. 20).
• AI assistant on the site: messages are processed in real time only to generate the answer, and the chat is not stored: it stays only in your browser while the tab is open.
• "Chácaras em Petrolina" page: there, if you tap "Yes, save it" in the chat, your name, WhatsApp number, the chat summary and messages, language, source page and campaign and the date of consent are stored so Fabrízio can contact you about the farm plots.
• Security: to prevent abuse, the system counts daily messages and submissions using a code derived from your IP address (the IP itself is not stored).
• WhatsApp: the number you give is used only so Fabrízio can contact you, if your profile is a fit, and to talk about your request.
• Approval, personal link and visits: Fabrízio records whether he approved or declined your questionnaire. If approved, a personal link to the reserved dossier is generated, and he keeps the date you accepted the confidentiality commitment and any visit requests you make. The public property showcase shows only the region and never owner data, documents, contact or exact location.
• Request about your data: name, email, the right chosen and the message, used only to answer the request.
• Emails: if you write to Fabrízio's contact email, the message (sender, subject, text and the names of attachments) is stored and summarized by artificial intelligence so he can decide how to handle it. The system never replies on its own.

We never ask for ID numbers, documents, bank details or passwords on the website. We do not sell or share data for third-party advertising.

Legal basis

Storing your answers and data depends on your consent (Law 13,709/2018, art. 7, I), given at the end of the questionnaire or guide sign-up, which you can withdraw at any time (art. 8, § 5). Processing a chat message to answer your request relies on pre-contractual steps at your request (art. 7, V), and abuse counting on legitimate interest (art. 7, IX).

Where it is stored and who processes it

The website, the contact database and the AI run on Cloudflare (processor), whose servers may be outside Brazil. This international transfer is based on your specific consent, informed in the consent text (art. 33, VIII).

How long

Contacts that did not result in a deal: up to 12 months without activity, then deleted, together with the property file. Closed deals: 5 years, because brokers must keep transaction records (Law 9,613/1998, arts. 9 and 10; COFECI Resolution 1,336/2014), as allowed by the LGPD (art. 16, I).

Your rights

At any time and free of charge you may request: confirmation that we hold your data, access, correction, anonymization, blocking or deletion, portability, information on sharing and withdrawal of consent (art. 18). Ask through the form at the end of this page. Confirmation and access are given immediately in simple form, or within 15 days as a full statement (art. 19). You may also file a complaint with Brazil’s data protection authority, ANPD (art. 18, § 1).

Cookies

The website uses no tracking or advertising cookies. The chat keeps the conversation in your browser tab’s storage (sessionStorage), which is cleared when you close the tab.

Publishing to social networks (YouTube and TikTok)

Fabrízio uses an internal tool, at /publicar-youtube and /publicar, to upload his own videos to his YouTube channel and his TikTok account. It is for his exclusive use and relies on the YouTube API Services and the TikTok Content Posting API. Anyone who signs in with a Google account in this tool is also bound by the YouTube Terms of Service and the Google Privacy Policy.

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Data accessed: on YouTube, the name, ID and picture of the authorized channel and permission to upload videos; on TikTok, the username, display name, picture and permission to post videos.
• Purpose: only to show which account the video will go to and to upload the chosen video. The tool does not read videos, comments, subscribers, followers or viewer data.
• Storage: the session access is kept in an encrypted browser cookie for up to 1 hour (YouTube) or 24 hours (TikTok). For scheduled posting, access keys are kept in Fabrízio's protected password vault. Videos go straight to the network and are not stored on the site. Nothing is sold or shared with third parties.
• How to revoke access: on Google, at the account permissions page (security.google.com/settings/security/permissions); on TikTok, at Settings and privacy › Security and permissions › Apps and services; or with the tool's "Sair" (sign out) button, which revokes access immediately.
• Deletion: when access is revoked, or on request through the form below, stored keys are deleted within 7 days.