Privacy Policy

Introduction

This Privacy Policy describes how Instituto Brasileiro de Valores Imobiliários Ltda. EPP, registered under CNPJ No. 47.041.817/0001-71, processes the personal data of visitors to the institutional website (www.ibvi.ai), users of the IBVI CRM web platform (crm.ibvi.com.br), and users of the IBVI.AI mobile application. By accessing or using any of these environments, you acknowledge that you are aware of the practices described in this Policy. Under the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018), Instituto Brasileiro de Valores Imobiliários Ltda. EPP acts as the controller of the personal data processed within the Platform, unless otherwise indicated.

Data We Collect

We may collect different types of personal data depending on how you browse www.ibvi.ai, use IBVI CRM, or access the IBVI.AI app:

• •
  Registration and authentication data: Full name, email address, password (stored securely using hashing and encryption where applicable), profile information, CRM workspace data, and login data via Google or Apple, such as name, email, and unique account identifier.
• •
  Voluntary information and optional in-app location: Data, texts, queries, newsletter forms, prompts, documents, images, valuations, property details entered by you on the website, CRM, or Application, and — strictly within the IBVI.AI mobile app upon your explicit OS permission — location coordinates to center regional map searches (the www.ibvi.ai website blocks geolocation by default).
• •
  Usage data and optional analytics: Access records, CRM and Application usage events, logs, date, time, and duration of access, diagnostic and crash reports, as well as aggregated browsing metrics via Google Analytics 4 (GA4) on www.ibvi.ai activated strictly after your explicit opt-in consent. You can withdraw consent at any time through the "Cookie preferences" link in the site footer, which stops collection and deletes GA4 cookies from your browser.
• •
  Technical data and preferences: IP address, browser user-agent, device type and model, operating system, technical session identifiers, and local consent preference storage (ibvi-analytics-consent), used for security, fraud prevention, and honoring your privacy choices.

How We Use Data

We use personal data for the following purposes:

• •Create, authenticate, and manage user accounts, enabling secure access to the Application.
• •Operate, maintain, and improve the Application's features.
• •Process information you enter and generate responses, analyses, estimates, classifications, summaries, and recommendations, including through artificial intelligence technologies where applicable.
• •Provide support and send communications related to your account, security, operation, or relevant changes to the Application.
• •Monitor the stability, security, and performance of the platform and prevent fraud, abuse, and unauthorized access.
• •Comply with legal and regulatory obligations or determinations of competent authorities and protect the rights and interests of the Application, the company, and users.

Data Sharing

We do not sell users' personal data. Data may be shared only when necessary, in the following cases:

• •With authentication providers (Google and Apple) and providers of infrastructure, hosting, database, security, technical support, performance analysis, and Application operation.
• •With artificial intelligence, language model, and automation providers necessary to deliver the features, which act as processors and handle the data only according to our instructions and applicable law.
• •With public authorities, regulatory bodies, or third parties, when required by law, court order, or in the event of corporate reorganization, merger, or acquisition.

Storage and Security

We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse, or improper disclosure, including access control, authentication, encryption where applicable, environment segregation, monitoring, backups, and log records. Despite our efforts, no system is completely secure, and absolute security against all risks cannot be guaranteed.

Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes described in this Policy, while the account remains active, or for the period necessary to comply with legal, regulatory, and contractual obligations, prevent fraud, ensure platform security, or exercise rights. After account deletion or the end of the processing purpose, data may be deleted, anonymized, or retained only when there is a legal basis for retention.

Artificial Intelligence and Third-Party Services

IBVI.AI may use artificial intelligence technologies, language models, and technology providers to process information and generate results related to the Application's features:

• •Data entered in the Application is not used to train public third-party models, and we adopt reasonable measures to limit the use of data to the purposes necessary to provide the service.
• •Responses and analyses generated by artificial intelligence may contain inaccuracies or limitations and should be critically reviewed before being used for commercial, legal, financial, real estate, or strategic decisions.
• •Some providers may be located outside Brazil or store data on international servers; in such cases, we adopt measures consistent with the LGPD to protect data transferred internationally.

Children and Adolescents

The Application is not intended for minors under 18 years of age, and we do not intentionally collect their personal data. If we identify that minors' data has been collected improperly, we will take reasonable measures to delete such information. If you believe a minor has provided data to the Application, please contact us through the channels indicated in this Policy.

Changes to This Policy

This Policy may be updated periodically to reflect legal, regulatory, technical, or operational changes. When there are relevant changes, we may notify users through the Application, email, or other appropriate means. The most recent version will always be available in the Application or on a page indicated by the company.