Privacy Policy

Introduction

This Privacy Policy describes how Instituto Brasileiro de Valores Imobiliários Ltda. EPP, registered under CNPJ No. 47.041.817/0001-71, processes the personal data of users of the IBVI.AI application. By accessing or using IBVI.AI, you acknowledge that you are aware of the practices described in this Policy. For the purposes of the Brazilian General Data Protection Law (LGPD), Instituto Brasileiro de Valores Imobiliários Ltda. EPP acts as the controller of the personal data processed within the Application, unless otherwise indicated.

Data We Collect

We may collect different types of personal data, depending on how the Application is used:

• •
  Registration and authentication data: Full name, email address, password (stored securely using hashing and encryption where applicable), profile information, and login data via Google or Apple, such as name, email, and unique account identifier.
• •
  Information provided voluntarily: Data, texts, queries, prompts, documents, images, valuations, property information, or other information entered by you while using the Application's features.
• •
  Usage data: Access records, usage events, logs, date, time, and duration of access, as well as diagnostic, performance, and Application failure information.
• •
  Technical data: IP address, device type and model, operating system, and technical identifiers of the device, account, or session, used for security, fraud prevention, and improving the experience.

How We Use Data

We use personal data for the following purposes:

• •Create, authenticate, and manage user accounts, enabling secure access to the Application.
• •Operate, maintain, and improve the Application's features.
• •Process information you enter and generate responses, analyses, estimates, classifications, summaries, and recommendations, including through artificial intelligence technologies where applicable.
• •Provide support and send communications related to your account, security, operation, or relevant changes to the Application.
• •Monitor the stability, security, and performance of the platform and prevent fraud, abuse, and unauthorized access.
• •Comply with legal and regulatory obligations or determinations of competent authorities and protect the rights and interests of the Application, the company, and users.

Data Sharing

We do not sell users' personal data. Data may be shared only when necessary, in the following cases:

• •With authentication providers (Google and Apple) and providers of infrastructure, hosting, database, security, technical support, performance analysis, and Application operation.
• •With artificial intelligence, language model, and automation providers necessary to deliver the features, which act as processors and handle the data only according to our instructions and applicable law.
• •With public authorities, regulatory bodies, or third parties, when required by law, court order, or in the event of corporate reorganization, merger, or acquisition.

Storage and Security

We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse, or improper disclosure, including access control, authentication, encryption where applicable, environment segregation, monitoring, backups, and log records. Despite our efforts, no system is completely secure, and absolute security against all risks cannot be guaranteed.

Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes described in this Policy, while the account remains active, or for the period necessary to comply with legal, regulatory, and contractual obligations, prevent fraud, ensure platform security, or exercise rights. After account deletion or the end of the processing purpose, data may be deleted, anonymized, or retained only when there is a legal basis for retention.

Artificial Intelligence and Third-Party Services

IBVI.AI may use artificial intelligence technologies, language models, and technology providers to process information and generate results related to the Application's features:

• •Data entered in the Application is not used to train public third-party models, and we adopt reasonable measures to limit the use of data to the purposes necessary to provide the service.
• •Responses and analyses generated by artificial intelligence may contain inaccuracies or limitations and should be critically reviewed before being used for commercial, legal, financial, real estate, or strategic decisions.
• •Some providers may be located outside Brazil or store data on international servers; in such cases, we adopt measures consistent with the LGPD to protect data transferred internationally.

Children and Adolescents

The Application is not intended for minors under 18 years of age, and we do not intentionally collect their personal data. If we identify that minors' data has been collected improperly, we will take reasonable measures to delete such information. If you believe a minor has provided data to the Application, please contact us through the channels indicated in this Policy.

Changes to This Policy

This Policy may be updated periodically to reflect legal, regulatory, technical, or operational changes. When there are relevant changes, we may notify users through the Application, email, or other appropriate means. The most recent version will always be available in the Application or on a page indicated by the company.