Privacy Policy

1. About this Policy

Imobzi Ltda., a privately held legal entity enrolled with the Brazilian National Register of Legal Entities (CNPJ) under No. 07.427.146/0001-67, with headquarters at Av. das Nações Unidas, 18801 - Suite 309 - Santo Amaro, São Paulo/SP, ZIP Code 04795-100 ("IMOBZI"), provides an online business management platform ("Platform").

This Policy explains how IMOBZI processes personal data on its website, on the Platform, in connection with the engagement of services, and in commercial, support, and customer service interactions, in accordance with Brazilian Law No. 13,709/2018 (Brazilian General Data Protection Law - LGPD).

2. IMOBZI’s Role and Contact Information

IMOBZI acts as the Controller of data related to account registration, contracting, billing, customer service, security, and use of its website and the Platform. With regard to data entered or imported by the CUSTOMER for use of the Platform, IMOBZI generally acts as a Processor, processing such data in accordance with the CUSTOMER’s instructions and the Terms of Use.

The CUSTOMER, as the Controller of the data of its customers, leads, property owners, tenants, and other third parties, is responsible for the legitimacy of the collection, the lawful basis, and the information provided to the respective data subjects.

Data Protection Officer (DPO): [email protected]

3. Personal Data Processed

3.1 Data Provided Directly

We may process data such as name, email address, telephone number, job title, company, access credentials, information related to contracting, billing, and payments, messages sent to customer service, responses to forms, and other information provided voluntarily.

3.2 Data Collected Automatically

When you access the website or the Platform, we may collect the IP address, date and time of access, usage logs, pages or features accessed, browser type, operating system, device identifiers, and approximate location.

3.3 Data Entered by the CUSTOMER

The Platform allows the CUSTOMER to enter or import third-party data necessary for its business activities. IMOBZI does not require sensitive personal data for standard account registration, but may process such data as a Processor when entered by the CUSTOMER, which must ensure the existence of a lawful basis and the necessity of such processing.

3.4 Integrations

When the USER enables integrations, IMOBZI may receive, transmit, or allow access to the data necessary for the feature to operate, including through email, calendar, communication, payment, electronic signature, listing portal, application, and other services connected to the Platform.

4. Purposes and Lawful Bases

Personal data may be processed to:

• create and administer accounts and provide the contracted features;
• perform contracts, process payments, and provide customer service and support;
• enable integrations activated by the USER or the CUSTOMER;
• authenticate access, maintain records, prevent fraud, and protect the Platform;
• improve the services and analyze their operation and use;
• send operational, legal, and, where permitted, promotional communications; and
• comply with legal or regulatory obligations and exercise rights in proceedings or claims.

Depending on the purpose, processing may be based on the performance of a contract or preliminary procedures, compliance with a legal or regulatory obligation, legitimate interests, the exercise of legal rights, consent, where required, or another basis authorized by law.

5. Data Sharing

To the extent necessary, IMOBZI may share personal data with providers of hosting and cloud infrastructure, security, communication, customer service, payments and banking services, email and calendar, usage analytics, advertising, integrations, listing portals, electronic signatures, and artificial intelligence.

Data may also be shared to comply with a legal or regulatory obligation or an order from a competent authority; protect rights and prevent fraud; carry out a corporate transaction; or fulfill a request or authorization from the data subject, USER, or CUSTOMER, as applicable. Information about the entities with which data is shared may be requested from the DPO.

6. Cookies

On the Platform, we use cookies necessary for authentication, security, and operation of the services. On the corporate website, measurement, advertising, and remarketing cookies may also be used. Preferences may be managed through the cookie banner, where available, or through browser settings. Disabling essential cookies may impair certain features.

7. Hosting and International Data Transfers

Data may be stored or processed in Brazil and other countries by the infrastructure and integration providers used by IMOBZI. When an international data transfer occurs, the applicable requirements and mechanisms established under the LGPD and ANPD regulations will be observed.

8. Retention and Deletion

Data will be retained for as long as necessary to fulfill the purposes of this Policy, provide the services, comply with legal or regulatory obligations, preserve security, prevent fraud, and exercise rights. Access logs will be retained for the applicable statutory period.

Once processing has ended, data will be deleted or anonymized, except in cases where retention is permitted by law and subject to regular backup cycles. The export, retention, and deletion of data entered by the CUSTOMER will also comply with the Terms of Use and the CUSTOMER’s lawful instructions.

9. Information Security

IMOBZI adopts technical and administrative measures compatible with the nature of the data and the risks of processing, including access controls, encryption of data in transit, monitoring, backups, and infrastructure protection resources. IMOBZI also uses cloud providers that maintain their own security measures.

No system is entirely free from risk. The USER must protect their credentials and immediately report any suspected unauthorized access to or use of the account.

10. Data Subject Rights

Under the LGPD, the data subject may request, as applicable: confirmation of the existence of processing; access to and correction of data; anonymization, blocking, or deletion of unnecessary or excessive data or data processed in violation of the law; data portability; deletion of data processed on the basis of consent; information about data sharing and the possibility of withholding consent; withdrawal of consent; objection to unlawful processing; and review of decisions made solely through automated processing that affect their interests.

Requests may be sent to [email protected].

IMOBZI may request information to confirm the requester’s identity. When IMOBZI acts as a Processor, a request concerning data entered into the Platform must be directed to the respective CUSTOMER, which is the Controller, without prejudice to IMOBZI’s cooperation where necessary. The data subject may also file a complaint with the Brazilian National Data Protection Agency (ANPD).

11. Artificial Intelligence and Automation

Artificial intelligence features may process commands, text, audio, images, documents, account data, and the context necessary to generate results or perform requested actions. Such processing may be carried out by IMOBZI and specialized providers, including providers located abroad, to make these features available and to maintain, improve, and protect them.

If a decision is made solely on the basis of automated processing and affects the data subject’s interests, the data subject may request its review and information about the criteria and procedures used, subject to the protection of trade and industrial secrets.