Privacy policy
Draft: this text is being finalised and will be replaced before launch.
Last updated: [date]
Who we are
This policy explains how CONFIGDAR LTDA, CNPJ 48.480.998/0001-03, with its registered office at [address] ("ConfigDar", "we"), handles personal data on this website and in the ConfigDar services, in line with Brazil's General Data Protection Law (Lei 13.709/2018, "LGPD").
Two roles
On this website and for our own customer relationships, ConfigDar is the controller of personal data.
In the ConfigDar services, the real estate developer that uses ConfigDar is the controller of its buyers' data, and ConfigDar processes that data on its behalf as processor (operador), following the developer's instructions and our agreement with them. Buyers who want to exercise their rights should contact the developer, and we will help the developer answer.
Data we collect
- Demo requests and contact: name, company, work email, phone (optional), number of buildings per year and your message.
- Developer users of the Portal: name, email and sign-in data.
- Buyers (on behalf of developers): name, CPF or CNPJ, email, phone, apartment, finishes chosen and payment plan.
- Technical data: IP address and request logs, kept for security and to prevent abuse.
Why we use it, and the legal basis
- To answer your demo request and contact you about it: your consent and our legitimate interest in replying (LGPD art. 7, I and IX).
- To provide the services under a contract with the developer (art. 7, V).
- To keep the services secure and prevent fraud and spam (art. 7, IX).
- To meet legal and regulatory obligations (art. 7, II).
Cookies and analytics
This website does not use advertising or tracking cookies. [If privacy-friendly analytics are added, describe them here: provider, what is measured, no cookies, no personal data.]
Who we share it with
We do not sell personal data. We use service providers that process data on our behalf, under contract: Google Cloud / Firebase (hosting, database and storage in São Paulo, Brazil) and Google Workspace (email). [International transfer wording: some providers may process data outside Brazil; describe the safeguards under LGPD art. 33.]
How long we keep it
- Demo requests: [e.g. up to 24 months after our last contact], then deleted.
- Buyers' data: for as long as the developer's contract requires, [and deleted after the building is delivered, as agreed with the developer].
- Security logs: [period].
Your rights
Under the LGPD (art. 18) you can ask us to confirm whether we process your data, give you access, correct it, anonymise, block or delete it, port it, tell you who we share it with, and withdraw your consent. Write to contact@configdar.com.
Security
Data is encrypted in transit and at rest, access is limited to the people who need it, buyers sign in with one-time codes, and our staff use two-step sign-in.
Data protection officer
Our data protection officer (encarregado) is [name], reachable at [email].
Changes
We may update this policy. The date at the top shows the latest version.