Privacy Policy

The controller of your personal data is Imovely, registered under CNPJ 26.436.133/0001-07, with addresses at Av. Pres. Juscelino Kubitschek, 1327, Itaim Bibi, São Paulo, SP, 04543-011, Brasil, and Av. Dom João II 13, 1990-077 Lisboa, Portugal.

To handle any matter about your personal data, contact our Data Protection Officer (DPO) at privacidade@imovely.com.

We collect only the data needed to provide the service:

• Registration data: name, email, phone and information about your account;
• Payment data: processed directly by Stripe. We do not store your full card details;
• Content you upload: photos and information about the properties you use in the features;
• Usage data: pages visited, actions on the platform and access logs;
• Technical data: IP address (used, for example, to detect the currency from your location), browser type and cookie identifiers.

If the photos you upload contain identifiable people, you are responsible for having the necessary authorization to process those images.

We process your data for specific purposes, each supported by a legal basis under the LGPD (art. 7) and the GDPR (art. 6):

• Provide the service and generate the property material: performance of the contract;
• Process payments and prevent fraud: performance of the contract and compliance with a legal obligation;
• Issue tax documents and comply with the law: compliance with a legal obligation;
• Improve the platform and provide support: legitimate interest;
• Send news and marketing communications: consent, which you can withdraw whenever you want.

Imovely does not aim to collect sensitive personal data. We ask that you do not submit this kind of data through the features.

To operate, Imovely relies on suppliers that process data on our behalf (processors), always under contract and only for the purposes of this policy:

• Stripe, to process payments;
• Supabase, for database and storage;
• Amazon Web Services, for hosting and infrastructure;
• Resend, to send emails;
• Artificial intelligence providers, to generate the images, videos, virtual tours and descriptions;
• Platform usage analytics tools.
• Meta Platforms (Instagram), when you connect your account to publish content;

To generate the property material, the content you upload may be processed by AI providers. We work to make sure these providers do not use your content to train their models. Imovely does not sell your personal data.

You can connect your Instagram professional account to Imovely to publish your videos and photos straight from the platform. This connection is optional, always starts with you and can be undone whenever you want.

• What we receive from Meta: the ID and the username of your professional account, and a temporary access key;
• What we use it for: only to publish the content you choose, at the moment you ask us to publish it;
• What we do not do: we do not read your direct messages, we do not access your follower list and we never publish anything without an action from you.

The access key is stored encrypted, is valid for up to 60 days and is renewed while the connection stays active. To disconnect, use your account settings on Imovely or Instagram itself, under Settings → Apps and websites. Once you disconnect, we delete the key immediately.

Imovely is not affiliated with, sponsored by or endorsed by Meta Platforms, Inc. Your use of Instagram remains subject to Meta's terms and policies.

Imovely operates in Brazil and in the European Union and uses suppliers that may process data in other countries. Because of that, your data may be transferred outside Brazil or the European Union.

When that happens, we adopt the safeguards required by the LGPD (arts. 33 and 34) and the GDPR (Chapter V), such as standard contractual clauses, to keep the same level of protection for your data. You can request more information about these safeguards at privacidade@imovely.com.

As a data subject, you can, at any time:

• Confirm whether we process your data and access that data;
• Correct incomplete or outdated data;
• Request the anonymization, blocking or deletion of unnecessary data;
• Request the portability of your data;
• Withdraw consent and object to certain processing;
• Know who we share your data with;
• Not be subject to decisions made solely on an automated basis;
• File a complaint with the data protection authority (ANPD in Brazil or the authority of your country in the European Union).

To exercise any of these rights, write to privacidade@imovely.com. We respond in the shortest time possible, within the limits of the law.

We keep your data while your account is active and for as long as needed to fulfill the purposes of this policy.

Some data is kept for legal periods even after the account is closed, such as application access logs, kept for six months under the Brazilian Internet Civil Framework (Law 12.965/2014), and tax documents, for the periods required by law. Once these periods end, the data is deleted or anonymized.

We use cookies and similar technologies to keep you signed in, remember preferences (such as language and currency) and understand how the platform is used.

Strictly necessary cookies keep the service running. The others, such as analytics and marketing cookies, depend on your consent, which you can manage or withdraw at any time in your browser settings.

We adopt technical and organizational measures to protect your data, such as encryption in transit, access control and monitoring. No system is completely immune to risks, but we work to reduce the chance of incidents.

If a security incident occurs that could pose a relevant risk to your rights, we will notify you and the competent authorities within the timeframes set by the LGPD and the GDPR.

Imovely is intended for professionals and is not directed at children or teenagers. We do not intentionally collect data from minors. If we identify this kind of data without proper authorization, we delete it.

You can request deletion of your data at any time. Write to privacidade@imovely.com from the email address registered on your account, with the subject “Data deletion”.

We confirm receipt and complete the deletion within 30 days. We erase your registration, the properties you created and the content generated on the platform.

If you had an Instagram account connected, the access key is deleted immediately and the publishing authorisation stops being valid. You can also revoke that authorisation yourself, whenever you want, under Instagram → Settings → Apps and websites.

Some records are kept even after deletion, only where the law requires it, for the periods described in the section on retention periods.

We may update this policy to keep up with changes in the service or in the law. The date at the top shows the last update. When a change is significant, we let you know through our channels.