Privacy Policy

1. Who we are

Pousoraro is a property-alert service that monitors selected real estate portals and notifies you when new listings match the search criteria you set. This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website and related services.

We currently focus on listings in Brazil, especially São Paulo. This policy is intended to meet the Brazilian General Data Protection Law (LGPD — Lei nº 13.709/2018) and, where it applies, the EU General Data Protection Regulation (GDPR).

2. Data we collect

Account data: email address and password (stored in hashed form by our authentication provider). If you sign in with Google, we receive the identity information Google shares with us, such as your email and, when available, your name and profile photo.

Notification preferences: whether you want alerts by email and/or WhatsApp, your WhatsApp phone number if you enable that channel, and your preferred language for alerts.

Alerts: the search criteria you create, including location and radius, property type, buy or rent, price range, area, and similar filters.

Usage and diagnostics: pages you visit, basic device and browser information, and technical error reports that help us keep the service reliable.

Security: on some public forms we use bot-protection tokens to reduce automated abuse.

Payments: if you subscribe to a paid plan, billing is processed by Stripe. We receive subscription and payment status. We do not store your full card number.

3. How we use your data

We use personal data to create and manage your account, run your alerts, send the listing alerts you requested, process subscriptions, keep the service secure, understand how the product is used so we can improve it, and comply with legal obligations.

We do not sell your personal data. We do not use your data to send promotional messages unrelated to the service you asked for.

4. Legal bases

Under the LGPD, we process personal data when it is necessary to provide the service you requested (performance of a contract), when you give consent (for example, optional WhatsApp alerts), when we have a legitimate interest that does not override your rights (security, service improvement, and limited analytics), or when we must comply with a legal obligation.

You may withdraw consent at any time, for example by turning off WhatsApp alerts in your profile. Withdrawal does not affect processing that is still needed to provide the core service or that we must keep for legal reasons.

5. Sharing with service providers

We share data with companies that help us operate Pousoraro, only as needed for that purpose: authentication and database hosting, payment processing (Stripe), transactional email, WhatsApp message delivery if you enable it (Meta), Google if you choose Google sign-in, bot protection (Cloudflare Turnstile), product analytics (PostHog, in production), error monitoring (Sentry), and map or geocoding providers used when you set a location.

We monitor public listings on third-party portals. We do not share your identity with those portals when we send you an alert. If you open a listing, you leave Pousoraro and that portal’s own terms and privacy policy apply.

We may also disclose data if required by law or to protect the rights, safety, or integrity of Pousoraro, our users, or others.

6. Cookies and similar technologies

We use essential cookies to keep you signed in, complete authentication flows, and remember your language preference. These are necessary for the site to work.

In production we may also use analytics cookies or similar technologies (via PostHog) to understand how the service is used. Some forms use Cloudflare Turnstile, which may set cookies or similar identifiers for bot protection.

7. How long we keep data

We keep account, alert, and notification data for as long as your account is active. If you ask us to delete your account, we will delete or anonymize personal data that is no longer needed, except records we must retain for legal, tax, security, or dispute-resolution reasons, for a limited period.

Payment records may be kept for longer where financial or tax rules require it.

8. Your rights

Under the LGPD you may request confirmation that we process your data; access; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excess data; portability; information about public and private entities with which we share data; information about the possibility of denying consent and the consequences; and withdrawal of consent.

You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD). Where GDPR applies, you may have equivalent rights and can complain to a supervisory authority in your country.

To exercise these rights, contact us through the Pousoraro website. We may need to verify your identity before fulfilling a request.

9. International transfers

Some of our service providers process data outside Brazil, including in the European Union and other countries. When we transfer personal data internationally, we do so using providers and contractual safeguards appropriate under applicable law.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections and hashed passwords. No internet service can guarantee absolute security. Please keep your password confidential and tell us if you believe your account has been misused.

11. Children

Pousoraro is intended for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. If a change is material, we will provide a more prominent notice where required by law.

13. Contact

For privacy questions or to exercise your rights, contact us through the Pousoraro website at mata.app.br.