PRIVACY POLICY

How we handle
your data.

Updated on 11 October 2026. This is a translation of the Portuguese version, which prevails in case of any discrepancy.

1. Who we are

DecoradoVirtual is the brand of Danilo de Angelis, a sole proprietor (CNPJ 42.587.974/0001-63), who produces virtual real estate experiences for developers and builders and maintains a system to manage these projects (the "app"), used by our team and by the people from client companies we invite. This policy applies to this website and to the app. We are the controller of the data described here, under Brazil's General Data Protection Law (LGPD, Law 13,709/2018).

2. This website

The website does not use cookies and has no forms or visitor analytics tools. To display the text fonts, your browser fetches the files from Google Fonts, which receives your IP address and technical browser data, under Google's policy. The website is hosted on GitHub Pages, which logs access to operate the service.

3. What the app processes

• Identification and contact details of those with access: name, email and, when provided, phone number.
• Project content: development data, floor plans, versions, comments, requests, briefing, tasks, team hours and attached files.
• Usage and security records: the access session and the history of actions and approvals (who did what and when).

We use this data to provide the service contracted by the client company (LGPD, art. 7, V), for the security of the app and to evidence the decisions taken in the project (legitimate interest, art. 7, IX) and to comply with legal obligations (art. 7, II). We do not sell personal data or use it for advertising.

Access to the app is through a link sent to the person's email: we do not store passwords. The app only uses the cookies needed to keep the access session, with no advertising or analytics cookies.

4. Where the data is kept and who helps us process it

We use providers that process data on our behalf and only for this purpose:

• Supabase: the database and access to the app, on servers in São Paulo.
• Amazon Web Services: the app server, in São Paulo.
• Resend: sending access and notification emails.
• Google Drive: the files attached to the app, kept in the company's Google account, in a folder used only by the app (see section 5).
• Anthropic: our team's internal assistant uses an artificial intelligence model from Anthropic. It is used only by the team, and texts first go through an automatic redaction that tries to remove emails, phone numbers, documents and amounts.

Some of these providers may process data outside Brazil. In these cases, the transfer follows the grounds set out in the LGPD (art. 33).

5. Google data

The app asks Google only for the drive.file permission, in the company's own Google account, and only to store and read the files attached through the app itself. With this permission, the app can only see the files it created: it does not read, list or change any other file in Drive. Each file is delivered only to the people the app authorises to see it, always through the app itself; no file is made public in Drive.

We do not use data received from Google APIs for advertising or to train artificial intelligence models, and we do not transfer it to third parties except to operate the app. The use and transfer of information received from Google APIs follow the Google API Services User Data Policy, including the Limited Use requirements.

6. How long we keep data

We keep the data for as long as the contract with the client company lasts and, afterwards, for the time needed to comply with legal obligations and to evidence the project's decisions (the approvals and the version history). A person's access can be deactivated at any time; the records of decisions and the audit trail are kept, with restricted access.

7. Security

We protect the data with email-link access, per-project permissions enforced by the database itself, encrypted connections (HTTPS), audit records and private files delivered only through the app. No system is completely immune to failures: if there is an incident that may pose a relevant risk or harm, we will notify the people affected and Brazil's National Data Protection Authority (ANPD), as the law requires.

8. Your rights

You may request confirmation that we process your data, access to it, correction, anonymisation, blocking or deletion of what is unnecessary, portability, information about whom we share it with and the review of automated decisions (LGPD, art. 18). Make the request through the channel in section 9; we reply within 15 days. You may also file a complaint with the ANPD.

9. Contact

For privacy requests and questions: daniloangelis@hotmail.com.

10. Changes to this policy

We update this policy whenever the app starts processing new data or using other providers. The date at the top shows the version in force.