Privacy Policy

1. Scope and data controller

This policy applies to the website, user accounts, saved analyses, and CalcLeilão support channels. During Beta, the platform operator acts as the controller of the data processed to provide, protect, and improve the service.

2. Data we process

• account data: name, email address, account identifier, and verification details;
• platform use: property and vehicle analyses, dates, lots, values, and results you choose to save;
• security: technical authentication, session, browser, network address, and abuse-prevention records;
• support: the category, content, and history of messages sent through the contact channel;
• subscription: identifiers, plan status, and billing dates returned by Mercado Pago. The website does not store full card details.

Passwords are processed by the authentication provider and are not visible to the CalcLeilão team.

3. Purposes and legal bases

We process data to create and protect accounts, provide requested features, save analyses, answer support requests, prevent fraud, monitor service stability, and comply with legal obligations. Depending on the activity, processing relies on performance of the service, legitimate interests, legal obligations, or consent.

4. Service providers and transfers

We use infrastructure, security, payment, advertising, and domain providers, currently including Supabase, Vercel, hCaptcha, Mercado Pago, Have I Been Pwned, and Google AdSense. To detect compromised passwords, only the first five characters of an irreversible hash are checked; the password and full hash are never sent. These providers may process data under their technical structures and contractual commitments. We do not sell personal data or share saved analyses with other users.

5. Retention and security

Data is retained while the account remains active and for the period required to provide the service, maintain security, and meet legal obligations. We use per-user access controls, encrypted connections, database policies, server-side validation, two-factor authentication, and audit records.

6. Cookies and required technologies

The website uses cookies or equivalent technologies required to maintain sessions, protect sign-in, and run hCaptcha. The home page and public calculator guides may also load Google AdSense technologies for verification, measurement, and advertising. Sign-in, registration, account, administration, API, and protected calculator pages do not load AdSense code.

7. Your rights

You may request confirmation and access, correction, information about sharing, portability where applicable, anonymization, restriction or deletion of unnecessary data, review of automated decisions, and withdrawal of consent where provided by law.

Send a privacy request through the contact channel.

8. Changes

We may update this policy as the product changes. Material updates will be announced on the website or in the user area. Formal controller details and the external privacy contact will be completed before commercial launch.