Privacy Policy

1. Definitions

For the purposes of this policy:

• Rede Latitude: legal entity registered under Brazilian company ID 47.325.407/0001-52, responsible for the Latitude platform.
• Cookies: files used to identify devices and collect browsing data.
• IP: set of numbers that identifies a device on the internet.
• Logs: records of activities performed on the platform.
• Web beacons: lines of code used to collect browsing details.
• Controller/Customer: responsible for decisions regarding the processing of personal data.
• Processor: processes personal data on behalf of the controller.
• Data subject/User: natural person to whom the personal data refers.

2. Governance and data collection

Rede Latitude acts as a Processor, handling personal data on behalf of the real estate agencies and companies that contract the platform, in accordance with the LGPD. Processed data may include personal identifiers, cookies, geolocation and financial information related to real estate negotiations.

The parties shall adopt technological mechanisms to protect data and ensure its security, notifying the competent authorities in the event of a breach.

3. Data storage

Collected data is stored in the platform database, in a secure environment accessible only by authorized personnel. The platform disclaims liability for failures, except in proven cases of wilful misconduct or negligence.

Data that is no longer necessary for the stated purposes is anonymized, blocked or deleted.

4. Use of data

Data is used for the following purposes:

• Responding to user questions and requests.
• Complying with legal obligations and orders from competent authorities.
• Producing statistics without personal identification.
• Ensuring the security of users and of the platform.
• Keeping records up to date.
• Informing users about product news, features and announcements.
• Improving the content and services offered.

5. Sharing and data subject rights

The database is not shared, sold or rented to third parties. Access is restricted to authorized professionals.

Data subjects may request access to, correction of or deletion of their personal data through our support channels. After services are discontinued, records may be retained for up to 3 years for auditing purposes and compliance with legal obligations.

6. Activity logs

The platform records, through logs:

• IP address.
• Actions performed by users.
• Pages accessed.
• Access dates and times.
• Information about the device used.
• Session ID.

7. Cookies and data collection technologies

Rede Latitude uses cookies — configurable in the user's browser — and web beacons. The use of other technologies depends on prior and unequivocal consent.

8. Data obtained from Google APIs

Connecting a Google Account to Latitude is optional and always initiated by the user inside the platform, with explicit consent on the Google screen. Authentication uses the OAuth 2.0 protocol — Latitude never receives or stores your Google Account password.

Data obtained is used exclusively to operate the following features:

• Google Calendar (calendar.app.created): creating a dedicated Latitude calendar in the user's account and keeping in it the visits, duty shifts and appointments created in the platform. Access is restricted to the calendar created by the application itself.
• Google Calendar (calendar.calendarlist.readonly): reading only the list of calendars the user is subscribed to, in order to identify the Latitude calendar and avoid duplicating it. The contents of other calendars' events are not read.
• YouTube (youtube.upload): uploading the property videos generated in the platform to the user's channel.
• YouTube (youtube): identifying the connected channel and organizing the videos published by the platform, keeping each video linked to its listing.
• YouTube (youtube.force-ssl): updating the title, description and privacy status of videos published by the platform, and deleting them when the property leaves the portfolio.
• YouTube (youtubepartner): managing assets and associated content of videos uploaded by the platform on channels with partner features.

9. Limited use of Google user data

Latitude's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

This means data obtained from those APIs: is used only to provide and improve the features described in this policy; is not transferred to third parties, except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; is not used for advertising; is not read by humans, unless with the user's express consent, for security purposes, to comply with applicable law, or when the data is aggregated and anonymized; and is not used to train generalized artificial intelligence models.

Users may revoke access at any time in the platform settings or on the Google Account permissions page. After revocation, access tokens are discarded and synced data is deleted according to the retention periods in this policy.

10. General provisions

Updates to this policy will be communicated to the controller and other interested parties, in observance of the principle of transparency.

Questions about this policy or about data processing may be sent to suporte@redelatitude.com.br.

11. Governing law and jurisdiction

This policy is interpreted under Brazilian law, in Portuguese. The courts of the Judicial District of Goiânia, State of Goiás, Brazil, are elected to settle any disputes.