Privacy Policy

Who is involved in processing

CondViva is provided by Caprise LTDA. In general, the condo or management company determines the essential purposes and rules for the use of data in condo operations, while Caprise provides and operates the technology in accordance with the agreement and the instructions received.

The roles of controller and processor may vary depending on the data and activity involved. Each processing operation must be assessed in its own context.

Data that may be processed

We may process registration and contact details; account and authentication data; condo, unit, association, and access role information; visitors and invitations; bookings; packages; notices, documents, incident reports, polls, and feedback; as well as images, files, and information supplied by the user.

Technical device and app data may also be processed, such as identifiers, platform information, notification tokens, access logs, errors, and diagnostics needed for the security and operation of the service.

Biometric data and facial recognition

Biometric data is sensitive personal data. Photos and facial references are processed only when the facial recognition module is enabled, the feature is used, and an applicable legal basis exists.

This feature supplements the condo’s procedures. Access to, correction of, or deletion of this data may be requested through the available channels, subject to applicable legal and operational obligations.

How we use data

Data may be used to authenticate users, verify associations and permissions, deliver subscribed features, enable communication and condo operations, protect people and accounts, prevent abuse, provide support, improve stability, and comply with legal or regulatory obligations.

Depending on the circumstances, processing may rely on performance of a contract, compliance with a legal obligation, the regular exercise of rights, legitimate interest, protection of life or safety, consent, or other legal bases provided by law.

Sharing

Data may be shown to authorized condo users according to their roles and permissions. It may also be shared with providers needed for hosting, authentication, notifications, storage, monitoring, support, and security.

We may share information with authorities or third parties when there is a legal obligation, a valid order, or a need to protect rights. Some providers may process data outside Brazil, subject to applicable legal requirements.

Retention and deletion

Data is retained for as long as necessary to provide the service, preserve authorized operational records, fulfill the agreement, comply with legal obligations, and exercise rights. Afterward, it may be deleted or anonymized where applicable and technically possible.

Deleting an account ends the user’s access, but certain condo records may remain when there is a legitimate purpose or retention obligation.

Security

We adopt reasonable technical and administrative measures to reduce the risk of unauthorized access, loss, alteration, or disclosure. No system is completely immune to incidents, so we also rely on careful use of accounts, devices, and permissions.

Your rights

Under the LGPD, data subjects may request, where applicable, confirmation and access, correction, information about sharing, anonymization, blocking, deletion, portability, review of decisions, and withdrawal of consent.

Requests may be submitted through the channels provided by the condo, management company, or CondViva. We may request information to confirm identity and direct the request to the appropriate responsible party.

Children and adolescents

When data about children or adolescents is necessary for condo operations, processing must observe their best interests and the responsibilities of parents, legal representatives, and the condo.

Changes and contact

This Policy may be updated to reflect changes in the service, the agreement, or the law. The latest version will be available in the app.

For privacy questions or requests, use the support channels provided by your condo or CondViva.