Privacy policy

This Privacy policy describes how KSA27 processes personal data in the context of its real estate services, in accordance with the Brazilian General Personal Data Protection Law (LGPD).

By using the platform, you understand that your data may be processed according to the purposes described in this policy.

We may collect identification and contact data, such as name, email, phone number, CPF when necessary, address, city, state, property preferences, sent messages, registration information, brokers' professional data, and data related to referrals or requests.

We may also collect technical access data, such as IP address, date and time of use, device, browser, accessed pages, session identifiers, and logs required for security, auditing, and platform improvement.

We use personal data to create and manage accounts, authenticate users, display and recommend properties, enable contact between clients and brokers, process referrals, respond to requests, provide support, prevent fraud, comply with legal obligations, and improve the platform experience.

Data from brokers, partners, and advertisers may be used for registration review, access approval, listing management, commercial relationships, operational communication, and permission control.

KSA27 may share data with brokers, real estate companies, property owners, internal teams, technology, hosting, communication, authentication, analytics, and support providers, and public authorities when there is a legal obligation, valid order, or need to exercise rights.

Sharing is limited to what is necessary to fulfill the stated purposes, perform requested services, protect users, and maintain platform security.

We may use cookies, local storage, and similar technologies to maintain sessions, remember preferences, measure performance, analyze platform usage, and improve features.

Users may configure their browsers to block or delete cookies, but some features may become unavailable or work in a limited way.

We adopt technical and administrative measures to protect personal data against unauthorized access, loss, alteration, misuse, or improper disclosure.

Data will be retained for as long as necessary to fulfill the purposes of this policy, legal and regulatory obligations, fraud prevention, auditing, dispute resolution, and exercise of rights.

Under the LGPD, data subjects may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of automated decisions, and consent withdrawal when applicable.

Some requests may require identity validation and may be handled according to deadlines, legal bases, trade secrets, regulatory obligations, and third-party rights.

Questions or requests related to privacy and data protection should be sent through KSA27's official service channels.