Privacy Policy

Last updated: October 19, 2026

This policy explains how Mudano handles personal data on the Mudano platform (apps, web dashboard, real-estate agency websites, and this website), in accordance with Brazilian Law No. 13,709/2018 — the Lei Geral de Proteção de Dados Pessoais (LGPD, General Data Protection Law).

1. Who we are

Mudano offers real estate agencies a software platform for rental management, sales, client communication (including WhatsApp), and property inspection.

2. Our role in each processing activity

• Mudano as controller. When we process data to maintain your account on the platform, to manage our relationship with client agencies, for security, fraud prevention, and compliance with legal obligations.
• Mudano as processor. When the real estate agency uses the platform to register and serve its own clients (landlords, tenants, buyers, guarantors, leads). In these cases, the agency is the controller and determines the purpose of the data; we process it on their behalf and according to their instructions.

If you are a client of a real estate agency, requests regarding your data may be directed to the agency or to us; when the request concerns data controlled by the agency, we will forward it and support the response.

3. Data we process

From platform users

Agency staff (managers, agents, assistants, inspectors) and individuals who access their own area (landlords, tenants, buyers, guarantors):

• identification and contact: name, Brazilian tax ID (CPF), phone number, e-mail, professional licence number (CRECI), profile photo;
• access data: credentials, verification codes, connected devices, and session history;
• links to agencies and the roles held in each one.

Registered by agencies

• registration data and documents of clients and leads needed for rental and sale contracts;
• property, proposal, contract, guarantee, billing, and transfer data;
• photos, videos, and notes from property inspections;
• attendance history, visit schedules, and commercial notes.

WhatsApp messages

When an agency connects its number to the platform, conversations with its contacts flow through Mudano: the contact's phone number and profile name, message content (text, images, audio, video, and documents), date, time, and delivery and read status.

Technical data

IP address, device type and operating system, access logs, and error logs. Access logs are retained for at least six months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).

4. Purposes and legal basis

• Providing the contracted service to the agency and maintaining your account (contract performance, art. 7, V).
• Complying with legal and regulatory obligations, such as retention of access logs and tax obligations (art. 7, II).
• Account security and fraud prevention, including identity verification on login (legitimate interest, art. 7, IX).
• Exercising rights in judicial, administrative, or arbitration proceedings (art. 7, VI).
• Improving the platform using aggregated or de-identified usage data wherever possible (legitimate interest, art. 7, IX).
• Communications about your account and the service, such as security alerts and notifications you can configure in the app.

In processing activities where the agency is the controller, it is the agency's responsibility to define the applicable legal basis for its clients' data.

5. WhatsApp and the Meta platform

The WhatsApp integration uses the WhatsApp Business Platform, provided by Meta Platforms. Messages exchanged between the agency and its contacts are transmitted through Meta's infrastructure and are also subject to WhatsApp's terms and privacy policy.

• We use messages solely to display them to the agency's team, to organise client service, and to follow the agency's instructions.
• We do not use conversation content for advertising, we do not sell it, and we do not share it with third parties beyond what is necessary to provide the service.
• The agency is responsible for obtaining opt-in consent from its contacts to receive WhatsApp messages and for honouring opt-out requests.

6. Who we share data with

• The real estate agency you interact with, within what each role is permitted to see.
• Vendors operating on our behalf, contractually required to protect data: cloud hosting and infrastructure (Google Cloud), messaging (Meta, for WhatsApp), e-mail and notification delivery, electronic document signing, and payment processors, according to the features the agency uses.
• Public authorities, when required by law or court order.

We do not sell personal data.

7. International transfers

Some vendors, such as Meta and cloud services, may process data outside Brazil. In these cases, the transfer follows art. 33 of the LGPD, with contractual safeguards compatible with Brazilian law.

8. Retention

We retain data for as long as it is necessary for the purposes described in this policy and for the contract with the agency. After that, data is deleted or anonymised, except when required or permitted by law — for example, to comply with legal obligations or to exercise rights in proceedings.

9. Security

We adopt technical and administrative measures to protect data: encryption in transit, role-based and agency-based access controls, isolation of data between different agencies, audit logs of who accessed personal data, and identity verification for sensitive actions. No system is entirely immune to incidents; if an incident occurs with significant risk, we will notify the affected individuals and the Brazilian National Data Protection Authority (ANPD) as required by law.

10. Your rights

Under the LGPD (art. 18), you may request: confirmation that we process your data; access; correction of incomplete, inaccurate, or outdated data; anonymisation, blocking, or deletion of unnecessary or non-compliant data; portability; deletion of data processed based on consent; information about who we share data with; and review of automated decisions. You may also withdraw any consent you have given.

Submit your request by e-mail at lucas.hubert@livead.co. We may ask for information to confirm your identity before responding. To request data deletion, see also the Data Deletion page.

You may also file a complaint with the ANPD (gov.br/anpd).

11. Cookies

This website does not use tracking cookies or advertising tools. The apps and web dashboard use only the storage necessary to maintain your session and preferences.

12. Children and minors

The platform is not intended for individuals under 18 years of age.

13. Data Protection Officer

Data protection matters may be addressed to Mudano's data protection officer by e-mail at lucas.hubert@livead.co.

14. Changes to this policy

We may update this policy. The date of the last update is shown at the top of the page and, for significant changes, we will notify users through the platform.