Privacy Policy

Last updated: July 1, 2026

This Privacy Policy describes how Faturei Hoje (CNPJ 06.067.804/0001-94) collects, uses, stores, and protects the personal data of platform users, in compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018).

1. Data we collect

1.1 Data provided by the user

Registration data: name, email, phone, tax ID, address
Business data: client information, services, pricing, quotes, work orders, and financial records entered into the platform
Communication content: messages sent to the AI assistant via WhatsApp, including text and audio
Documents: files, photos, and documents attached to clients, quotes, or work orders

1.2 Automatically collected data

Usage data: pages accessed, features used, access times
Technical data: IP address, browser type, operating system, screen resolution
Cookies: we use only strictly necessary cookies for platform operation (authentication and theme preferences)

1.3 Third-party data

Open Finance: when the user opts to connect their bank account, we access bank transaction data authorized by the user through their bank, exclusively for financial reconciliation
Payment processors: minimum data necessary for payment processing (Stripe and/or Asaas)
Residents (niche modules, e.g., FH Síndico / FH Encomendas): when the user uses a module aimed at condominium administration, they enter resident data into the platform (name, phone number, unit, and, where applicable, package photos and pickup signature). This data belongs to individuals who do not have an account on the platform; the user (property manager or administering company) is the controller of this data and Faturei Hoje acts as a processor. See section 9 for details.

2. How we use data

Personal data is used exclusively for:

Delivery and operation of platform services
Payment processing and subscription management, including separately contracted modules
Sending transactional communications (confirmations, alerts, notifications), including package notifications to residents via WhatsApp, subject to consent
Processing messages through the AI assistant to execute platform commands
User technical support
Compliance with legal and regulatory obligations

We do not use your data for:

Sale or sharing with third parties for marketing purposes
Training artificial intelligence models
Creating advertising profiles
Any purpose other than those listed above

3. Data sharing

We share personal data only with:

Payment processors (Stripe, Asaas): data necessary for billing, including separately contracted modules
Infrastructure providers: hosting and storage services (acting as processors under our instructions)
AI providers: messages processed by the AI assistant are sent to language model providers for processing. These providers do not retain data after processing
Open Finance providers: when authorized by the user, for bank transaction import
Meta Platforms (WhatsApp): to send transactional messages to the user and, in the case of niche modules, to residents who consented to receive them
Competent authorities: when required by law or court order

4. Storage and security

Data is stored on protected servers with the following security measures:

Encryption in transit (TLS) for all communications
Encryption at rest for sensitive data
Daily automatic backups with minimum 30-day retention
Role-based access control (RBAC)
Continuous security monitoring

5. Data retention

Personal data is maintained while the user's account is active. After account cancellation:

Data is available for export for 30 days
After 30 days, data is marked for deletion
Effective deletion occurs within 90 days, including backups
Data required for legal compliance may be retained for longer periods as required by law

Package photos attached through the FH Encomendas module (arrival and pickup) are retained for up to 90 calendar days after the package is closed (picked up or cancelled), and are automatically removed from storage after that period. The package record itself (without the photos) may be kept by the user for the condominium's administrative history.

6. Data subject rights

Under the LGPD, you have the right to:

Access: request a copy of your personal data
Correction: request correction of incomplete or inaccurate data
Deletion: request deletion of your personal data
Portability: request export of your data in a structured format
Consent revocation: revoke consent for data processing when consent is the legal basis
Information: be informed about with whom your data has been shared

To exercise any of these rights, contact us at suporte@fatureihoje.com.br. We will respond within 15 business days.

7. Cookies and tracking technologies

The platform uses the following cookies and technologies:

Authentication session: to keep you logged in
Theme preference: to remember your light or dark theme choice
Language preference: to remember your selected language
Facebook Pixel (Meta): used to measure advertising campaign effectiveness and understand how visitors interact with the site. Collected data is processed by Meta Platforms according to their data policy
Google Tag Manager: used to manage conversion measurement tags. Collected data is processed by Google according to their privacy policy

We do not use tracking data for creating our own advertising profiles. The use of this data by Meta and Google platforms is governed by their respective privacy policies.

8. Minors

The platform is not intended for individuals under 18 years of age as account holders. We do not knowingly collect personal data from minors as account holders.

9. Resident data (niche modules)

Modules aimed at condominium administration (e.g., FH Síndico, FH Encomendas) involve the processing of resident data: individuals associated with a condominium unit who do not have an account on the platform and are not party to the contract between the user and Faturei Hoje.

Roles: in these cases, the user (property manager or administering company) is the controller of residents' data under the LGPD. Faturei Hoje acts as a processor, handling the data only to enable the contracted module's features.
Data processed: the resident's name, phone number, and unit identification; and, when the packages module is used, arrival and pickup photos of the package and an electronic pickup confirmation signature.
Purpose: enabling package arrival and pickup notifications and the corresponding history, accessible via a link with an individual access token.
Legal basis for WhatsApp messages: the resident's specific consent (LGPD, art. 7, I, and art. 8), recorded with date, source, and an auditable history. Residents who have not consented do not receive messages.
Opt-out: every WhatsApp message sent to a resident includes a link to decline further communications (opt-out). The decline is recorded and honored for all future messages.
Retention and deletion: package photos are retained for up to 90 calendar days after the package is closed (see section 5). Removing a resident, unit, or condominium from the system cascades the deletion or anonymization of the associated personal data and media.
Resident rights: since residents do not have an account on the platform, they may exercise their data subject rights (access, correction, deletion, consent revocation) directly with the property manager or administering company responsible for the condominium, or through the contact channel of this policy.

10. International data transfers

Some of our infrastructure and service providers may be located outside of Brazil. In such cases, we ensure that international data transfers comply with the LGPD, using appropriate contractual clauses or other mechanisms provided by law.

11. Changes to this policy

This policy may be updated periodically. Changes will be communicated via email and/or platform notification at least 15 days before taking effect.

12. Contact

For questions about this policy or to exercise your data subject rights, contact us at suporte@fatureihoje.com.br.