Privacy policy

Who we are

This website, abriu.app, belongs to Abriu, which provides facial recognition access control for condominiums. Abriu is the controller of the personal data processed on this website, under Brazil's General Personal Data Protection Law (LGPD, Law No. 13,709/2018).

This policy covers the website only. The data of residents, visitors and staff enrolled in each condominium's dashboard belongs to the condominium, which is its controller, and is governed by the contract between the condominium and Abriu.

What the contact form collects

When you fill in the "Talk to our sales team" form, we receive:

• your name;
• your email;
• your phone or WhatsApp number;
• the condominium's name and, if you provide it, the number of units;
• your role (building manager, property management company, front desk, resident or other);
• the message you write, if you write one.

On the partners page form (abriu.app/en/partners), instead of the condominium's details we receive the company name, the kind of partner and the city or region where the company works.

We use this data only to reply to you, understand the condominium or the company and prepare a proposal. The legal basis is the carrying out of preliminary procedures related to a contract, at your request (Article 7, V, of the LGPD).

The data reaches our sales team by email, sent through the Resend service, and is kept in the sales team's system, where they follow up on your message through to the reply and the proposal. We keep the data for as long as the conversation lasts and, if no contract follows, it is deleted from that system and from email within 12 months.

Protection against bots

To block automated submissions, the form may use Cloudflare Turnstile, which checks whether the sender is a person based on technical signals from the browser, without advertising cookies. There is also a hidden field that only bots fill in.

Cookies and Google Analytics

On abriu.app we use Google Analytics 4 to know how many people visit the website, which pages they open, where they come from (for example, the name of a campaign in the link) and how many send a form or click on WhatsApp and on the buttons of the partners page. To do this, Google Analytics stores cookies in your browser (such as _ga and _ga_ followed by a code), which last up to 2 years.

Google Analytics never receives what you type in the form. Advertising features are turned off: no Google signals, no ad personalization and no sharing for advertising. The legal basis is our legitimate interest in understanding how the website is used in order to improve it (Article 7, IX, of the LGPD).

You can refuse these cookies by blocking them in your browser settings or by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). The website keeps working normally.

WhatsApp

If you click a WhatsApp button, the conversation takes place in the WhatsApp app, which has its own privacy policy. The website only records that the click happened, without any of your data.

Who we share data with

We do not sell or rent personal data. To run the website, we rely on these providers:

• Cloudflare: hosting of the website and of the sales team's system where your message is kept, security and the bot check;
• Resend: delivery of the email with your message to our team;
• Google: the visit statistics of Google Analytics.

These providers may process data outside Brazil, with the safeguards the LGPD sets for international data transfers (Article 33).

Your rights and how to request deletion

You may request confirmation that we process your data, access to it, its correction or deletion, information about whom it was shared with, and the withdrawal of consent, where applicable (Article 18 of the LGPD).

To make a request, including the deletion of the data you sent through the form, send us a message through the form on this website with the word "Privacy" in it, or reply to any email you received from our team. We reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

Security

The website only works over an encrypted connection (HTTPS), and the messages received are accessible only to the team that handles sales, in a system that requires a login.

Changes to this policy

When this policy changes, the new version is published on this page, with the date of the last update at the top.