Locarë
Back to the home page
Legal

Privacy Policy

Last updated: 25 de agosto de 2026

This Privacy Policy describes how personal data is handled within Locarë — both on the marketing site (locareapp.com) and on the rental-management platform (app.locareapp.com). Processing follows Brazil's Law No. 13.709/2018 (LGPD).

1. Who is responsible for the data

Locarë is a software platform provided by Marcio Menezes de Carvalho Lima, a natural person, Brasil. For any matter related to privacy and data protection, the contact channel is:

This same contact acts as the Data Protection Officer (DPO) — the focal point for communications from data subjects and from the National Data Protection Authority (ANPD).

2. Controller and processor: Locarë's two roles

Because the platform is multi-tenant (many managers, each with their own tenants), it's important to distinguish the roles:

  • Data about you, the manager (our customer): here Locarë acts as controller — we decide how to handle registration, authentication and account-usage data.
  • Data about tenants and contracts entered by you: here you, the manager, are the one who decides (the controller of that data). Locarë acts as processor, handling that information on your behalf and according to your instructions.

If you are a tenant and want to exercise rights over your data, direct the request to the manager responsible for your contract. We support them in fulfilling the request.

3. What data we process

3.1. On the site (locareapp.com)

  • Browsing data: IP address, browser/device type and pages visited, logged automatically for operation and security.
  • Contact form: when you write to us, we process the data you provide (for example, name, email and the message content).

3.2. On the platform — about you, the manager

  • Registration name and email;
  • Access credentials (the password is stored only as a hash — never in readable text);
  • Account data, contracted plan and usage records.

3.3. On the platform — about tenants and contracts

  • Data that you, the manager, enter about properties, contracts and tenants (for example: names, contacts, addresses, amounts and due dates).
  • Locarë does not know the tenants' passwords: each layer manages its own credentials (double zero-knowledge).

4. What we use it for and on what legal basis

  • Provide and operate the platform (registration, authentication, features) — legal basis: performance of a contract (art. 7, V).
  • Security, fraud prevention and service improvement — legal basis: legitimate interest (art. 7, IX).
  • Comply with legal and regulatory obligations — legal basis: legal obligation (art. 7, II).
  • Respond to contacts and support — legal basis: performance of a contract or legitimate interest, as applicable.

We will only send marketing communications if you consent — and you can withdraw it at any time.

5. Cookies

We use only cookies that are essential to operation — mainly to keep your session authenticated. The site does not use advertising cookies or third-party trackers for profiling.

6. Who we share with

We do not sell personal data. We share only with providers that support the operation, to the extent necessary.

Locarë infrastructure:

  • Neon — the PostgreSQL database where platform data is stored;
  • Render — application hosting (app.locareapp.com);
  • Cloudflare — DNS, distribution network and security for the marketing site.

Providers you choose and configure in your own account:

  • Payment provider (for example, Asaas) — to issue the charges. The money goes straight to your account; Locarë does not hold funds or sit in the middle of the money flow. You may use the provider of your choice.
  • Storage provider (for example, Cloudinary or Amazon S3) — to store documents and images, in your own account and at the provider you choose.

Integrations with Google Services (OAuth 2.0)

When you choose to connect your Google account to Locarë, we request only the permissions strictly necessary for the features you enable:

  • Sending emails (gmail.send): used exclusively to send notifications, receipts, charges and operational communications on the manager's behalf, from a direct action in the system. Locarë does not read, access or store the content of your inbox or your received emails.
  • Google Drive (drive.file): used exclusively to create, save and read backup and portfolio-export files generated by the platform itself. Locarë does not access, read or alter any other file in your Google Drive.

Limited Use: Locarë's use and transfer to any other app of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is not shared with third parties, not used for advertising purposes and not used to train Artificial Intelligence models.

7. International data transfer

Part of the infrastructure (for example, the database and hosting) and some of the providers you choose may process data on servers outside Brazil, including in the United States. In those cases, we seek adequate protection safeguards, in line with arts. 33 and 34 of the LGPD.

8. Information security

We adopt technical and organizational measures to protect the data, among them:

  • Isolation via Row-Level Security (RLS) forced at the database: each manager accesses only their own data, guaranteed at the database level — not just by application logic;
  • Double zero-knowledge: we do not know the manager's password, and the manager does not know the tenant's;
  • Encryption in transit (HTTPS/TLS) and passwords stored as a hash.

No system is 100% immune to incidents; in the event of a relevant security incident, we will take the measures set out in the LGPD.

9. How long we keep it

We keep the data while the account is active and for as long as needed for the described purposes. After the account is closed, the data is deleted or anonymized within a reasonable period, except where retention is required by legal obligation.

10. Your rights as a data subject

You may, at any time (art. 18 of the LGPD):

  • Confirm that processing exists and access your data;
  • Correct incomplete, inaccurate or outdated data;
  • Request anonymization, blocking or deletion of unnecessary data or data processed in non-compliance;
  • Request portability;
  • Be informed about who we share your data with and withdraw consent;
  • Object to processing, in the cases provided for by law.

11. How to exercise your rights

Just write to privacidade@locareapp.com. We may ask for information to confirm your identity before acting. If you are a tenant, remember that requests about contract data must be directed to the manager who entered them.

12. Children and adolescents

The platform is intended for property managers and is not directed at people under 18. We do not knowingly collect data from children and adolescents.

13. Changes to this Policy

We may update this Policy to reflect legal or service changes. The "last updated" date at the top indicates the current version. Relevant changes will be communicated through the appropriate channels.

14. Contact

Questions about this Policy or how your data is handled? Write to privacidade@locareapp.com. You may also contact Brazil's National Data Protection Authority (ANPD).