Privacy Policy and Data Protection

Your Home Brasil provides property management for real estate intended for short-stay rentals, seeking maximum profitability of our clients' properties and a unique lodging experience for guests. To provide this service, we process personal data of both owners and investors and of guests who stay in the properties under our management.

This policy applies to all personal information processed by Your Home Brasil in the course of its activities, whether through the website, communication channels, partner listing platforms, or the direct relationship with clients and guests.

• Federal Law 13.709/2018 — General Personal Data Protection Law (LGPD).

Information classification

the process of identifying, analyzing, and assessing information as to its degree of confidentiality, taking into account its importance to the organization, applicable legal requirements, and its criticality and sensitivity to unauthorized disclosure or modification.

Confidentiality

the property whereby information is not made available or disclosed to unauthorized individuals, entities, or processes.

LGPD

Federal Law 13.709/2018, known as the General Data Protection Law.

Information custodian

the person, group, or entity that has authority over the information and may decide on its classification and handling.

Availability

the property whereby information is accessible and usable on demand by an authorized entity.

Guest

a person who makes a reservation and/or stays in a property managed by Your Home Brasil.

Owner/Investor

a client who entrusts Your Home Brasil with the management and profitability of their property.

Information security event

an identified occurrence of a system, service, or network state indicating a possible information security breach, a failure of controls, or a previously unknown situation that may be relevant to security.

Information security incident

a single event or series of unwanted or unexpected information security events with a significant probability of compromising business operations or threatening information security.

Integrity

the property of accuracy and completeness of information.

Data privacy

the safeguarding of the fundamental rights of personal data subjects as established in applicable legislation.

Information security

the preservation of the confidentiality, integrity, and availability of data and information.

Processing of personal data

any operation carried out with personal data, including but not limited to: collection, transmission, storage, processing, retention, and disposal.

We collect personal information from different data subjects and in various ways, including but not limited to:

From owners and investors (clients):

• Registration and contract information: name, CPF/CNPJ, e-mail address, phone number, postal address, and data required for contracting and accountability.
• Property information: address, characteristics, and documentation of the managed property.
• Financial information: bank details for transferring funds and profitability information.

From guests:

• Reservation information: name, e-mail, phone, number of guests, and stay dates.
• Identification information for check-in: identity document and other data required for lodging, where applicable.
• Payment information: data required to process the reservation (generally handled by payment providers and partner platforms).

From all website/platform users:

• Usage information: activity logs, pages visited, geolocation data, browsing time, and interactions with our services.
• Additional contact information provided voluntarily for support and personalized service.

As the controller of the personal data, we use your information for the following purposes:

• Provide and improve our services: operate property management, enable reservations and stays, personalize the experience, and ensure compliance with our contracts with clients and guests.
• Communication: send communications related to your account, reservation, or contract — such as booking confirmations, updates, and security notifications. With your consent, we may also send promotional communications and news.
• Support and service: answer questions, resolve issues, and provide support to owners and guests.
• Data analysis: perform analyses to improve our services, develop new features, and strengthen the security of the platform.

We process your personal data on the basis of one or more of the following legal bases set out in the LGPD:

• Performance of a contract or of preliminary procedures related to a contract to which the data subject is a party;
• Compliance with a legal or regulatory obligation;
• Regular exercise of rights;
• Legitimate interest of the controller;
• Consent of the data subject, where applicable (for example, for promotional communications).

We do not share your personal information with third parties, except in the following circumstances:

• Listing and booking platforms: we share reservation and lodging data with partner platforms (such as short-term rental marketplaces) to enable the advertising of the properties and the completion of reservations.
• Service providers: payment providers, cleaning, maintenance, concierge, and other partners necessary to the lodging operation, always subject to compliance with the LGPD and good information security practices.
• Owners: when necessary for accountability and property management, essential lodging data may be shared with the property owner.
• Compliance with legal requirements: we may disclose information to comply with legal or regulatory obligations, or to respond to requests from competent authorities.

Certain services used by Your Home Brasil — such as website hosting, listing and booking platforms, and communication tools — may store or process data on servers located outside Brazil, including in the United States of America.

In such cases, we adopt measures to ensure that the international transfer occurs in compliance with the LGPD, engaging providers that offer adequate guarantees of protection and privacy of personal data.

We maintain appropriate security measures to protect your personal information against loss, unauthorized access, disclosure, alteration, or destruction, adopting market best practices in information security. However, we remind you that no security system is 100% foolproof.

You have rights regarding your personal data, including the right to access, correct, update, port, or delete personal information, as well as to withdraw consent. To exercise these rights, contact us through the channels indicated below.

Details about data subjects' rights can be found in the official text of the LGPD (Brazil's General Data Protection Law).