Privacy Policy

1. Who we are and the scope of this policy

Decore is an AI-powered visual production platform for architects, interior designers, students, studios, and related professionals. This Privacy Policy explains how we handle personal data when you access our websites, use the platform, create an account, upload files, generate images, videos, panoramas, contact us, participate in campaigns, or use the Decore Creator Program.

For the purposes of the Brazilian General Data Protection Law (LGPD), Decore generally acts as the controller of the personal data processed to operate and improve its own services. In some flows, technical providers process data on behalf of Decore as processors.

2. Data we may collect

We may collect registration and profile data, such as name, email, phone, WhatsApp, photo or avatar, authentication identifier, notification preferences, subscribed plan, subscription status, and credit balance.

We may also process data related to the use of the platform, such as projects, canvas state, texts, prompts, visual references, masks, versions, generation history, images, floor plans, renders, videos, panoramas, file URLs, credit consumption records, endpoints used, request identifiers, and technical logs.

In forms, campaigns, and support, we may collect name, email, WhatsApp, subject, message, contact source, and information necessary to respond to requests. In the Decore Creator Program, we may process social profiles, post links, public metrics, Pix key, review status, payment information, acceptance of terms, and anti-fraud records.

We also collect technical and browsing data, such as IP address, cookie identifiers, device, browser, pages accessed, analytics events, traffic source, and interactions with the site.

3. Data submitted by you and third parties

You are responsible for ensuring that you have the necessary rights and authorizations over images, videos, floor plans, projects, environments, works, brands, clients, people, voices, names, materials, and other content submitted to Decore.

Decore does not intentionally request sensitive personal data. If you include sensitive data or third-party data in files, prompts, messages, projects, or submitted content, we will process this information only to the extent necessary to provide the service, comply with legal obligations, protect rights, or handle applicable requests.

4. How we use the data

We use personal data to create and authenticate accounts, save projects, operate the canvas, process uploads, generate and edit images, videos, and panoramas, manage credits, plans, subscriptions, payments, and usage limits, provide support, and respond to messages.

We also use data to personalize the experience, maintain history and preferences, prevent fraud and abuse, protect platform security, debug errors, improve performance, measure campaign results, send permitted operational or promotional communications, and comply with legal, regulatory, tax, accounting, or contractual obligations.

5. Legal bases

Data processing may rely on different legal bases provided by the LGPD, depending on the context: performance of a contract or preliminary procedures, compliance with a legal or regulatory obligation, the regular exercise of rights, the legitimate interest of Decore or third parties, consent when necessary, and fraud prevention and the safety of the data subject in identification and authentication processes.

When processing depends on consent, you may revoke it through the channels indicated in this policy, without affecting processing previously carried out validly or processing that remains necessary under another legal basis.

6. AI, technical providers, and storage

To deliver Decore's features, the files, prompts, references, images, videos, metadata, and instructions you submit may be processed by our own infrastructure and by providers of technology, cloud, storage, database, authentication, generative AI, image editing, video generation, analytics, communication, payment, accounting, and security.

These providers may include, depending on the feature used, services such as Google Cloud/Firebase, Stripe, AI model and infrastructure providers, analytics tools, and communication platforms. We share only the data necessary for the applicable purpose and adopt contractual and technical measures compatible with the nature of the service.

7. Cookies, analytics, and marketing

We use cookies and similar technologies for site operation, audience measurement, browsing analysis, product improvement, campaign attribution, and communication. The site may use tools such as Google Analytics and Google Tag Manager to understand aggregated interactions and usage events.

You can block or delete cookies in your browser settings. Some features may not work properly without certain cookies or equivalent technologies.

8. Data sharing

We may share personal data with providers and partners necessary to operate Decore, including hosting, database, storage, authentication, AI processing, payments, anti-fraud, analytics, support, communication, accounting, legal advisory, and auditing.

We may also share data when necessary to comply with the law, an order from a competent authority, a regulatory obligation, the defense of rights, fraud investigation, platform security, corporate operations, or business reorganizations, always within applicable legal limits.

9. International transfers

Some Decore providers may store or process data outside Brazil. When there is an international transfer of personal data, we will adopt measures compatible with the LGPD, such as contractual clauses, protection guarantees, provider assessment, and other legally accepted mechanisms.

10. Retention and deletion

We keep personal data for as long as necessary to provide the services, maintain the account, preserve projects and usage history, process payments, provide support, prevent fraud, comply with legal, tax, accounting, and regulatory obligations, resolve disputes, and exercise rights.

When data is no longer necessary, we may delete it, anonymize it, or keep it only in the cases permitted by the LGPD, including for legal compliance, study, defense of rights, legitimate transfer to third parties, or exclusive use by Decore with anonymized data.

11. Security

We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, improper disclosure, and abusive use. These measures include access controls, the use of trusted infrastructure providers, operational logs, and security practices compatible with the size and nature of the platform.

No system is completely immune to incidents. If a relevant incident involving personal data occurs, we will assess the risks and adopt the communication and mitigation measures required by applicable law.

12. Your rights

Under the LGPD, you may request confirmation of processing, access to data, correction of incomplete, inaccurate, or outdated data, anonymization, blocking or deletion of unnecessary, excessive, or non-compliant data, portability when regulated, information about sharing, revocation of consent, deletion of data processed with consent, and review of decisions made solely on the basis of automated processing, when applicable.

To exercise your rights, send a request to contato@decore.app. We may ask for additional information to confirm your identity and protect your account before fulfilling certain requests.

13. Minors

Decore is primarily aimed at professionals, studios, companies, students, and creators with the capacity to contract or valid authorization from a legal guardian. If we identify inappropriate processing of minors' data, we may restrict the account, remove data, or request additional proof.

14. Changes to this policy

We may update this Privacy Policy to reflect changes to Decore, providers, features, legal requirements, or security practices. The updated version will be published on this page with the date of the last update. Relevant changes may be communicated through additional channels when appropriate.