1. Who we are

Easy Inspection is an AI-assisted inspection and reporting platform. We act as the data controller for personal data we process to operate the Platform.

2. Data we collect

• Account: name, email, avatar, language, and login metadata.
• Billing profile: tax data (e.g., CPF/CNPJ where applicable), legal name, address.
• Platform usage: access logs, actions, report generation, models used, credit consumption.
• Content you submit: images/photos, text, materials; and the generated reports (PDF).
• Device & tech: IP, identifiers, user-agent, cookies, aggregated analytics.
• Payments: status and amounts (handled by third parties such as Stripe). We don’t store full card data.
• Support: messages and attachments sent to support.

3. How we use data

• Operate and improve the Platform and its features.
• Process payments and manage credits/balances.
• Issue tax documents where applicable.
• Prevent fraud, abuse, and security incidents.
• Handle requests and provide support.
• Communicate relevant updates and contractual changes.
• Comply with legal and regulatory obligations.

4. Legal bases

We process data under: contract performance, legal/regulatory obligations, legitimate interest (with DPIA where needed), and consent when required, especially for certain communications and non-essential cookies.

5. Sharing

We may share data with:

• Payment processors (e.g., Stripe) to handle transactions.
• Infrastructure providers (hosting, email, monitoring and storage on AWS; including Amazon S3 Glacier Deep Archive for images/attachments).
• Public authorities when required by law.
• Audit partners and consultants under confidentiality.

6. Cookies & analytics

We use essential cookies for auth and security, and analytics cookies to understand usage. You can manage cookies in your browser. Where required, we will request consent for non-essential cookies.

7. Security

We apply reasonable technical and organizational measures (encryption in transit, access controls, logging). No method is 100% foolproof; keep your credentials safe.

Archival storage (Deep Archive): uploaded images/attachments may move to Amazon S3 Glacier Deep Archive for long-term retention. Objects are encrypted at rest (e.g., AES-256/SSE) and sent over TLS. Restores can take hours; restoration fees may apply — we will notify you beforehand.

8. Retention

We retain data as needed for the purposes in this policy and legal obligations. Afterwards, we securely delete or anonymize.

• Images/attachments: short time in hot storage; then Deep Archive, unless deletion is requested or prohibited by law.
• Reports (PDF): kept in a standard S3 bucket; backups may exist in archival tiers.
• Deletion: upon request and if no legal impediments, we apply logical/physical deletion; for Deep Archive, final removal may take additional time.

9. Your rights

Under applicable laws, you may request: confirmation, access, rectification, anonymization, blocking, erasure, portability, information about sharing, and review of automated decisions. To exercise these rights, contact us at falecom@vistoriafacil.com.

10. International transfers

Third-party services may process data outside your country (e.g., AWS and AI providers). We apply appropriate safeguards (contractual clauses, aligned policies, risk assessments). By using the Platform, you acknowledge this possibility.

11. Children and teens

The Platform is not intended for users under 18. If we identify minors’ data without proper consent, we will take steps to remove it.

12. Changes to this policy

We may update this Policy to reflect legal or operational changes. We will notify material changes through appropriate channels.

13. DPO and contact

DPO: falecom@vistoriafacil.com.
General support: falecom@vistoriafacil.com.