Privacy policy
Last updated 26 August 2026
This page explains what happens to your details when you fill in the ALTAVISTA GRAVATÁ RESIDENCE form or talk to us on WhatsApp. It is written to be read, not to protect us from you.
Who processes your data
The controller is [Fronte's full legal name], registered under CNPJ [00.000.000/0001-00], at [full address].
For anything in this policy, including the rights below, write to [data protection officer e-mail]. We answer within 15 days.
What we collect
From the form, what you type:
| Data | Required |
|---|---|
| Name | Yes |
| Phone | Yes |
| What you are looking for (home or investment) | Yes |
| Deposit and instalment, if you use the estimator | No |
Alongside the submission, without you typing it:
- Your IP address and browser, kept as evidence that consent was given, when and from where.
- The campaign that brought you, when you arrive from an ad.
- An identifier for your visit, which exists to link what you did on the page to the details you sent.
While you browse, before you fill in anything, we record signals with no name attached: that the page was opened, how far you scrolled, whether you clicked the phone or WhatsApp, and whether you started or abandoned the form. This does not identify you. If you never submit the form, those signals stay ownerless.
If you talk to us on WhatsApp, we keep the text of the messages.
Why we collect it, and on what basis
The legal basis is your consent, given by ticking the box on the form. We keep the exact version of the wording you accepted, so there is no later doubt about what was agreed.
There are two purposes, and only two:
- To contact you about this development.
- To talk to you on WhatsApp.
We do not sell, rent or pass your data to anyone for their own marketing.
Who your data is shared with
Three services take part in the service. This part is usually left out of privacy policies, and it is exactly what you need to know.
- Anthropic — the first response is written by an artificial intelligence agent. The conversation text, your name and what you answered about what you are looking for are sent to the model so it can write the reply. Your phone number and e-mail are not sent: they are stripped out first.
- Z-API — this is how WhatsApp messages come in and go out. It receives your phone number and the message text. It is the only point where your phone number leaves Fronte.
- An audio transcription service — if you send a voice message on WhatsApp, the file is sent to be turned into text. Only the text is kept. This service is optional and may be off.
This site has no Google Analytics, no Facebook pixel, no tag manager and no third-party tracker. Fonts are served from the site itself, so not even Google knows you were here.
How long we keep it
24 months with no interaction from you. After that, your data is deleted automatically — it is not a request someone has to make, it is a routine that runs on its own.
The window is long because deciding to buy land takes long too: it is common for someone to come back more than a year later. If you would rather not wait, you can ask for deletion at any time.
Your rights
Brazilian data protection law gives you rights over your data, and these three are implemented in our system:
- See and take — a copy of everything we hold about you: contact details, your answers, your consents, the content of conversations and the browsing history linked to you.
- Correct — if the phone number is wrong, or the name.
- Delete — everything goes: contact, profile, consents, conversations. Only the ownerless browsing signals remain, plus the record that the deletion happened — which is the evidence that we honoured your request.
To exercise any of them, write to [data protection officer e-mail]. Today the request is handled by a person at Fronte; there is no self-service button.
How to stop being contacted
Just say in the WhatsApp conversation that you do not want to be contacted any more. It stops immediately, including messages already scheduled to go out.
If you would rather, or if the conversation is not working, write to [data protection officer e-mail].
Security
Each client's data is isolated in the database by the database itself, not only by code. Access to your record is logged: who opened it and when.
Changes
If this policy changes, the date at the top changes with it. If the change affects what you consented to, we will ask for consent again rather than assume the old one.