Privacy Policy
Last updated: October 4, 2026
This Privacy Policy describes how AutoViz processes personal data, in compliance with the General Data Protection Regulation (GDPR) and, where applicable, Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
1. Who We Are (Controller)
AutoViz, registered under 65.316.052/0001-17, is the controller of the personal data processed on the Platform. Our Data Protection Officer (DPO) can be reached at contato@autoviz.studio.
2. Data We Collect
We process the following categories of data:
- Account data: name, email and password (stored only as a hash).
- Usage and technical data: access logs and IP address (stored anonymized as a hash).
- Payment data: processed directly by Stripe — we do not store card numbers.
- Photos uploaded by the Customer's end users for the photo simulation.
3. Purposes and Legal Bases
We process data to: provide and maintain the Service (performance of a contract); process payments (contract and legal obligation); ensure security and prevent fraud (legitimate interest); and provide updates and support (legitimate interest or consent).
4. Photo Simulation
Photos are uploaded with the data subject's explicit consent and processed solely to generate the requested simulation.
We strip metadata (EXIF/GPS) before storage, store the IP address only as a hash, and automatically delete images and records within 7 days.
Processing uses AI providers (Google Gemini and/or Replicate) only to edit the image.
5. Sharing with Third Parties
We share data only with processors required to deliver the Service:
- Stripe — payment processing;
- Google Cloud Storage — storage of models and images;
- AI providers (Google, Replicate) — editing of simulation photos;
- PostHog (European Union) — product and dashboard usage analytics.
- Google (Google Analytics and Google Ads) — measuring site visits and the results of our ads, only with your consent.
- Hostinger — hosting of the server for our support chat (Chatwoot, operated by AutoViz itself).
- We do not sell personal data.
7. International Data Transfers
Some providers may process data outside Brazil or the European Union. In such cases, we apply appropriate safeguards as required by the LGPD and the GDPR.
8. Data Retention
We keep account data for as long as the account exists and for applicable legal periods. Photo simulation images are retained for a maximum of 7 days. Tax and payment data are kept as required by law.
9. Your Rights
You may request confirmation of processing, access, correction, anonymization, portability, deletion, withdrawal of consent and objection to processing.
To exercise your rights, contact contato@autoviz.studio.
10. Security
We apply technical and organizational measures such as encryption in transit, storage in a private bucket with short-lived signed URLs, and hashing of passwords and IP addresses.
11. Children
The Service is not directed to anyone under 18 and we do not knowingly collect data from minors.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated through appropriate channels.
13. Contact and DPO
For privacy questions, contact our Data Protection Officer at contato@autoviz.studio.