Privacy Policy

The ORA Pool 2026 is a promotional campaign operated by Thiago Costa (Fortune International Group), in partnership with ORA by Casa Tua. This Privacy Policy explains how we collect, use, and protect information you provide when participating in the pool.

Effective date: April 19, 2026

For any privacy-related question, contact us at thiago@orabycasatua.com.

When you register and participate in the pool, we collect:

• Full name
• Email address
• Phone number (including country code)
• Real estate agent status (yes / no)
• Brokerage or company name (if you identify as an agent)
• City and state of operation (if agent; optional)
• Predictions submitted: champion, runner-up, top scorer, dark horse, flop, and total tournament goals
• Marketing communication opt-in preference
• Date and time of submission
• IP address and basic usage analytics (via Vercel Analytics, if enabled)

• To administer the pool — determining winners and calculating standings
• To contact participants about pool results and their leaderboard position
• To send marketing communications about ORA by Casa Tua and related real estate opportunities, only if the participant opted in via the checkbox on the signup form
• To improve the service and understand participation patterns, always in aggregated and anonymized form

We do not sell personal information to third parties. We may share information with:

• Service providers who operate the platform on our behalf — Supabase (database), Vercel (hosting), and Resend (email) — under strict confidentiality obligations
• Law enforcement, if required by law

Where the participant has opted in, marketing communications relating to ORA by Casa Tua and Fortune International Group may be shared with those entities and processed under their own privacy policies.

• Pool-related data is retained through August 2026 (end of the campaign follow-up period).
• Marketing contacts are retained in our CRM indefinitely, with the right to unsubscribe at any time.
• Participants may request deletion at any time by emailing the contact above.

Subject to applicable law, you have the right to:

• Access — request a copy of the data we hold about you
• Correction — update incorrect or outdated information
• Deletion — request removal from our database
• Opt-out — unsubscribe from marketing communications at any time

These rights include those available under GDPR (European users), CCPA / CPRA (California users), and LGPD (Brazilian users). To exercise any right, email thiago@orabycasatua.com.

• Essential cookies are used for session management (admin login).
• Analytics cookies (Vercel Analytics) help us understand usage. These are anonymous and aggregated.
• We do not use third-party advertising cookies.

• Data is stored in Supabase (SOC 2 Type II compliant).
• The site is hosted on Vercel (enterprise-grade security).
• Access to the admin area is restricted by authenticated login and an admin flag.
• All traffic is encrypted in transit via HTTPS.

This pool is not intended for children under the age of 18. We do not knowingly collect data from minors. If you believe a minor has submitted information, please contact us so we can remove it.

We may update this policy from time to time. Material changes will be communicated to existing participants via email.

Email: thiago@orabycasatua.com

Business: Fortune International Group, acting as independent sales agent for ORA by Casa Tua.