PRIVATE PREVIEW · DRAFT

Privacy Notice

Version 2026-10-10-phone-v1

Draft for private preview. This notice is not ready for public launch. Controller identity, DPO or privacy contact, retention periods and international-transfer details must be supplied and reviewed before publication.

Initial registration data

Personal registration collects email, mobile phone, password and account intent. It does not collect legal name, CPF, birth date, identity documents, bank details or wallet information. Business-controller registration additionally collects the controller's legal name and CPF.

Contact confirmation

Email and mobile-phone confirmations are required before account access. Verification links and one-time codes must remain private.

Business profiles

After controller and contact verification, a controller may supply a CNPJ, legal name and optional trade name for a business they control.

Security and rights

Credentials are used to protect account access. A complete launch notice must explain the lawful bases, retention, recipients and how data-subject rights can be exercised.