1. Consent

By using our app, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use our services.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings indicated:

• Personal Information: Data relating to an identified or identifiable natural person.
• Data Controller: The entity that determines the purposes and means of the processing of personal information.
• Data Processor: The entity that processes personal data on behalf of the controller.
• Data Subject: The natural person to whom the personal data refers.

3. Introduction

We, at ProjetoX, developer of the BUSCA PEÇAS system, are committed to protecting the privacy of our users. This privacy policy describes how we collect, use, store, and share your personal information when you use our app.

4. Information Collected

4.1. Information provided directly by you

• Name.
• Email address.
• Contact Information.
• Any other information that you voluntarily provide to us through forms or interactions with the app.

4.2. Information collected automatically

• Usage data (information about how you use the app, such as usage time, features accessed).
• Device information (model, operating system, unique identifiers).
• Geolocation data (where applicable and authorized by the user).

5. Registration Data

We would like to inform you that whenever you use our Service, in case of an error in the application, we collect data and information (through third-party products) on your phone called Registration Data. This Log Data may include information such as your device's IP address, device name, operating system version, application configuration when using our Service, the time and date of your use of the Service, and other statistics.

6. Use of Information

The information collected is used for the following purposes:

• Provide and maintain the operation of the application.
• Personalize the user experience.
• Communicate with you, including answering questions or support.
• Improve and develop new services and features.
• Comply with legal and regulatory obligations.

We may collect anonymous or aggregated data that cannot be used to identify you personally. This data may be used for analysis and improvement of our services.

We may use your information for marketing and advertising purposes. You may opt out of receiving these communications at any time by clicking on the unsubscribe link in our emails or by contacting us directly.

We do not use your personal information for automated decisions or profiling processes that may significantly affect you. Should this change, we will ensure that you are notified and given the opportunity to opt-out.

7. Legal Basis for Data Processing

We process your personal information based on one or more of the following legal bases:

• Consent: When you have given your explicit consent to the processing.
• Performance of a contract: When the processing is necessary for the performance of a contract to which you are a party.
• Legal obligation: When the processing is necessary for compliance with a legal obligation.
• Legitimate interest: Where the processing is necessary for our legitimate interests, except where those interests are overridden by your rights.

8. Cookies and Similar Technologies

We use cookies and similar technologies to improve your experience, personalize content, and perform usage analytics.

Cookies are files with small amounts of data that are commonly used as anonymous unique identifiers. They are sent to your browser from the websites you visit and stored in your device's internal memory.

This Service does not use these cookies explicitly. However, the application may use third-party code and libraries that use "cookies" to collect information and improve its services. You have the option to accept or decline these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some parts of this Service.

9. Information Sharing

We share your information only in the following circumstances:

• With service providers that assist in the operation of the application (e.g., WhatsApp).
• When required by law or to protect our legal rights.
• With your explicit consent.

We share your personal data with third parties strictly for the purposes of operating the app, such as hosting providers and payment platforms. These third parties are subject to confidentiality obligations and may not use the data for other purposes.

10. Processing of Sensitive Data

ProjetoX does not collect sensitive data without the user's explicit consent, as defined by the LGPD. This includes information about racial or ethnic origin, religious beliefs, health data, or biometric characteristics. If this data is required, specific consent will be requested.

11. International Data Transfer

Your personal data may be transferred to – and maintained on – computers located outside of your jurisdiction, where data protection laws may differ from those in your region. We ensure that any transfer of personal data complies with applicable data protection laws.

12. Service Providers

We may employ third-party companies and individuals for the following reasons:

• To facilitate our Service.
• To provide the Service on our behalf.
• To perform Service-related services.
• To help us analyze how our Service is used.

We want to inform users of this Service that these third parties have access to their Personal Information. The motive is to carry out the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Our app may utilize APIs or integrate with third-party services that collect data directly from you to facilitate its functionalities. We encourage you to review the privacy policies of these services to understand how your information is handled.

13. Security and Data Storage

We value your trust in providing us with your Personal Information, so we are striving to use commercially acceptable means of protecting it. We have adopted technical and organizational measures to protect your data from unauthorized access, loss, alteration and improper disclosure.

Please remember that no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security. Your data is stored in a secure manner and kept only for as long as necessary to fulfill the purposes set out in this policy.

We have implemented security measures, such as encryption and access controls, to protect your personal information from unauthorized access.

Where possible and necessary, we implement anonymization or pseudonymization techniques to ensure that personal data cannot be linked to an individual without additional information.

We have implemented technical and organizational security measures, such as encryption and the use of SSL protocols, to protect your personal information from unauthorized access, misuse, or disclosure.

We have implemented appropriate technical and organizational measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, as well as restricted access control to data.

13.1. Reports and Audits

We conduct periodic internal audits to ensure that our data protection practices comply with this Privacy Policy and applicable regulations.

13.2. Protection of Sensitive Data

ProjetoX adopts additional security measures to protect sensitive data, such as encryption and strict access controls. This data, which includes information about racial origin, religious beliefs, and health data, is processed only with the user's explicit consent.

14. Security Incidents (Data Breaches)

In the event of a personal data breach that results in a risk to the rights and freedoms of the data subjects, we will take the following measures:

• Notification to Regulatory Authorities: We will notify the competent data protection authority within 72 hours of becoming aware of the breach, where required by law.
• Notification to Affected Users: When the personal data breach presents a high risk to the rights and freedoms of the subjects, we will directly inform the affected users in a clear and accessible manner, explaining the nature of the breach, the possible consequences, and the measures taken to mitigate the negative effects.
• Mitigation Measures: Upon identification of any data breach, we will take all appropriate technical and organizational measures to mitigate the impacts and prevent future occurrences.

15. Restrictions of Liability

We are not responsible for any loss or damage arising from the misuse of personal information by third parties or from security breaches that cannot be attributed to our responsibility.

16. Data Retention

We will retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

The personal data collected will be kept for as long as it is necessary for the provision of the services or as required by law. After the end of this period, the data will be deleted or anonymized, as applicable.

17. Links to Other Websites

This Service may contain links to other websites. If you click on a third-party link, you will be directed to that website. Please note that these external websites are not operated by us. Therefore, we strongly recommend that you review the Privacy Policy of these websites. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of third-party websites or services.

18. Children's Privacy

These Services are not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from children under the age of 13. In the event that we discover that a child under the age of 13 has provided us with personal information, we immediately delete it from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take appropriate action.

We do not knowingly collect data from anyone under the age of 18 without the express consent of their legal guardians. If we identify that we have collected data from minors without their consent, we will take steps to delete it immediately.

19. Your Rights

You have the right to:

• Access your personal information that we collect.
• Request correction and/or correct inaccurate information.
• Request deletion of your data (where applicable).
• Withdraw your consent to the use of data (where applicable).
• Data portability.

To exercise your rights related to your personal information, you can send us a detailed request by emailing contato@projetox.com.br. We will provide you with a response within the applicable legal timeframe and may request additional information to verify your identity before processing your request.

19.1. Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as where you contest the accuracy of the data or where the processing is unlawful.

19.2. Revocation of Consent

You have the right to withdraw your consent to the processing of your personal information at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the withdrawal. To exercise this right, please contact us using the information provided in the contact section.

20. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Accordingly, we recommend that you review this page periodically for any changes. We will notify you of any major changes through the app or via email. We encourage you to review this policy periodically.

ProjetoX reserves the right to update its data collection and processing practices as new legal regulations on data protection are introduced, to ensure ongoing compliance.

21. Final Provisions

If any provision of this Privacy Policy is held to be invalid or unenforceable, the remaining provisions will continue in full force and effect.

22. Contact

If you have questions about this Privacy Policy or the treatment of your information, please contact us:

E-mail:

contato@projetox.com.br

Address:

Rua Imaculada Conceição, 1430

80.215-182 - Curitiba - Paraná - Brazil

23. Contacting Regulatory Authorities

If you have concerns about how we treat your personal information, you have the right to contact your local data protection authority to make a complaint. In Brazil, you can contact the ANPD (Autoridade Nacional de Proteção de Dados)

• ANPD website: https://www.gov.br/anpd/pt-br
• ANPD Contact E-mail: ouvidoria@anpd.gov.br

24. Privacy Policy Version

Version: 1.1

Last updated: November 01, 2024

This policy is available in Portuguese and Spanish. In case of discrepancies, the Portuguese version will be considered the official one.