Vecsy Privacy Policy

Last updated: 16/10/2025

The Vecsy Automação de Design Inova Simples (I.S.) ("Vecsy", "we", "our" or "us") is committed to protecting the privacy of our users ("Users" or "you"). This Privacy Policy describes the information we collect, how we use it, how we protect it, and the choices you have regarding your data.

1. Information We Collect

We collect User information in various ways, including:

• Information provided by you: When you register on the Vecsy Platform, contact us, or participate in surveys, we collect information that you provide, such as name, email address, password, payment data, and other contact information.
• Usage information: We collect information about how you use the Platform, such as the pages you visit, the features you use, the actions you take, and the time you spend on the Platform.
• Device information: We collect information about your device, such as device type, operating system, browser, IP address, and location information.
• Cookies and similar technologies: We use cookies and similar technologies to collect information about your activities on the Platform and to personalize your experience. For more information about cookies, see the "Cookies" section below.

2. How We Use Your Information

We use the collected information to:

• Operate and improve the Platform: To provide, maintain, protect, and improve the Vecsy Platform and the services we offer.
• Personalize your experience: To customize your experience on the Platform, such as showing relevant content and special offers.
• Address your requests: To answer your questions, provide technical support, and process your service requests.
• Communicate with you: To send important updates, announcements, promotional messages, and other information related to the Platform and our services.
• Analyze and improve our services: To analyze how Users use the Platform, identify trends, and improve our services.
• Prevent fraud and abuse: To protect the security of the Platform and our Users, detect and prevent fraudulent or abusive activities.
• Fulfill contractual and legal obligations: To perform agreements signed with you or the organization you represent and to comply with applicable regulatory requests.

We apply technical and administrative safeguards tailored to each purpose and only process personal data when necessary and supported by an appropriate legal basis.

3. Legal Bases for Processing

Vecsy processes personal data in accordance with the legal bases established by the Brazilian General Data Protection Law (LGPD) and the EU General Data Protection Regulation (GDPR), including:

• Legitimate interest: For usage analytics and continuous improvement of the Platform, while ensuring these interests do not override the rights and freedoms of data subjects.
• Consent: For open tool features where we do not store the content you provide and discard it immediately after processing; you may withdraw consent at any time.
• Performance of a contract: For Vecsy Cards and other corporate offerings that require us to deliver contracted services and provide related support.
• Compliance with legal or regulatory obligations: When required to meet legal, tax, accounting, or regulatory requirements.

Whenever we rely on your consent for a specific processing activity, we will clearly explain the purpose and allow you to revoke the authorization at any time.

4. Information Sharing

We share your information with third parties under the following circumstances:

• Business partners: We may share information with our business partners who help us operate and improve the Platform, such as hosting, analytics, and marketing service providers.
• Service providers: We may share information with our service providers who assist us with tasks such as customer service, payment processing, and data analysis.
• Legal compliance: We may share your information if required by law, regulation, or court order, or to cooperate with competent authorities.
• Security: We may share your information if we believe disclosure is necessary to protect the security of the Platform, our Users, or third parties.
• Consent: We may share your information with other third parties with your express consent.

5. Information Security

We take appropriate technical, administrative, and physical measures to protect your information against loss, theft, and unauthorized access, use, disclosure, alteration, or destruction. However, no security measure is perfect, and we cannot guarantee complete security of your information.

6. International Data Transfers

Platform browsing data may be stored and processed in data centers located outside Brazil and the European Union, including in the Oregon region of the United States, using Amazon Web Services (AWS) infrastructure. When we conduct international data transfers, we:

• Apply encryption: Safeguarding data at rest and in transit with industry-standard encryption algorithms.
• Restrict access: Maintaining role-based access controls and monitoring activities to prevent misuse.
• Adopt contractual safeguards: Requiring our service providers to uphold data protection obligations equivalent to those mandated by law.

Whenever feasible, we store data in regions that ensure an adequate level of protection or are subject to sufficient contractual and technical safeguards.

7. Data Retention and Deletion Criteria

We retain personal data only for as long as needed to fulfill the purposes described in this Policy or to meet legal requirements. In general:

• Platform accounts and contractual data: Retained during the relationship with the User and for up to 5 (five) years after termination to comply with legal obligations, exercise legal claims, or defend against them.
• Open tools: We do not store the content submitted by Users; the data is discarded immediately after processing.
• Data subject requests: If you request deletion or anonymization, we will fulfill it unless a legal obligation or legitimate interest justifies retention.

At the end of these periods or when the data is no longer necessary, it is securely deleted or anonymized.

8. Data Subject Rights

In line with the LGPD and GDPR, you have several rights regarding your personal data, including:

• Access: Obtain confirmation that we process your data and access a copy of the information.
• Rectification: Request correction of incomplete, inaccurate, or outdated data.
• Portability: Request the transfer of your data to another provider, subject to legal requirements.
• Restriction of processing: Temporarily limit the use of data in specific circumstances.
• Objection: Object to processing based on legitimate interest when reasons related to your particular situation prevail.
• Erasure: Request deletion of data processed with consent or that are no longer necessary, except where retention is legally justified.
• Complaints to authorities: File a complaint with the Brazilian National Data Protection Authority (ANPD) or the competent supervisory authority in the European Union, such as CNIL (France) or AEPD (Spain), depending on your country of residence.

To exercise these rights, send a request to contato@vecsy.co. Our team will review the request and respond within 30 (thirty) days, which may be extended for complex cases as permitted by law.

9. Complaints and Supervisory Authorities

If you have questions or concerns about how we process your personal data, please contact us first at contato@vecsy.co so we can investigate and resolve the issue. You may also submit a complaint directly to the ANPD or to the data protection authority in your EU country of residence.

10. Cookies

We use cookies and similar technologies to collect information about your activities on the Platform and to personalize your experience. You can configure your browser to refuse cookies or to alert you when a cookie is being sent. However, if you choose not to accept cookies, you may not be able to use all Platform functionalities.

11. Your Choices

You have several choices regarding your information:

• Access and edit your information: You can access and edit your profile information on the Vecsy Platform.
• Account cancellation: You can cancel your Vecsy Platform account at any time. When you cancel your account, your information will be deleted or anonymized.
• Promotional email unsubscribe: You can unsubscribe from promotional emails by clicking the "Unsubscribe" link located at the bottom of the emails.
• Contact information: You can contact us for any privacy concerns or to request additional information.
• Exercise of rights: Use contato@vecsy.co to request deletion, restriction, portability, or any other action provided by law.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes through Platform notifications or email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact

For any questions or requests related to our Privacy Policy, please contact us via email at contato@vecsy.co.

14. Applicable Law and Jurisdiction

This Privacy Policy shall be governed and interpreted in accordance with the laws of the Federative Republic of Brazil.