Privacy Policy

This Privacy Policy describes the processing of personal data carried out by OpereBem through its websites, applications, products, communities, support channels and other digital services. For processing activities in which it determines the purposes and means, the controller is Mateus Teixeira, responsible for operating the OpereBem brand, hereinafter “OpereBem”.

The policy applies to the institutional website and to current or future products within the same ecosystem, including Terminal OpereBem, Student Portal, OpereBem Academy, Diário OpereBem, TradeZen or LogTrady, community, Under16, partner and careers pages, APIs, administrative areas, service status page and support services.

Where a provider or partner independently determines how it processes personal data, its own policy also applies. Specific notices presented at the point of collection supplement this document.

• Account and identity: central registration, authentication, access recovery, session management, profile, plan and product integrations.
• Terminal and market data: access to tools, quotes, plans, contracted features, preferences and operational records.
• Student Portal and education: enrolments, payments, progress, assessments, certificates, materials, interest lists and academic support.
• Journal, TradeZen and LogTrady: trading accounts, transactions, imports, images, notes, checklists, setups, emotional journal, goals and performance analytics.
• Community: Discord or equivalent integrations, member identification, messages referred to moderation, verification, benefits and security logs.
• Institutional and relationship: contact, authorised marketing, partnerships, recruitment, support, Under16, surveys and service communications.

The categories actually processed depend on the service used and the interaction performed.

OpereBem does not request broker credentials, banking passwords or full card details through ordinary forms. Data subjects should not enter third-party data, excessive information or sensitive data in free-text fields, notes, messages or uploads without necessity and authorisation.

Data may be provided directly by the data subject or legal guardian; generated through use of the services; received from integrations authorised by the data subject; supplied by companies, schools or partners within a legitimate relationship; or received from authentication, payment, hosting, analytics and community providers.

Where an import contains information about other people, the person uploading it represents that they have authorisation or another valid legal basis and must limit the content to what is strictly necessary.

Where legitimate interests are relied upon, OpereBem considers the legitimate purpose, necessity, the data subject's expectations, the impact on their rights and the available safeguards.

Cookies and similar technologies may be used for authentication, security, preferences, session continuity, technical operation, measurement and analysis. Strictly necessary technologies are used to provide the service. Analytics, advertising or other optional purposes depend on the choices shown in the preference manager where applicable.

Data subjects may review their choices in the cookie manager and control technologies through their browser. Disabling necessary items may prevent authenticated features from working.

OpereBem does not sell personal data. Data is shared only where necessary and consistently with the purposes of this policy, including with:

• hosting, database, CDN, monitoring, security, email, support and development providers;
• payment and billing providers, such as Stripe, which process data under their own legal and contractual duties;
• analytics, authentication, community and integration platforms enabled by the data subject;
• professionals bound by confidentiality, such as accountants, lawyers and auditors;
• public authorities under a legal duty, valid order or the regular exercise of rights;
• successors in a corporate reorganisation, subject to applicable safeguards.

Providers receive only the data necessary for the contracted activity and are subject to confidentiality, security and data-protection requirements consistent with their role.

Some providers may process or store data in other countries. In such cases, OpereBem adopts mechanisms permitted by the LGPD and regulations issued by Brazil's National Data Protection Authority (ANPD), such as adequacy decisions, standard contractual clauses, approved specific clauses or binding corporate rules, as applicable.

Data is retained for the period necessary for the stated purpose. Criteria include the duration of the account or contract, availability of the requested feature, legal and regulatory periods, fraud prevention, security, audits, exercise of rights and dispute resolution.

After processing ends, data is deleted or anonymised unless retention is permitted or required by law. Backups follow their own replacement cycles and remain protected until deletion. Security-incident records are retained for the applicable regulatory period.

OpereBem adopts technical and administrative measures proportionate to the risks, including access controls, authentication, credential protection, secure connections, permission segregation, security logs, updates, backups and provider assessments. No environment is completely immune to failure, so safeguards are reviewed as services and risks evolve.

Incidents are assessed and contained in accordance with response procedures. Where an incident may cause relevant risk or harm, OpereBem will notify the ANPD and affected data subjects under the applicable rules and deadlines.

Under the LGPD, data subjects may request, as applicable:

• confirmation of processing and access to data;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• portability, subject to ANPD regulations and commercial and industrial secrets;
• information about public and private entities with which data has been shared;
• information on the possibility and consequences of refusing consent;
• withdrawal of consent and deletion of data processed on that basis, subject to lawful retention;
• objection to processing based on a waiver of consent where the LGPD has been breached;
• review of decisions made solely through automated processing that affect their interests, where applicable;
• petition before the ANPD and consumer-protection bodies.

Requests should be sent to contato@operebem.com.br with the subject “Privacy and LGPD”. Additional information may be requested to confirm identity and protect the data subject. Responses follow legal deadlines; requests may be restricted where they conflict with retention obligations, third-party rights, security or commercial and industrial secrets.

The Journal, Terminal and related tools may automatically calculate metrics, classifications, alerts and analyses from data supplied or imported by the user. These outputs are informational, educational and organisational; they are not financial advice, an investment recommendation or a decision with legal effect on the data subject.

If a decision based solely on automated processing that affects a data subject's interests is implemented, clear information about the criteria and a channel to request review will be provided, subject to commercial and industrial secrets.

This policy may be updated to reflect legal, regulatory, technical or operational changes. Material changes will be communicated through an appropriate channel. The current version and its update date will remain available on this page.

Official references: Brazilian General Data Protection Law, data-subject rights, international transfers and incident reporting.