Privacy Policy – OpereBem Terminal

Your privacy is not an option, it is a pillar of Operebem ("We"). This Privacy Policy describes, directly and without detours, how we collect, use and protect your personal data when using our Platform, in full compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

By using the Platform, you agree to the processing of your data as described herein. The Data Controller is Mateus Teixeira (Operebem).

We adhere to the principle of minimization: we collect only what is essential for the service to function and for your security.

Data Provided by You:

• Individual Taxpayer Registration (CPF): To ensure account uniqueness, prevent fraud and verify your identity.
• Contact Data: Email and phone number, for essential communication about your account and security validation.
• Password: Encrypted and securely stored to protect your access.

Data Obtained from External Sources (via CPF verification):

• Full Name: To personalize the experience and confirm your identity.
• Date of Birth: To ensure you are over 18 years old, an essential requirement for using the Platform.

Usage Data (Collected Automatically):

• IP address, browser type, operating system. Used for security, troubleshooting and aggregate analysis.

Cookies:

• Essential Cookies: Necessary for the security and functioning of the Platform (e.g., JWT session token). These cannot be disabled.
• Analytics Cookies: Used to understand how you interact with the Platform so we can improve it (e.g., Google Analytics). These are only activated with your explicit consent, given through our cookie banner.

Each piece of data has a clear purpose and legal permission to be used.

Purpose (What do we use it for?)	Legal Basis (Why is it allowed?)
Provide, operate and protect the Platform Services	Contract Execution (our Terms of Use)
Verify your identity and prevent fraud	Legitimate Interest and Fraud Prevention
Send marketing communications and relevant content	Your Consent (provided during registration)
Send birthday wishes or offers	Legitimate Interest (to strengthen the relationship)
Analyze usage to improve the Platform (via cookies)	Your Consent (provided in the cookie banner)
Comply with legal and regulatory obligations	Legal Obligation

We do not sell your data. Period. Sharing is restricted and necessary:

• Service Providers: Companies that assist us in operations (e.g., cloud services for hosting). They are contractually obligated to protect your data.
• Legal Authorities: In case of court order or legal obligation.

We may use technology services with servers outside Brazil. In such cases, we ensure that the transfer occurs under adequate protection mechanisms, such as standard contractual clauses, ensuring that your data has the same level of protection it would have here.

Your data is kept while your account is active. After closure, data will be deleted or anonymized, except for data we need to keep to comply with legal or tax obligations.

You are in control. At any time, you have the right to:

• Access and Confirmation: Know what data we have about you.
• Rectification: Correct incorrect data.
• Deletion (Erasure): Request removal of your data.
• Opposition: Object to specific data processing.
• Portability: Request your data in a format that allows you to transfer it.
• Consent Revocation: Withdraw your consent for marketing at any time, simply, such as through the "unsubscribe" link in our emails.

For any request or question, send an email to our official privacy channel: privacidade@operebem.com.br.

The world changes, and our policy may change with it. We will notify you of any significant changes by email or by a prominent notice on the Platform.