Privacy Policy

This Privacy Policy describes how XAATEX collects, uses, stores, protects and, when necessary, shares its users' personal data while they use its website, application and related services.

XAATEX acknowledges the importance of privacy and personal data protection, and is committed to processing such information responsibly, transparently and in compliance with applicable law.

This Policy aims to inform, in a clear and accessible manner, what information may be collected, why it is used, how it is protected and what rights users have in relation to their personal data.

By using XAATEX, creating an account or accessing any of its services, the user declares that they are aware of this Privacy Policy, without prejudice to the rights guaranteed by applicable law.

This Policy must be interpreted together with the XAATEX Terms of Use, which establish the general conditions for use of the platform.

Document

Privacy Policy

Version

1.0

Last updated

07/17/2026

Original language

Portuguese (Brazil)

Applicable to

the XAATEX platform.

This Privacy Policy applies to the processing of personal data carried out by XAATEX in relation to its website, application, services, features and other resources made available to users.

This Policy covers all interactions with XAATEX, including but not limited to:

• access to the official website;
• creation and management of user accounts;
• use of the application and its features;
• purchase and management of licenses;
• communication with the support team;
• other services made available by the platform.

This Policy does not apply to third-party websites, services, applications or platforms that may be accessed through links or integrations made available by XAATEX.

Each third-party service has its own privacy policies, for which it is solely responsible.

By using any service covered by this Policy, the user acknowledges that the processing of their personal data will take place under the provisions set forth herein and in accordance with applicable law.

XAATEX collects only the data strictly necessary to provide its services, manage user accounts, validate licenses and comply with applicable legal obligations.

The data collected may vary depending on how the platform is used.

3.1 Data provided by the user

During account creation and use, the user may provide the following information:

• name, when provided;
• e-mail address;
• authentication credentials;
• information voluntarily provided during support requests.

3.2 Automatically collected data

During the use of the website and application, certain technical information may be collected automatically for the purposes of operation, security and service improvement, including, when applicable:

• IP address;
• browser type and version;
• operating system;
• technical device identifiers;
• date and time of access;
• technical records related to authentication and platform security.

This information is used exclusively for operational, security, diagnostic and fraud-prevention purposes.

3.3 License-related data

To manage access to the software, XAATEX may store information related to the user's account, including:

• the account's e-mail address;
• license status (active, expired, cancelled or other applicable state).

This information is used exclusively for user authentication and validation of the software license.

3.4 Payment-related data

Financial transactions are processed by specialized payment providers.

XAATEX does not store complete credit card, debit card or other financial information used during the purchase process.

The information required to process the payment is handled directly by the responsible provider, in accordance with its own Privacy Policy and Terms of Service.

3.5 Locally stored data

The dashboards, layouts, settings and projects created by the user are stored locally in the browser used, and are not sent to or stored on XAATEX servers, except when a future feature expressly indicates otherwise.

3.6 Data not collected

XAATEX does not deliberately collect personal data beyond what is necessary for account authentication, license management, platform operation and compliance with legal obligations.

Whenever possible, data processing will be limited to the minimum necessary to provide the services.

Personal data collected by XAATEX is used exclusively to provide, operate, maintain and improve the services made available to users, always in compliance with this Privacy Policy and applicable law.

In general terms, data may be used for the following purposes:

• create, authenticate and manage user accounts;
• validate and administer software licenses;
• grant access to the resources available on the platform;
• provide technical support and respond to user requests;
• send communications related to the account, license or operation of the service, when necessary;
• ensure platform security and prevent fraud, unauthorized access and other unlawful activities;
• comply with legal, regulatory obligations or determinations from competent authorities;
• improve the stability, security and performance of the platform.

XAATEX uses personal data only for the purposes described in this Privacy Policy and does not carry out processing incompatible with those purposes.

Personal data will not be used for selling information, building commercial profiles or sending personalized advertising without an adequate legal basis or, when required by applicable law, the user's consent.

XAATEX treats users' personal data confidentially and does not sell, rent or trade personal information with third parties.

Data may be shared only when necessary to provide the services, comply with legal obligations or protect the rights of XAATEX and its users.

Data may be shared in the following situations:

5.1 Service providers

XAATEX may share strictly necessary data with service providers that support the operation of the platform, including, when applicable:

• authentication and cloud infrastructure services;
• providers responsible for payment processing and license management;
• hosting, security and platform monitoring services.

These providers process data only to the extent necessary to perform the contracted services and in accordance with their own privacy policies.

5.2 Compliance with legal obligations

Data may be shared when necessary to comply with legal or regulatory obligations, court orders or determinations issued by competent authorities.

5.3 Protection of rights

Sharing may also occur when necessary to:

• protect the rights of XAATEX;
• prevent fraud;
• investigate unlawful activities;
• ensure the security of the platform and its users.

5.4 No trading of data

XAATEX does not trade personal data and does not share user information for third-party marketing or advertising purposes.

Whenever possible, any sharing will be limited to the minimum information necessary to fulfil the specific purpose.

XAATEX may use cookies and similar technologies to ensure the proper functioning of the website, improve the user experience and enhance platform security.

Cookies are small files stored on the user's device that allow certain information to be recognized during browsing.

The cookies used by XAATEX may include:

6.1 Essential cookies

They are necessary for the platform to function and enable features such as:

• user authentication;
• maintenance of the access session;
• browsing security;
• proper operation of the website's features.

These cookies are indispensable for the use of the services.

6.2 Preference cookies

When applicable, they may be used to store user preferences, such as:

• language;
• interface settings;
• usage preferences;
• other personalization options.

These cookies aim to provide a more consistent experience across visits.

6.3 Analytics technologies

XAATEX currently does not use cookies or analytics technologies for statistical or marketing purposes.

Should such tools be implemented in the future, this Privacy Policy will be updated to inform users which technologies will be used, what data may be collected and for what purposes.

Whenever possible, such information will be used in an aggregated or anonymized form, in compliance with applicable law.

6.4 Cookie management

Most browsers allow the user to view, block or delete cookies through their settings.

However, disabling essential cookies may compromise the operation of certain XAATEX features.

XAATEX adopts technical and organizational measures aimed at protecting the personal data under its responsibility against unauthorized access, loss, alteration, disclosure or accidental destruction.

The security measures adopted seek to preserve the confidentiality, integrity and availability of the information handled by the platform, taking into account the nature of the data and the risks involved in its processing.

Among the protection measures adopted, when applicable, may be included:

• use of secure connections for data transmission;
• authentication and access control mechanisms;
• secure storage of the information necessary for the platform to operate;
• monitoring and updating of security resources;
• restricting access to data only when necessary to provide the services.

Personal data will be stored for the time necessary to fulfil the purposes described in this Privacy Policy, meet legal, regulatory or contractual obligations and allow the regular exercise of rights.

Although XAATEX adopts measures consistent with good information-security practices, no system can guarantee absolute protection against all risks existing on the Internet. For this reason, the user is also responsible for adopting security measures in their own environment, such as keeping their access credentials protected and using trusted devices.

The user may exercise the rights provided for in applicable personal data protection legislation, subject to legal and regulatory limitations.

When applicable, the user may request:

• confirmation that their personal data is being processed;
• access to the personal data processed by XAATEX;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data processed in violation of the law;
• data portability, when applicable;
• deletion of personal data, subject to legal retention requirements;
• information about the sharing of data with third parties, when applicable;
• revocation of consent, in cases where processing is based on that legal basis.

The exercise of these rights may be requested through the official contact channels made available by XAATEX.

Before addressing certain requests, XAATEX may adopt procedures to verify the identity of the requester, in order to protect personal data against unauthorized access.

Some requests may be denied or partially fulfilled where there is a legal, regulatory or contractual obligation requiring the retention of data, or where applicable law so permits.

XAATEX retains personal data only for the period necessary to fulfil the purposes described in this Privacy Policy, provide the offered services, meet legal, regulatory or contractual obligations and safeguard the regular exercise of rights.

In general:

• account data may be retained while the user's account remains active;
• information related to the license may be stored while it is necessary to validate and administer legitimate use of the software;
• certain records may be retained for additional periods when required by applicable law or to comply with legal obligations.

When personal data is no longer necessary for the purposes that justified its collection, and there is no legal obligation or other basis authorizing its retention, it will be deleted or anonymized whenever technically and legally possible.

Data stored locally in the user's browser, such as dashboards, layouts, settings and projects, remains under the control of the user and may be removed directly by them, in accordance with the resources available in their browser or on the platform itself.

Due to the use of technology and infrastructure services provided by specialized companies, some personal data may be processed or stored on servers located outside the user's country of residence.

Whenever there is an international transfer of personal data, XAATEX will seek to adopt reasonable measures to ensure that processing takes place in compliance with applicable data protection law, observing, where appropriate, adequate mechanisms for the security and protection of the information.

XAATEX seeks to select providers that adopt recognized security and privacy standards, in order to ensure an adequate level of protection for the personal data processed.

XAATEX may update this Privacy Policy periodically to reflect changes in its services, changes in applicable law, improvements to its processes or new platform features.

Whenever this Policy is modified, the updated version will be made available through XAATEX's official channels, containing the corresponding last-updated date.

When required by applicable law or when the changes significantly affect the processing of personal data, XAATEX may adopt additional measures to inform users, using the communication means available.

We recommend that users review this Privacy Policy periodically to stay informed about how their personal data is handled.

Continued use of the services after the publication of the updated version of this Policy may characterize awareness of the changes made, except in situations where the law requires specific user consent.

For questions, requests, complaints or to exercise the rights provided for in applicable personal data protection legislation, the user may contact XAATEX through the following official channel:

E-mail: supportxaatex@gmail.com

Whenever possible, the user should provide sufficient information for their request to be properly identified and analyzed.

XAATEX will make efforts to respond to requests within a reasonable time, taking into account the complexity of the demand and the provisions of applicable law.