Marketplace Privacy Policy

Marketplace Privacy Policy

Brawe.io — Marketplace

Last updated: July 1, 2025

Brawe Digital Hub ('Brawe.io') respects your privacy and is committed to protecting your personal data, in compliance with Brazilian General Data Protection Law (LGPD – Law 13.709/2018) and other applicable regulations.

1. Data Controller

Brawe Digital Hub LTDA · CNPJ: 41.988.422/0001-02 · Av. Cândido de Abreu, 776, Suite 803, 8th Floor, Cond. World Business Ed., Centro Cívico, Curitiba/PR, Brazil, ZIP 80530-000. DPO: privacidade@brawe.io

2. Data We Collect

When using the Marketplace, we may collect: (a) identification data: name, email, CPF/CNPJ; (b) contact data: phone, delivery address; (c) payment data: processed exclusively by payment gateways (we never store card data); (d) browsing data: cookies, IP address, device used; (e) order data: purchase history and store interactions.

3. Purpose of Processing

Your data is used to: process orders and payments; deliver products and communicate shipment status; issue invoices and fulfil tax obligations; prevent fraud; improve the platform; send transactional communications (order confirmation, status updates).

4. Data Sharing

We share your data only when necessary with: Sellers (for order processing and shipping); payment gateways (Stripe, PagSeguro, etc.); shipping carriers and postal services; tax authorities (NF-e). We do not sell, rent, or transfer your data to third parties for marketing purposes.

5. Cookies

We use essential cookies (for website functionality), analytical cookies (to understand platform usage), and preference cookies (language, currency). You can disable non-essential cookies in your browser settings.

6. Data Retention

Your data is retained for as long as necessary to fulfil the described purposes and legal obligations (minimum 5 years for tax data, as required by law). After that period, data is anonymized or deleted.

7. Your Rights (LGPD)

Under LGPD, you have the right to: confirm the existence of processing; access your data; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary data; revoke consent; and data portability. To exercise your rights, email privacidade@brawe.io.

8. Security

We adopt technical and organizational measures to protect your data against unauthorized access, loss or destruction: TLS encryption in transit, password hashing, role-based access control, and continuous monitoring.

9. International Transfers

Some of our infrastructure providers (hosting, CDN) are located outside Brazil. We ensure these transfers comply with LGPD, using standard contractual clauses.

10. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or platform notification. The last update date will always be visible at the top of this page.

Contact — DPO

For questions, requests, or to exercise your LGPD rights, contact our Data Protection Officer:

privacidade@brawe.io

Brawe Digital Hub · CNPJ: 41.988.422/0001-02 · Curitiba/PR, Brazil. This policy is governed by Brazilian law (LGPD – Law 13.709/2018).