Privacy should be clear, not complicated.

1. Data Controller

For purposes of applicable data protection laws, including Brazil's General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD), DIGITAL BOOST LTDA acts, where applicable, as the controller responsible for decisions concerning the processing of personal information described in this Policy.

2. Scope of This Privacy Policy

This Policy applies to personal information collected or processed when you access or interact with our websites, landing pages, online platforms, digital products, SaaS experiences, information products, forms, customer support channels and other digital services operated by Digital Boost.

Our websites or products may contain links to websites, applications or services operated by third parties. Those third parties may apply their own privacy notices and practices. We recommend reviewing their applicable privacy policies before providing information directly to them.

3. Information We Collect

The information we collect depends on how you interact with Digital Boost and the features you use. We seek to collect information that is reasonably necessary for defined purposes.

Information you provide directly

We may collect information when you voluntarily submit it, such as when you complete a form, create an account, purchase a product, contact support, request information or communicate with us.

Information collected automatically

When you visit or use our digital properties, certain technical and usage information may be collected automatically by servers, analytics technologies, cookies or similar tools. This information helps us understand how our services function, maintain security and improve user experience.

4. How We Use Personal Information

Depending on the context and applicable legal basis, Digital Boost may process personal information for purposes including:

• Providing, operating, maintaining and improving our websites and digital products.
• Creating and managing user accounts and subscriptions.
• Processing purchases, subscriptions, refunds and related transactions.
• Providing customer support and responding to requests or communications.
• Sending service-related notifications, administrative messages and important updates.
• Personalizing content, features or experiences where appropriate and permitted.
• Understanding usage patterns and measuring the performance of our digital products.
• Detecting, preventing and investigating fraud, abuse, security incidents and unauthorized activity.
• Complying with applicable legal, regulatory and contractual obligations.
• Protecting our rights, users, systems, property and legitimate business interests.
• Conducting internal analysis, testing, troubleshooting and product development.
• Sending marketing communications where permitted by law and, where required, based on the user's consent.

We do not intend to use personal information for purposes incompatible with the purposes described in this Policy without providing appropriate information or obtaining authorization where required.

5. Legal Bases for Processing

Where Brazil's LGPD applies, the legal basis for processing personal information will depend on the specific circumstances. Depending on the activity, processing may be based on legal grounds such as:

• Performance of a contract or steps related to entering into a contract.
• Compliance with legal or regulatory obligations.
• Exercise of rights in judicial, administrative or arbitration proceedings.
• Protection of credit, where applicable.
• Legitimate interests, where permitted and appropriate.
• Protection of life or physical safety, where applicable.
• Consent, when required or when we choose to rely on consent.

When processing is based on consent, you may withdraw that consent as permitted by applicable law. Withdrawal does not necessarily affect processing already carried out lawfully before the withdrawal.

6. Cookies and Similar Technologies

Our websites and digital products may use cookies, pixels, local storage, software development kits and similar technologies to provide functionality, remember preferences, understand website usage, improve performance, support security and, where permitted, measure marketing effectiveness.

Essential technologies

Some technologies are necessary for basic website functionality, authentication, security, session management or other essential operations. Disabling these technologies may affect how certain parts of a service function.

Analytics and performance

We may use analytics technologies to understand traffic, interactions, performance and usage patterns. Such information may be aggregated or otherwise processed to help us improve our products and digital experiences.

Marketing and measurement

Where applicable and permitted, third-party technologies may be used to measure advertising performance, understand campaign effectiveness or present information that is more relevant to users. The availability and purpose of these technologies may vary by website, product and user preferences.

Depending on the website and technologies in use, you may be provided with a cookie management mechanism allowing you to review or change certain preferences. You can also manage cookies through your browser settings, although disabling certain cookies may affect functionality.

7. When We May Share Personal Information

Digital Boost does not sell personal information as a standalone commodity. We may share or make personal information available when reasonably necessary to operate our business, provide services, comply with legal obligations or protect users and our systems.

Depending on the circumstances, recipients may include:

• Technology, hosting and infrastructure providers.
• Payment processors and financial service providers involved in transactions.
• Analytics, communication, customer support and service providers.
• Marketing or advertising technology providers where legally permitted.
• Professional advisors such as accountants, lawyers or auditors when reasonably necessary.
• Government authorities, courts or regulatory bodies when required by law or legal process.
• Other parties where necessary to protect rights, safety, security or the integrity of our services.

Service providers that process information on our behalf may be required to handle such information only for authorized purposes and according to applicable contractual or legal requirements.

8. International Data Transfers

Some service providers and technology infrastructure used by Digital Boost may be located in countries other than Brazil. As a result, personal information may, where permitted by applicable law, be processed or stored outside the country in which it was originally collected.

When international transfers are applicable, we seek to use mechanisms and safeguards consistent with applicable data protection requirements and the circumstances of the transfer.

9. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business records, resolve disputes, enforce agreements, prevent fraud, satisfy legal obligations and protect our legitimate interests.

Retention periods vary depending on the type of information, the reason it was collected, the nature of the relationship and applicable legal or regulatory requirements.

When personal information is no longer necessary or when applicable retention periods expire, we may delete, anonymize or otherwise dispose of it in accordance with our internal procedures and applicable law.

10. Information Security

We use reasonable technical, administrative and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure and other inappropriate processing.

Depending on the nature of the information and the risks involved, safeguards may include access controls, authentication mechanisms, secure infrastructure, monitoring, backups, limited access to personal information and other security practices.

Users also have an important role in protecting their information. Where accounts are provided, users should keep passwords and access credentials confidential and notify us promptly of suspected unauthorized access.

11. Your Privacy Rights

Depending on applicable law and the circumstances of the processing, individuals may have rights relating to their personal information. Under the LGPD, these rights may include:

• Confirmation of whether personal data is being processed.
• Access to personal data.
• Correction of incomplete, inaccurate or outdated information.
• Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data, where applicable.
• Data portability, subject to applicable rules and limitations.
• Deletion of personal data processed on the basis of consent, subject to legal exceptions.
• Information about public or private entities with which personal data has been shared, where applicable.
• Information about the possibility of refusing consent and the consequences of doing so, when consent is requested.
• Revocation of consent, where processing is based on consent.
• Review of certain decisions made solely through automated processing, when the applicable legal requirements are met.
• Opposition to certain types of processing in circumstances provided by applicable law.

The exercise of rights may be subject to legal conditions, limitations, verification procedures and exceptions. For example, information may need to be retained when required by law or necessary to establish, exercise or defend legal claims.

How to exercise your rights

To make a privacy request, correction request or other data protection inquiry, please contact Digital Boost using the contact information provided at the end of this Policy. We may request reasonable information necessary to verify the identity of the requester and protect against unauthorized disclosure.

12. Children's Privacy

Our services are not intentionally designed to collect personal information from children in violation of applicable law.

Where applicable, we may take reasonable steps to address situations in which we become aware that personal information belonging to a child has been collected or processed in circumstances where the necessary authorization or legal basis was not obtained.

13. Third-Party Services and Links

Our digital properties may integrate with or link to third-party services, including payment providers, analytics providers, communication platforms, advertising platforms, social networks or external websites.

These third parties may collect and process information according to their own policies and terms. Digital Boost is not responsible for the independent privacy practices of third-party services that it does not control.

Before submitting personal information to another service, we recommend reviewing that service's privacy policy and applicable terms.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices, legal requirements or privacy practices.

When we make changes, we will update the "Last updated" date displayed at the beginning of this Policy. Where required by law, we may provide additional notice or request consent for material changes.

We encourage you to review this page periodically so that you remain informed about how personal information is handled.

15. Contact Digital Boost

If you have questions about this Privacy Policy, want to understand how your personal information is processed or wish to exercise an applicable privacy right, you can contact us through our official contact page.