Information We Collect

We collect the following types of information:

• Registration and purchase data. When you register on CNPJ.ws, you provide us with information such as email address, password, name, CPF/CNPJ, date of birth/foundation, phone number, credit card details, address, IP address, and device.

• Connection through third-party services. When you connect or log in to CNPJ.ws with third-party services (e.g., Facebook, Google), we may collect the data you provide through these services, such as name, email address, profile description, and profile picture. In this case, we will respect your privacy settings and request authorization to collect such data.

Information Generated When You Use Our Services

We collect the following generated information:

• Access logs. CNPJ.ws automatically collects application access logs, which include the IP address, with date and time, used to access CNPJ.ws. These data are mandatory collection, according to Law 12.965/2014, but will only be provided to third parties with your express authorization or through a judicial request.

• Usage data. We collect information about your interactions on CNPJ.ws, such as your navigation, the pages or other content you access or create, your searches, participation in surveys or forums, and other actions.

• Payment data. When you make payments on CNPJ.ws, payment data such as date and time, amount, and other transaction details may be stored, which may also be used for fraud prevention purposes. This way, we can provide you with a safe and suitable environment for your transactions.

• Cookies and similar technologies. We use cookies, which are text files generated and stored on your browser or device by websites, applications, and online advertisements. Cookies may be used for the following purposes: authenticate users, remember user preferences and settings, understand user behaviors and interests.

• Other generated information. When using certain features, CNPJ.ws may collect information generated by you such as: CNPJ or CPF related to the request made in the API, date of the request made in the API, IP of the request made by the API, storage of searched CNPJs, storage of favorite CNPJs.

Information from Other Sources

This may include:

• Data collected from other platforms. CNPJ.ws may interact with other platforms and services, such as payment methods. Thus, from the user registration, this information will be passed on to the company, the platform responsible for the payment method, which will provide us with information about you, as well as the payment status of the customer, which will be passed through the payment gateway to CNPJ.ws, which will then enable the service features related to the purchase for you. In the pursuit of the best user experience on our platform, seeking transparency and security in our operations.

• In most cases, for the purpose of conducting market research and impact reports on data protection or any reports or research that use this data, they will preferably and whenever possible be used in an anonymized manner, and if not possible, only the necessary information will be used to achieve the expected purpose or to comply with what is legally established.

How We Use Your Information

All data and information about you are treated as confidential, and we will only use them for the purposes described here and authorized by you, mainly so that you can use CNPJ.ws fully, always aiming to improve your user experience.

Authorized Uses

Thus, we may use your data to:

• Allow you to access and use all the features of CNPJ.ws;

• Send you messages regarding support or service, such as alerts, notifications, and updates;

• Communicate with you about products, services, promotions, news, updates, events, and other subjects you may be interested in;

• Analyze user traffic on our applications;

• Conduct targeted advertising according to your tastes, interests, and other collected information;

• Personalize the service to better suit your tastes and interests;

• Create new services, products, and features;

• Detect and prevent fraud, spam, and security incidents;

• Verify or authenticate the information provided by you, including comparing it with data collected from other sources;

• Better understand user behavior and build behavioral profiles;

• System operation, knowing if the user has available balance for system use, making purchases, issuing invoices related to payments;

• For any purpose you authorize at the time of data collection;

• Comply with legal obligations.

Occasionally, we may use data for purposes not provided for in this privacy policy, but these will be within your legitimate expectations.

Data Deletion

All collected data will be deleted from our servers when you request it, and upon requesting deletion, the user will lose all consultation history related to the deleted data. This procedure will be free and facilitated.

Some data may be deleted when they are no longer necessary or relevant to offer you our services, unless there is any other reason for their maintenance, such as a legal obligation to retain data or the need to preserve them to protect CNPJ.ws’s rights, which will preferably be anonymized.

In cases where you request the deletion of your data, it will be done promptly, as far as possible.

Due to the nature of your account, from the moment of the total deletion request of your data, the system will be unable to restore all pertinent information of your account, including your credits. Therefore, if it is not possible to restore the account data, the remaining credits cannot be recovered.

Monitoring

CNPJ.ws reserves the right to monitor the entire platform, mainly to ensure that the rules described in our Terms of Use are being observed, or if there is no violation or abuse of applicable laws.

User Deletion

CNPJ.ws reserves the right to delete a specific user, regardless of the type, if this Policy or the Terms of Use are not respected. As we value a good relationship with users, we recognize that they have the right to understand the reasons and even contest them, which can be done through the following email: contato@cnpj.ws.

Information Sharing

CNPJ.ws may share the information it collects with business partners, advertisers, sponsors, and service providers. The sharing of information will occur anonymously whenever possible, aiming to preserve your privacy. Through this document, you expressly authorize such sharing.

CNPJ.ws allows other companies and ad networks to advertise on our platform through different technologies. Therefore, you may eventually receive ads, content, and links displayed directly in your application, personalized according to your interests and behaviors on our platform or other services you interact with. For this purpose, data may be shared between CNPJ.ws and these other companies, mainly unique identifiers, IP addresses, cookies, and JavaScript scripts, which can be used to measure the effectiveness of online advertising or user behavior through an open access platform and public key.

Through this document, you expressly authorize such sharing. However, CNPJ.ws is not responsible for the acts, ads, and content generated by our business partners and ad networks, and this Policy does not apply to them, as CNPJ.ws does not control them.

We suggest accessing and reading the privacy policies of the companies you may interact with.

All data, information, and content about you may be considered assets in negotiations in which CNPJ.ws is involved. Therefore, we reserve the right to, for example, include your data among the company’s assets if it is sold, acquired, or merged with another. Through this Policy, you agree and are aware of this possibility.

CNPJ.ws reserves the right to provide your data and information about you, including your interactions, if required by law, a necessary act for the company to comply with national laws, or if you expressly authorize it.

Data Subject Rights

You can always choose not to disclose your data to us, but keep in mind that some of this data may be necessary to use the features of our applications. Regardless, you always have rights related to privacy and the protection of your personal data.

Thus, below we summarize all the rights you have under Brazilian sectoral laws related to data protection and the General Data Protection Law (“LGPD”), which are:

Right of access. This right allows you to request and receive a copy of the personal data we hold about you.

Right of rectification. This right allows you to request the correction and/or rectification of your personal data at any time if you identify that some of them are incorrect. This service is facilitated directly by the user account, with the possibility for the user to make these corrections and updates to their data.

Right of deletion. This right allows you to request the deletion of the personal data we hold about you. All collected data will be deleted from our servers when you request it or when they are no longer necessary or relevant to offer you our services, unless there is any other reason for their maintenance, such as a legal obligation to retain data or the need to preserve them to protect CNPJ.ws’s rights. To change your personal information or delete it from our database, just send an email to contato@cnpj.ws.

Right to object to processing. You also have the right to object to where and in what context we are processing your personal data for different purposes. In certain situations, we may demonstrate that we have legitimate reasons to process your data, which override your rights, for example, if they are essential for providing our applications.

Right to request anonymization, blocking, or deletion. This right allows you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the accuracy of the data; (b) when you need the data to be maintained even if we no longer need them, as necessary, to establish, exercise, or defend legal claims; or (c) if you have objected to the use of your data, but in this case, we need to verify if we have legitimate reasons to use them.

Right to portability. We will provide you, or third parties you have chosen, your personal data in a structured and interoperable format.

Right to withdraw your consent. You have the right to withdraw your consent regarding the terms of this Privacy Policy. However, this will not affect the legality of any processing carried out previously. If you withdraw your consent, we may not be able to provide certain services.

Right to review automated decisions. You also have the right to request the review of decisions made solely based on automated processing of your personal data that affect your interests, including decisions aimed at defining personal, professional, consumer, and credit profiles and/or aspects of your personality.

It may be necessary to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise your other rights). This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it. We may also contact you to obtain more information regarding your request to expedite our response.

We try to respond to all legitimate requests within 5 business days. Occasionally, it may take more than 5 days if your request is particularly complex or if you have made several requests. In this case, we will notify you and keep you updated on the progress of your request.

If you have any questions about these issues and how you can exercise these rights, feel free to contact us at contato@cnpj.ws.

Information Security

All your data is confidential and only authorized persons will have access to it. Any use of this data will be in accordance with this Policy. CNPJ.ws will make all reasonable market efforts to ensure the security of our systems and your data. Our servers are located in different locations to ensure stability and security and can only be accessed through previously authorized communication channels.

All your information will be encrypted whenever possible, unless it makes its use by the platform unfeasible. At any time, you can request a copy of your data stored in our systems. We will keep the data and information only as long as they are necessary or relevant for the purposes described in this Policy, or in case of pre-determined periods by law, or as long as they are necessary to maintain CNPJ.ws’s legitimate interests.

CNPJ.ws considers your privacy extremely important and will do everything possible to protect it. However, we cannot guarantee that all data and information about you on our platform will be free from unauthorized access, especially if there is improper sharing of the credentials needed to access our application. Therefore, you are solely responsible for keeping your access password in a safe place and it is prohibited to share it with third parties.

You agree to cooperate with us by notifying CNPJ.ws immediately, through a secure means, about any unauthorized use of your account, as well as unauthorized access by third parties to it. Just as CNPJ.ws has the duty to communicate as soon as possible, only incidents of a relevant nature, which may cause risks and damages to the user, contractor in order to resolve and reduce the possible damages generated from this information leak.

Privacy Policy Updates

CNPJ.ws reserves the right to change this Policy as many times as necessary, aiming to provide you with more security, convenience, and to improve your experience. That is why it is very important to access our Policy periodically. To facilitate, we indicate the date of the last update at the beginning of the document. If relevant changes are made that require new authorizations from you, we will publish a new privacy policy, subject again to your consent.

Jurisdiction and Applicable Law

According to art. 52, paragraph 7 of law 13.709/18, there will be the possibility, first, of an attempt at consensual resolution of conflicts related to this contract and, if not resolved, the case will be referred to the judicial sphere and to the administrative authority responsible for overseeing the LGPD.

This document is governed and must be interpreted in accordance with the laws of the Federative Republic of Brazil. The Court of the District of Sorocaba, São Paulo, is elected as the competent one to resolve any issues arising from this document, with express waiver of any other, however privileged it may be.