Privacy Policy

The processing of personal data described in this policy is carried out by Capitalez Investimentos Alternativos S.A., registered with the National Register of Legal Entities under number 48.291.376/0001-64, with headquarters at Avenida Brigadeiro Faria Lima, 3477, Itaim Bibi, São Paulo - SP, 04538-133, which acts as controller under article 5, item VI, of Law No. 13.709/2018 (LGPD).

Data protection officer

Data protection is overseen by Capitalez privacy team, who acts as the personal data protection officer. Requests addressed to the officer can be sent to privacidade@capitalez.com.br.

While the name of the data protection officer has not been filled in, the valid channel remains contato@capitalez.com.br. Requests to the data protection officer can be sent to the privacy email address, with the subject line stated. The rules for browsing this site are set out in the Terms of Use.

We collect only what is necessary to operate the platform and to comply with applicable obligations. The categories below describe what we may receive from you, from partner companies, or automatically during browsing.

• Data you provide. Full name, email address, phone number, city of residence, identification data required by legal obligations and, at the time of investing, qualification, bank account and proof of address details.
• Browsing data. IP address, browser and device type, operating system, pages visited, time of access and source of the visit. This data helps us keep the site secure and understand how the pages are used.
• Third-party data. Information provided by issuing companies in the context of an offering, as well as data shared by identification or analytics partners, always within the stated purpose.

Each processing activity has a specific purpose and a defined legal basis. We do not use your data for any purpose other than the one communicated without a new legal basis and, where applicable, without new consent.

1. Pre-contractual procedures. Legal basis: pre-contractual procedures at your request. This covers registration, profile assessment and the simulation of amounts.
2. Legal and regulatory obligations. Legal basis: compliance with a legal obligation. This includes identity verification, accounting records, monitoring of offerings and the information required by the competent authorities.
3. Regular exercise of rights. Legal basis: the regular exercise of rights in judicial, administrative or arbitration proceedings.
4. Communications about the platform. Legal basis: legitimate interest, limited to sending notices about open offerings, documents and updates that affect account holders. You may request cancellation at any time.

We do not sell, rent out or assign personal data. Data is shared only with processors contracted to provide services needed by the platform, always limited to what is necessary and under a contractual confidentiality obligation.

For our forms, Cloudflare acts as the Turnstile processor, verifying submission security and potentially processing technical access data. After this verification, the browser sends form data directly to Web3Forms, which processes and forwards contact messages and notification requests; the Capitalez server does not forward this data to Web3Forms. These services may involve processing outside Brazil under their respective policies and safeguards.

Data may also be shared with public authorities where there is a legal obligation, a court order or a request from a competent authority, and with issuing companies only in the context of the offering in which you invest.

We keep data for as long as necessary for the purpose that led to its collection. As a rule, account data remains while the account is active and, after closure, for the period required by the legal and regulatory obligations of investor protection.

Once the applicable periods and legal obligations have ended, data is securely deleted or irreversibly anonymized, unless there is a legitimate need to retain it in order to settle a dispute or defend rights.

We adopt technical and administrative measures consistent with the state of the art to protect data against unauthorized access, loss, alteration or improper disclosure: role-based access control, encryption in transit and at rest, logging of operations and periodic review of suppliers.

No system is entirely immune to incidents. If a security incident with material risk occurs, we will notify the affected data subjects and the competent authorities and take measures to contain its impact.

The LGPD guarantees the data subject the exercise of the rights below, upon a request confirmed through a procedure that verifies their identity.

• Confirmation and access. Confirm that processing exists and receive, in a readable format, the data we hold about you.
• Rectification. Ask for incomplete, inaccurate or outdated data to be corrected, so that the information reflects your current situation.
• Anonymization, blocking or deletion. Ask for the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law.
• Portability. Receive the data in a structured format, for use solely with another service provider, subject to the technical requirements set by the regulations.
• Deletion of data processed with consent. Ask for the deletion of data processed on the basis of consent, when there is no other legal basis for keeping it.
• Information about sharing. Know who we share your data with and the purposes of each sharing.
• Objection and withdrawal of consent. Object to processing carried out on the basis of legitimate interest and withdraw consent when processing relies on that basis.

We use cookies and similar technologies to ensure the site works, to remember preferences and to measure how the pages are used. Non-essential cookies are only activated after your consent.

The full list of cookie categories, their duration and how to manage your preferences is described in the Cookie Policy.

This policy may be updated to reflect changes to the product, to the law or to the way we handle data. The version in force is always the one published on this page.

Changes that reduce your rights will be communicated prominently and with reasonable notice. The previous version remains available on request to the data protection officer.

Requests, questions and complaints related to the processing of data must be sent to contato@capitalez.com.br, stating the subject and describing the request. Requests relating to the data protection officer follow the same channel.

A data subject may also file a petition before the National Data Protection Authority if they believe their rights have not been respected.