Privacy & Cookies — a clear read on data and processing

Personal data is information that identifies or can identify a natural person.

The data subject is the natural person to whom the personal data relates.

Data processing is any operation performed with personal data, including collection, storage, use or sharing.

QNAX may collect registration data, access and usage data, plus information necessary for payment processing by external providers.

• Full name or legal entity name, national ID (CPF or CNPJ), address, phone, email and country of residence.
• IP address used, date and time of access, login records in the client area and operational infrastructure records.
• Information necessary for payment processing, without direct storage of sensitive card data by QNAX.

Personal data may be used to deliver contracted services, for authentication, payment processing, fraud prevention, customer support, compliance with legal obligations and cooperation with competent authorities.

Processing may occur based on contract performance, compliance with a legal obligation, the company's legitimate interest, and the data subject's consent when required.

QNAX may share data with service providers, such as payment processors and infrastructure providers, or with authorities when there is a legal obligation, court order or official investigation.

Registration data may be provided in accordance with applicable law.

QNAX adopts technical and organizational measures to protect personal data against unauthorized access, leaks, improper alteration and accidental destruction.

Data is stored in secure, controlled environments.

Personal data is stored only for the period necessary to fulfill the purposes of this policy and any applicable legal or regulatory obligations.

Technical records may be stored as required by law.

Under Brazil's General Data Protection Law (LGPD), the data subject may request confirmation of processing, access, correction of data, anonymization or deletion, portability, information about who the data is shared with, and withdrawal of consent when applicable.

Requests can be made through the company's official channels or directly with the Data Protection Officer (DPO).

QNAX's infrastructure may operate in data centers located in Brazil or abroad. By using the services, the user agrees that their data may be processed or stored on international infrastructure.

When an international transfer occurs, QNAX follows the legal bases set out in Article 33 of the LGPD, such as specific contractual clauses with infrastructure providers or the data subject's consent.

The QNAX website may use cookies for session authentication, improving the user experience and analyzing platform usage.

Users can configure their browser to block cookies, although some features may be affected.

This Privacy Policy may be updated periodically. The current version will be published on QNAX's official channels.

For questions or requests related to data protection, use QNAX's support channels.

• QNAX Serviços e Infraestrutura de Data Center LTDA
• Email: [email protected]
• Data Protection Officer (DPO): [email protected]