Auati Privacy Policy

This Privacy Policy explains how AUATI ATIVIDADES DE INTERNET LTDA, registered under company tax ID (CNPJ) no. 40.941.336/0001-73, processes the personal data of users who access, sign up for or use the auati.com.br platform.

Auati is a digital service bartering platform, created to connect professionals, freelancers, micro-entrepreneurs, small businesses and users interested in trading services, showcasing their work and generating new opportunities for collaboration.

By creating an Auati account, you declare that you have read and understood this Privacy Policy.

To make the platform work, we may collect the following data:

• Registration data: name, email, tax ID (CPF), phone number, password, city, state and other information required to create and access your account.
• Profile and listing data: service category, description of the work offered, images, social media links, portfolio, approximate location and any other information the user enters voluntarily.
• Platform usage data: listings viewed, likes, interests, matches, messages sent through the chat, notifications, ratings, interaction history and usage records.
• Payment data: information required to purchase Super Listings, paid plans, subscriptions or other Auati products. Payment processing may be carried out by third-party payment platforms.
• Technical data: IP address, device type, browser, date and time of access, cookies and browsing information.
• Social data from the Social Form: Auati may responsibly request social and demographic information in order to better understand the profile of the community it serves and to measure the social impact generated by the platform. This information may include data related to socio-economic, professional or territorial profile, or to the construction of social impact indicators.

The social data provided in the Social Form will be used exclusively for the purposes of analysis, measurement and preparation of social impact reports. Auati will not disclose sensitive personal information in an individualised way or in any way that directly identifies the user.

We use your personal data to:

• Create and manage your Auati account;
• Allow listings to be published, edited, moderated and viewed;
• Display your profile and your listings to other users of the platform;
• Facilitate connections, likes, matches and barter negotiations;
• Enable the internal chat and notifications to work;
• Send important communications about your account, listings, security and platform operation;
• Provide user support;
• Analyse platform usage and improve the browsing experience;
• Personalise suggestions of listings, services and opportunities;
• Prevent fraud and misuse of the platform;
• Process payments for plans, Super Listings, subscriptions or other contracted services;
• Send campaigns, news and educational content, where the user has authorised it;
• Measure the social impact of the platform in an aggregated, statistical and responsible way;
• Produce social impact reports, institutional indicators, ESG and SDG metrics, and reports for partners, public calls, supporters, investors and funding bodies, always preserving the individual identity of users;
• Comply with legal or regulatory obligations or determinations from competent authorities.

Brazilian data protection law (LGPD) requires data processing to observe principles such as purpose, adequacy, necessity, free access and transparency.

Auati is a social impact platform. That is why we need to measure the results of our work, understand who the audiences we serve are, and demonstrate how service bartering can contribute to professional development, opportunity creation and collaboration between people and small businesses.

The information collected in the Social Form will be used solely and exclusively for measuring and reporting social impact. This means that:

• Social data will not be displayed publicly on the user profile;
• Social data will not be published in listings;
• Sensitive personal information will not be disclosed individually;
• Social impact reports will be produced in an aggregated, statistical or anonymised form whenever possible;
• This information will not be used to discriminate against, limit access for, harm or restrict any user's use of the platform;
• The purpose of the collection is to strengthen transparency, accountability and the safety of the Auati community.

By collecting this information, Auati seeks to offer a safer, more responsible environment aligned with its social impact purpose.

Some information entered by the user may be public or visible within the platform, such as:

• Name or professional name;
• Listing photo or image;
• Description of the service offered;
• Service category;
• City and state;
• Services the user wants to receive in exchange;
• Links provided voluntarily;
• Ratings, badges, reputation or public platform indicators.

The social data provided in the Social Form will not be visible to other users and will not be disclosed in listings, public profiles or platform pages.

Users should avoid publishing sensitive data or personal information they do not want to make visible, such as a full address, identity documents, bank details, health information, children's data or any private content.

Auati provides tools to make it easier for users interested in bartering to connect. Negotiations conducted through the chat are the responsibility of the users themselves.

Auati may access chat content only in specific situations, such as support, reports of abuse, investigation of misuse, platform security, compliance with a legal obligation or a request from a competent authority.

We recommend that users do not share passwords, identity documents, bank details, sensitive information or third-party data through the chat.

Auati may share personal data only where necessary for the platform to work, including with:

• Hosting, infrastructure and cloud storage companies;
• Email, notification, service desk and support tools;
• Payment processors;
• Analytics, metrics, marketing and user-experience tools;
• Technical, legal, accounting or operational service providers;
• Public authorities, where there is a legal obligation or a valid order.

Auati does not sell users' personal data.

The social data collected in the Social Form will not be shared in an individualised way for commercial, advertising or data-selling purposes. When used in impact reports, it will be presented in an aggregated, statistical or anonymised form, without exposing users' sensitive personal information.

Auati uses strictly necessary cookies, always active, to:

• Keep the user signed in;
• Ensure browsing security, including form protection;
• Store the chosen language and the page to return to after sign-in.

With the user's acceptance, and only after it, Auati also uses optional audience measurement cookies (Google Analytics 4 and Microsoft Clarity) to understand how the platform is used and to improve features and performance. Auati does not use advertising or targeted marketing cookies.

Users can accept, reject or withdraw optional cookies at any time through the Review preferences button in the Cookie Policy. They can also configure their browser to block cookies, but this also hits strictly necessary cookies and affects how some areas of the platform work.

Auati may send the communications needed about the user account, email validation, password recovery, listings, messages, educational content, matches, support, security and important platform updates.

Auati adopts reasonable technical and organisational measures to protect users' personal data against unauthorised access, loss, alteration, improper disclosure or inappropriate use.

Auati recognises the importance of protecting sensitive personal data and will take special care with the social information provided in the Social Form, using it only for the purposes described in this Policy.

Even so, no digital system is completely immune to risk. Users must therefore also protect their account, keep their password confidential and notify Auati immediately if they identify any misuse.

Personal data will be kept for as long as necessary to fulfil the purposes described in this Policy, keep the account active, provide support, protect the rights of Auati and its users, comply with legal obligations or resolve disputes.

Social data from the Social Form may be kept for as long as necessary to produce indicators, track the platform's social impact over time, prepare institutional reports and comply with obligations related to public calls, partners, supporters or funding bodies, always observing security, confidentiality and protection of users' individual identity.

After the account is closed, some data may be kept for an additional period where necessary to comply with legal obligations, prevent fraud, exercise rights or preserve platform security.

Under the LGPD, users may request:

• Confirmation that their data is being processed;
• Access to their personal data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law;
• Data portability, where applicable;
• Information about data sharing;
• Withdrawal of consent, where processing depends on consent;
• Deletion and retention;
• Review of automated decisions, where applicable.

The Brazilian National Data Protection Authority explains that the data subject is the natural person to whom the processed data refers, and that the controller is responsible for the main decisions about the processing of personal data.

Users may request information, corrections, data deletion or exercise their rights through the following channel:

• Email: suporte@auati.com.br
• Website: auati.com.br
• Privacy contact: the Auati team

Auati is not directed at children or adolescents without the authorisation of their parents or legal guardians.

If an account belonging to a minor without proper authorisation is identified, Auati may suspend or delete the account and the related data.

This Privacy Policy may be updated at any time to reflect improvements to the platform, legal changes, operational adjustments or new features.

Where there are relevant changes, Auati may notify users by email, through a notice on the platform or another suitable channel.

By creating an account and using Auati, the user acknowledges that their data will be processed in accordance with this Privacy Policy, always with the aim of enabling the platform to work, facilitating barter connections, protecting the community, improving the user experience and measuring the social impact generated by the platform in an ethical, secure and responsible way.

The social data provided by the user in the Social Form will be used exclusively for social impact reports and indicators, without individual disclosure of sensitive personal information.