PRIVACY NOTICE

Revenu is a digital platform that operates as a Banking Correspondent and Direct Credit Company, facilitating the loan contracting process.

This Privacy Policy applies to all services and personal data processing operations of Revenu OPEN TECNOLOGIA LTDA., registered under CNPJ nº 51.235.341/0001-87, headquartered at Av. Brig. Faria Lima, nº 1811 – Room 1119, Jardim Paulistano, São Paulo/SP, ZIP code 01.452-001, and other group companies located in Brazil.

By accessing or using the website: https://www.revenu.tech, or Revenu applications on the Google Play Store and Apple App Store (both referred to as 'Application'), the user ('User') declares to have read, understood, and agreed to the Privacy Policy.

Revenu Tech is committed to respecting privacy and safeguarding the security of personal data holders, ensuring the legality and transparency of processing activities.

Thus, it presents this Privacy Policy ('Policy') to clearly and accessibly describe how personal data will be collected, stored, used, and shared, in compliance with applicable Brazilian laws, especially Federal Law nº 13.709/2018 ('General Personal Data Protection Law' or 'LGPD') and the regulations of ANPD - National Data Protection Authority.

This document is the main reference regarding privacy and personal data processing, but all other documents governing the relationship between the User and Revenu are an integral and inseparable part of this Notice, including, but not limited to, the Terms of Use and the Information and Cybersecurity Policies - Fintech and Information and Cybersecurity Policy - SCD.

If the data subject believes that their personal data has been processed in a manner incompatible with this Policy or with their choices as a personal data holder, or if they have any questions, comments, or suggestions related to this Policy and how Revenu handles their personal data, please contact us through the following channels:

Mailing address: in the city of Av. Brig. Faria Lima, nº 1811 – Room 1119, Jardim Paulistano, São Paulo/SP, ZIP code 01.452-001.

Email: privacidade@revenu.com.br

Data Subject Service Request: Click here to access the Form.

Revenu has a support team available during business hours to assist you.

Below are some important concepts to help you, the personal data holder, easily interpret the terms of this Privacy Policy:

'User': any person who accesses and/or uses the website, the Application, and/or our Services, online or offline.

'Anonymization': use of reasonable and available technical means at the time of processing, through which a personal data loses the possibility of direct or indirect association with an individual.

'Database': structured set of personal data, established in one or more locations, in electronic or physical format.

'Personal data sharing': communication, dissemination, international transfer, interconnection of personal data, or shared processing of personal data databases by public bodies and entities in the fulfillment of their legal duties, or between them and private entities, mutually, with specific authorization, for one or more processing modalities permitted by these public bodies, or between private entities.

Consent: free, informed, and unequivocal (without doubt) authorization by which the User agrees to the processing of their personal data for a previously stipulated purpose.

'Controller': natural or legal person, of public or private law, responsible for decisions regarding the processing of personal data.

Personal data: any information related to a natural person that identifies them, or that, used in combination with other processed information, identifies an individual. Also, any information through which identification or contact information of a natural person is possible.

a) 'Sensitive personal data': personal data about racial or ethnic origin, religious belief, political opinion, affiliation to a union or organization of religious, philosophical, or political nature, data concerning health or sexual life, genetic or biometric data, when linked to a natural person.

'Anonymized data': data related to the data subject that cannot be identified, considering the use of reasonable and available technical means at the time of processing.

'Elimination': deletion of data or data sets stored in a database, regardless of the procedure used.

IP Address: an IP address is a number assigned to a computer or network when accessing the Internet. It is generally associated with the point of entry on the Internet, such as an Internet Service Provider.

Purpose: what Revenu aims to achieve from the processing of personal data.

LGPD: means 'General Personal Data Protection Law'. It refers to Federal Law nº 13.709/2018.

'Logs': records of access to Internet applications that gather information regarding the date and time of application use, considering a specific IP address.

'Necessity': reason justifying the processing of personal data in order to achieve the intended purpose.

'Services': refers to any and all services provided by Revenu.

Website: refers to all content and functionalities available at: https://www.revenu.tech/

'Terms of Use': The Terms of Use of our website: https://www.revenu.com/legal/termos-condicoes.

'Personal data holder': natural person to whom the personal data subject to processing refers.

'Processing of personal data': considered processing of personal data any collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of the information, modification, communication, transfer, dissemination or extraction of data from natural persons.

The terms of this Policy apply to all those who access Revenu's pages and domains, whether they are clients or not.

For example, this Policy applies to: Users who interact with the website and/or the Application; visitors; natural persons who access the website and/or the Application; legal entities, through the natural person of their representative; as well as those whose personal data is somehow processed by Revenu.

Together, hereinafter referred to as 'Users'.

It is important to mention that this Privacy Policy does not apply to anonymized or aggregated personal information (anonymous versions of User information, aggregated data, or data that does not identify a particular individual).

If the data subject believes that their personal data has been processed in a manner incompatible with this Policy or with their choices as a personal data holder, or if they have any questions, comments, or suggestions related to this Policy and how Revenu handles their personal data, please contact us through the following channels:

Mailing address: in the city of Av. Brig. Faria Lima, nº 1811 – Room 1119, Jardim Paulistano, São Paulo/SP, ZIP code 01.452-001.

Email: privacidade@revenu.com.br

Data Subject Service Request: Click here to access the Form.

Revenu has a support team available during business hours to assist you.

The processing of personal data is carried out in accordance with the guidelines of the current General Personal Data Protection Law and in line with ethical principles and best practices required by the market.

By accessing or registering on the website or the Application, the data subject may have the following personal data processed:

User registration data: full name, driver's license, email, address, marital status, contact phone, CPF, RG, date of birth, country, sex, age, nationality, marital status, civil regime and parentage (mother's name and father's name), professional information, and education depending on the service or product contracted.

Financial data: income, expenses, outstanding debts, assets owned, vehicle license plate, bank details, other data regarding your assets, credit data such as your history and credit score, insurance payment data such as coverage and premiums, policy data, and information about insurance, always depending on the service or product contracted.

Location data: IP of your computer or mobile device, date and time, geolocation data.

Behavioral data: locations you most frequently access on the website or Application, consumption history of Revenu products and services, system usage history.

Sensitive data: medical history, current illnesses, whether the person has a physical disability or not, facial or fingerprint biometric data. These data are processed depending on the service or product contracted.

Personal data may be provided directly by you, the user, or by third parties, such as other Revenu Group companies, strategic partners like service providers, clients, credit bureaus, other financial institutions, banking correspondents, insurance companies, and public agencies.

Personal data may also be collected automatically through cookies or other similar technologies.