Privacy Policy - Pay Easy POS

What is this document for?

This document explains how we handle all the personal information you provide to us through our app. Here, we clarify the following:

Personal data we collect
How we use this data
With whom we share your information
Your rights regarding this data

We may change this Policy at any time by posting an updated version on our website and in our app. Therefore, we recommend reading it carefully.

Who controls the provided data?

Company Name: MERCADO EASY SOLUÇÕES E TECNOLOGIA LTDA
Trade Name: PAY EASY
CNPJ: 43.684.116/0001-08

For the purposes of the General Data Protection Law (LGPD), we are the controller of your data, meaning we are responsible for managing the processing of your personal data.

What personal information do we collect?

Business Registration for Legal Entities:

Company Name
CNPJ
Email
Phone number
Physical address
Copy of the responsible person's ID or driver's license
Proof of residence
Copy of the social contract

We do not collect or use sensitive data in any way. We also do not intentionally collect data from minors. Our services are exclusively for adults.

This app uses third-party services that may collect information to identify you. Below are the links to the privacy policies of the third-party services used in the app:

Google Play Services
Google Analytics for Firebase
Firebase Crashlytics

Why do we collect your information?

To identify users of our services.
To identify those involved in financial transactions.
To fulfil all functionalities of our portal and payment methods.

Why can we use your personal data?

Whenever possible, we collect your consent to use personal data. We use mechanisms to ensure you expressly agree to the use of your information for the purposes we inform you about.

When we use data for purposes beyond your consent, we respect our contractual relationship, processing data to ensure the delivery of our services.

In rare cases where the use of your personal information goes beyond your consent and the signed contract, we process your data based on legitimate interest, fully respecting the General Data Protection Law (LGPD) and international best practices for data protection.

Who has access to your information?

Since our services involve payment operations and financial control, we work with various partners to ensure the security and full functionality of our operations. Therefore, when necessary, we share personal data with them, always respecting your rights.

The cases in which we share your personal data are as follows:

Credit Bureau: Your personal data may be shared with companies that analyze your personal profile regarding credit risk to provide greater security to operations and prevent potential fraud.
Fraud Verification: Your data will be shared with third parties that provide identity verification and fraud prevention services, also to provide greater security to operations.
Processors, Issuers, Card Networks, and Acquirers: Your data will be shared with companies involved in transaction processing to enable our services.
Establishments: Establishments involved in transactions will have access to specific personal data related to the case.

Please note that our partners have their own privacy policies available on their websites, where they explain how they collect and use your personal data for specific purposes, which may go beyond our interests, as they may also be controllers of your data.

Additionally, we share your data with public authorities if there is a legal obligation to do so.

Note: We never sell the personal information you provide to us.

Where is your data stored?

Your personal data may be transferred to Europe to enable our services, given the cloud storage we use, which is located in European territory.

In these cases, the same level of personal data protection required by Brazilian legislation and international best practices for data protection will be guaranteed.

How long is the data stored?

Your personal data is kept only for as long as necessary to fulfill the purposes for which we collected it unless it is needed to comply with legal, and regulatory obligations and requests from competent authorities.

As a rule, we must observe a minimum retention period of 5 years for this data, based on Article 23, item VIII, of Resolution No. 4.658/18 of the Central Bank of Brazil.

After this minimum period, unless in specific cases, we will delete your personal data as it will no longer be useful for providing our services.

What are your rights as a data subject?

Whenever necessary, you can use our various contact channels to exercise your rights under the LGPD.

You can ask us to confirm if we use a specific personal data of yours and request access to it.
You can correct your data or ask us to correct it.
You can ask us to delete your personal data, and we will respect your decision unless we have another reason to use it that is not your consent.
You can request the portability of your personal data.
You can ask who has access to your data.
You have the right not to provide your consent whenever you do not wish to, and you will be duly informed about the consequences of not consenting.
You can revoke your consent whenever you wish.

Please note that even if you request the deletion of your data from our databases, we will need to keep some information to comply with legal and regulatory obligations.

For any request, send an email to [email protected].