first of all:

One of RYZE's values is transparency. We value everyone's privacy and want you to know how we handle your data. Therefore, we ask you to read this Privacy Notice to understand what data of yours will be collected when using RYZE and how this data will be used and stored.

These are important details, and we want you to be informed when becoming a RYZE user.

for what and for whom?

This is our Privacy Notice for you to understand how RYZE collects, uses, and stores personal data during the user's experience and interaction on our channels, websites, and apps ("Platforms").

an agreement between ryze and you

By interacting and requesting services from RYZE, you agree and declare your awareness of all the information in this Privacy Notice.

It's also why it's essential for you to carefully read everything we've prepared for you here (as well as when we update this notice) before deciding to truly enjoy the services or interact with RYZE.

If you don't agree with any provision of this notice, we'll have to ask you not to use RYZE's services.

But if you agree to our terms, here's a summary of our Notice, and then you can read the full document.

SUMMARY OF OUR PRIVACY NOTICE

• DATA COLLECTED: The data collected includes Name, CPF (Brazilian individual taxpayer registry), address, phone number, profession, email, banking data such as agency, account, and PIX, among others, along with a photo.
• PROCESSING PURPOSES: The processing purposes involve communication with the user, user registration, service provision, and administrative, judicial, extrajudicial, or arbitral defense of RYZE's interests and rights.
• CONTROLLER: The controller of the data is RYZE CONSULTORIA PARA INTERNACIONALIZAÇÃO LTDA, with the contact email: privacy@ryze.land.
• RIGHTS OF THE DATA SUBJECT: Data subjects have rights including access, rectification, confirmation of processing, deletion, portability, and information about sharing, among others.
• SECURITY MEASURES; To ensure data security, we implement appropriate technical and administrative measures, considering the nature of the processing and sensitivity of the data. Our security standards include access control and restriction, security and confidentiality policies, security monitoring, encryption, team training, frequent backups, and continuous review and updating of information security controls and processes.

definitions

To make it easier for you, here are the definitions of some terms used:

• You: A natural or legal person who visits RYZE's Platforms, such as potential users, business partners, among others who may come into contact with RYZE and are not our employees or business partners.
• Personal Data: Any information related to an identified or identifiable natural person, i.e., any data that can directly or indirectly identify a person. Personal data includes, for example, ID, name, surname, CPF, marital status, address, contact phone, and email, among others.
• Data Protection Officer (DPO): The person responsible for acting as a communication channel between RYZE and You.
• Data Subject: The natural person to whom the Personal Data refers.
• Site: Our Site or App (exclusive property of RYZE) and all those technical components that usually accompany it (underlying hardware and software), which can be accessed through the site www.ryze.com or any other that RYZE decides to replace in the future.

We make it clear that the words used in this Notice that are in the singular include the plural, the masculine gender includes the feminine and the neutral or vice versa, and other words written in uppercase have the meaning specified in the LGPD (General Data Protection Law - 13.709/18) and other applicable laws ("Applicable Legislation").

WHAT PERSONAL DATA IS COLLECTED?

We want to show you the procedures with personal data that we collect when you register on our App, automatically or through direct request, data that can be used to try to communicate with you or just identify you. Here you can see a summary of the Personal Data we collect:

AUTOMATICALLY COLLECTED DATA (ACCESS LOG): This data is collected automatically when you register on our App. It includes information such as the date, time, and IP address of access.

REGISTRATION DATA: Provided by you when contracting RYZE through online forms, registration data includes information such as: Name, Address, Email, Phone

AND WHAT ABOUT MINOR'S DATA?

RYZE's platform is not intended for individuals under 18, and we do not deliberately collect personal data from children and adolescents. If you are under 18, you should not use our platform or provide us with any personal data. If we become aware that we have collected personal data from a child or adolescent, we will take reasonable measures to eliminate the relevant personal data.

HOW ARE THE COLLECTED PERSONAL DATA USED?

Now that you know which data RYZE processes, understand better how they are used.

DATA PROCESSING CONTROLLER.

Whenever we offer services, RYZE will act as the data processing controller in relation to Personal Data, whether common or sensitive.

HOW DOES RYZE STORE ALL THESE COLLECTED INFORMATION?

Simple and straightforward: With the utmost security and respect possible.

RYZE does everything possible to keep your Personal Data always secure. For this, we have security and protection measures, appropriate technical, physical, and administrative measures according to the nature of the collected, used, and stored data, including widely accepted market practices. Among other measures, RYZE adopts authentication for database access, encryption, data backup system, antivirus, intrusion detection, among others.

SOME IMPORTANT POINTS:

Despite our efforts, RYZE cannot guarantee that these security measures are free of errors or not subject to interference from third parties (hackers, crackers, among others).

By its nature, despite RYZE's best efforts, any security measure can fail, and any data can become public.

Therefore, it is important for you to know that, by consenting to this Privacy Notice and/or by using RYZE's services, you understand and accept these risks and agree that RYZE will not be responsible for such leakage or data breach when it is duly proven that it has fulfilled all its obligations to ensure adequate levels of security.

AND INTERNATIONAL TRANSFERS?

It is essential to know that all information collected by RYZE will be stored with a high standard of security on our servers or on third-party servers operated and controlled exclusively by RYZE, located in Brazil, until the present moment.

In addition, RYZE may store your Personal Data on servers outside Brazil and/or use service providers that are not located in Brazil, and when this happens, we will notify you.

In these cases, RYZE will comply with the legal requirements for these international transfers, ensuring the same level of security applied to treatments carried out in Brazilian territory.

AND WHAT ARE MY RIGHTS AS A DATA SUBJECT?

RYZE wants to be as transparent as possible. For this reason, we provide tools for you to exercise your legal rights regarding Personal Data according to art. 18 of the General Data Protection Law (LGPD).

Here, we describe some of these rights, but be aware that others are provided by this law if you are interested and request them.

• CONFIRMATION OF THE EXISTENCE OF TREATMENT: We can confirm whether we process your data or not.
• ACCESS TO PERSONAL DATA: We can provide access to your Personal Data, including a copy of the data.
• CORRECTION OF INCOMPLETE, INACCURATE, OR OUTDATED DATA: We can change or correct your Personal Data that appears incorrect.
• PORTABILITY OF PERSONAL DATA: We can help you port the data you have provided to another service provider, transferring your Personal Data to this new provider chosen by you.
• DELETION OF PERSONAL DATA: We can delete your Personal Data processed by RYZE when it is collected and processed based on your consent, through the Platform itself or by request through the contact channels indicated in this Notice (except in cases where the law allows not to do so).
• INFORMATION ABOUT SHARING: We can provide information about which public and private entities RYZE has shared your Personal Data with, as provided by this Notice.
• ANONYMIZATION, BLOCKING, OR DELETION OF DATA: We can provide anonymization, blocking, or deletion of unnecessary, excessive, or data processed in non-compliance with the law.
• CONSEQUENCES OF NOT PROVIDING CONSENT: Providing your personal data is not mandatory, but this information is necessary for the execution of our services and products. Therefore, we will not be able to offer some/all of our services without your data.
• REVOCATION OF CONSENT: At any time, you can revoke the consent given for the processing of your personal data under the terms of the LGPD.
• PRESENTATION OF A COMPLAINT TO THE NATIONAL AUTHORITY ABOUT HOW THE CONTROLLER HANDLES YOUR DATA: We process your personal data only following the rules of this privacy notice and in accordance with the current data protection legislation. If, however, you wish to complain about our activities regarding your personal data, or are dissatisfied with how we handle your information, you have the right to file a complaint with the responsible supervisory authority (ANPD - National Data Protection Authority) according to contact information, email: anpd@anpd.gov.br and phone: +55613411-5961.
• OBJECTION TO PROCESSING: You can object to the processing of your information whenever the legal basis for processing does not have your consent or is not in accordance with what is established by LGPD.

HOW TO EXERCISE THESE RIGHTS?

To exercise the rights mentioned above and others provided for in applicable legislation, just send a request to the email privacy@ryze.land, and we will carefully analyze and respond as soon as possible, even if it is to provide information about the impossibility of fulfilling the request.

To meet your request, we need you to mention in the email request, at least, the name of the data subject, the right you intend to exercise, details and specifications about your request, CPF or CNPJ, and the user's email address.

However, this does not mean that RYZE cannot request other information or documents for the verification of your requests and statements, as well as to confirm your identity. This is for your protection.

CONTACTING RYZE

In case of doubt or request for the exercise of any of the rights described in the item where we mention your rights as a Data Subject, you can contact our privacy department through the email privacy@ryze.land.

SHARING DATA WITH THIRD PARTIES

RYZE will not disclose and/or transfer your Personal Data to third parties that are not connected with us. However, we may share your Personal Data with:

• Third parties that provide services to us, such as data storage and processing servers, companies contracted for marketing services, accounting services, legal departments, among others, who will act on behalf of RYZE as Processors or Co-Controllers, and will have contractual obligations of confidentiality, confidentiality, and protection of Personal Data.
• By a competent authority, or by order, decree, regulation, or government rule, or in case of violations or suspicion of violations, it may be determined that we share the information and Personal Data stored in our possession. If this happens, we undertake to strictly disclose the necessary information and Personal Data to achieve the required purposes.

As RYZE develops and grows, whether through a corporate transaction, acquisition, incorporation, merger, split, or through the sale or purchase of companies, etc., your data may be transferred to these new companies.

UPDATES TO THE PRIVACY NOTICE

To warn you in advance, RYZE may, at any time, change this privacy notice at its sole discretion. In other words, whenever our services change, when we change something relevant, or when we think a change to this document can improve your experience (for example, making some information clearer or more specific), we may change this Privacy Notice.

But don't worry! Any changes will be informed in advance, through the App itself and/or the email provided by you.

But be aware: if you continue using the App after 30 (thirty) days from the disclosure of the new version of the Policy, we will understand that you are fully aware of the new terms applicable to the processing of Personal Data. If you do not agree with the changes to the Notice, you should stop using the Platforms and our services as a whole.

If you have any questions, in any case, talk to us at privacy@ryze.land, and we are sure we can help you with any doubts!