Skip to main content

Privacy Policy

Privacy Policy

Effective as of October 31, 2024.

We at NEXFORCE SERVIÇOS DE TECNOLOGIA LTDA (“Nexforce”, “We” or “Platform”) are a company that provides international invoice nationalization services, helping companies reduce tax costs and improve financial management in payments for software and services in dollars, as well as other relevant services (“Services”) for our users and companies that contract the service (“Contracting User”), member users of groups on technology platforms (“User”) and, when together (“Users”, “You”), as well as for partners and/or third parties that provide services to us or use our Services (“Third Parties”).

The Privacy Policy below aims to provide all necessary information about the use of our Services for Users and Third Parties, as well as about the collection, use, storage, sharing and other types of processing of your personal data in relation to the use of our Services, in addition to showing our data protection practices, all in a regulated manner and in accordance with the best practices of the General Data Protection Law (LGPD) and guidelines of the National Data Protection Authority (ANPD), as well as all relevant legislation.

We at Nexforce take your privacy seriously and will use the collected data only for the purposes mentioned in our Privacy Policy.

IF YOU DO NOT AGREE WITH THE PRIVACY POLICY SET FORTH HEREIN, YOU SHOULD NOT USE NEXFORCE’S SERVICES.

By using our Services You declare your express consent, that is, You explicitly agree that we may collect, process and store your data in accordance with the terms and conditions described below, and when necessary, we will obtain your consent in a specific and express manner for the provision of our Services.

Nexforce will only process User data in accordance with the Privacy Policy mentioned herein and will obtain your consent as necessary for the provision of the Services offered, but the User understands that these Third Parties are responsible for obtaining your consent related to the data processing carried out by them and that Nexforce, as an independent entity, does not have any type of control or direction and cannot be held responsible for the processing carried out by them within the scope of their operations or the security of such data in the environment of these institutions, especially considering the fact that they will be subject to the privacy, security and other relevant policies of these Third Parties.

1. What information do we collect and for what purposes do we use it?

By using the Nexforce website and/or its Services, You expressly authorize the collection and use of the following data for the following purposes:

Data for Service Provision. For the purpose of providing the Services we offer, we collect the data provided by You during registration, as well as other data provided by You and by members of the platforms on which you intend to use our Services through other forms of interaction with our Services, with emphasis on first and last name, mailing address, email address, payment information, location, other online contact information, phone number, full platform content and other data necessary for the provision of the contracted Services.

Content Creation. Nexforce has access to all Content sent by Users, but only stores and uses this information for the exclusive purpose of providing the contracted Services and improving or developing Nexforce Services.

It is important to note that we may monitor and moderate the content that the User provides in our Services to protect Nexforce and ensure the rights and safety of other Users.

Data of Minors. We do not process data of Children. We may collect and process personal data of minors between 12 and 17 years of age, always in the best interest of these data subjects and in compliance with the guidelines of Law No. 13,709/2018 – General Data Protection Law (LGPD).

Communication. We record and store all data provided by You in communication with our team through email, WhatsApp messages and other forms of communication for registration purposes and proper provision of the contracted Services.

Payment information. When submitting your data for payment, we collect information about the transaction performed. This includes your payment information, such as your credit or debit card data, account and authentication information, as well as billing data, such as full address, CPF and CNPJ.

User Actions and Device Data. We collect and use information about Users’ mobile devices (such as device identifiers, operating system, model, configuration, settings and information about Third Party applications or software installed on the device). This data is collected to operate our Services and personalize the User experience.

Provide, improve and develop available Services. We use User data to improve the quality, personalization and efficiency of our Services and develop new Services that we consider relevant to Users.

Permanent inclusion of non-individualized User information. We keep User data, in anonymized form and without any possibility of direct connection between Users and the information, in our databases permanently for calculations, projections, global statistics, development of new products and Services and improvement of existing Services.

Information You provide. We collect the data provided by You such as first and last name, mailing address, email address, payment information, IP address, as well as other online contact information or phone number, photo and other information required during registration or linked to media used in the login that You provide us.

We may record and store all data provided in all communication with our team through the contact forms on the Nexforce website and email exchanges made after this initial contact.

Email address. When logging into your account or filling out and submitting a contact form on the Nexforce website, we collect your email for registration purposes, through which Platform update communications and account management will occur.

Cookies. We record data from your visit to the Nexforce website through cookies (small files that allow identification of User preferences) and other technologies including your IP address and domain name, your browser and operating system version, online traffic data, location data, web logs, device model used for access and other browsing data. We use cookies and other similar technologies only to provide and support our Services through the personalization of shared informational content, in order to provide the best possible experience for our clients.

Content creation. All content shared or disclosed, whether through comments, tips or improvement suggestions, comprises the Nexforce database, enabling the improvement and knowledge of the products and Services offered by the company.

For internal reorganization or operational and managerial changes. The collected data may be used for an eventual internal reorganization or for data transfer to Third Parties or their advisors as part of a due diligence process for the purpose of analyzing a reorganization proposal.

Usage monitoring. We use your data to monitor activities in order to ensure service quality, compliance with applicable laws, fulfillment of internal procedures and to combat fraud.

Legal obligations. We may be required by law to share your data with Third Parties to comply with legal, regulatory or tax requirements, involving the disclosure of your personal data to Third Parties, a court, regulators or government agencies.

Device Contact Import. When importing contacts from your device to find friends who also use our Services, we periodically synchronize your contact information, including phone numbers and emails. It is your responsibility to ensure that the collection and sharing of this information complies with applicable laws and that You have your contacts’ permission. This information is used to help the User and their contacts connect through our Services and the User can disable Nexforce’s access to their contacts at any time in their device settings.

Additional data and documents may be collected during your relationship with Nexforce to fulfill the purposes and activities contracted, and these will be processed in accordance with the provisions of this Policy.

In some cases, when the user is redirected through a third-party website or through a link sent by Third Parties, who are Nexforce partners, Nexforce may automatically collect from such third party some information, such as personal information provided to such Third Parties, as in the case of automatic completion of registration forms in access channels and to facilitate the use of access channels by You.

In this sense, You must have accepted the privacy policy and terms of use of that third party’s platform, which will be responsible for its respective privacy policy and terms of use and, consequently, for the processing and protection of information that You transferred to it.

Our websites and Services may contain links to Third Party websites, so Nexforce has no control over these websites and cannot guarantee their availability, accuracy or security. The user is aware and agrees that the existence of these links does not constitute endorsement or sponsorship of Third Party websites and acknowledges being subject to the terms of use and privacy policies established by them on their respective websites, applications or platforms.

2. With whom do we share your data?

Partners and Suppliers. We share your data with our partners and suppliers only for the purpose of enabling payments and data processing, providing technical support to the User, as well as to make our Services more relevant and efficient for their purposes.

The service providers and suppliers we hire perform several important functions to ensure the operation of our Services. Some of these main functions include: using software platforms and tools from other companies to execute, operate and maintain our Services, moderating user-generated content and identifying possible flaws in our Services, conducting email campaigns and sending messages to mobile devices, such as notifications about events and updates; analyzing the performance of our Services and marketing strategies, offering measurement Services and displaying personalized ads based on user interests.

For data analysis and relevant statistics about the use and reach of the Nexforce website as well as for creating newsletter emails, we share your data with some partners, notably: Google Analytics, Google Drive and Google Cloud Platform (GCP).

In addition, we may be legally required to share your data with Third Parties to comply with legal, regulatory or tax requirements, involving the disclosure of your personal data to Third Parties, a court, regulators or government agencies, such as the National Data Protection Authority (ANPD) itself.

Depending on the client’s location or the Services to be provided, Nexforce may transfer the collected data to other partners located in Brazil and in other countries, such as Portugal and the United States, and this data will be used only for the purposes for which it was contracted.

We seek to contract only partners who adopt all necessary and adequate standards under the LGPD or equivalent legislation, such as the General Data Protection Regulation (GDPR), so that the data cannot be used for other purposes and will be maintained in accordance with adequate security standards.

If Nexforce is involved in a merger, acquisition or sale of all or part of its assets, the client’s personal data may be shared with the acquirer. In such cases, You will be duly notified of any changes and transfers of your data.

3. Children's Data

Children cannot use our Services and we do not intend to collect their personal data.

According to Law No. 8,069 of 1990, which established the Child and Adolescent Statute (ECA), a child is considered to be anyone under 12 years of age, while anyone between 12 and 18 years of age is considered an adolescent.

4. How long do we store your data?

We will keep your personal data only for the period necessary to fulfill the purposes for which we collected it, for the period we deem necessary according to the need for legal protection of Nexforce or until a request for definitive deletion is made by you.

If the User requests the deletion of their data, we will immediately cease using it for any and all commercial purposes. However, we will continue to store your data as long as we have legal, tax or judicial obligations to fulfill in relation to them.

It is important to mention that, as mentioned above, we also keep User data, in anonymized form and without any possibility of direct connection between Users and the information, in our databases permanently for calculations, projections, global statistics, development of new products and Services and improvement of existing Services.

5. Where do we store the data you provide us?

The collected data is stored and processed in the internal storage of Nexforce’s computers and notebooks, Google Drive and Google Cloud Platform (GCP), which are cloud storage services.

This is done to improve performance and protect data securely in the event of a failure or other problem.

6. What is our commitment to transparency and security of your data?

All data that You provide us is processed solely to achieve the purposes listed above.

Your data is stored on our secure computers and servers or those of our contracted suppliers and is accessed and used in accordance with our security policies and standards only by us and our partners.

All traffic between our servers or between your computer and our servers is encrypted using Hypertext Transfer Protocol Secure (HTTPS) through the secure protocol Secure Sockets Layer (SSL)/Transport Layer Security (TLS) or a similar level of encryption.

We take best practice measures and existing market certifications to ensure that the data we collect is processed securely wherever it is located.

The human factor is often the weakest link in information security, so our employees are trained in cybersecurity concepts to minimize the risk of data breaches and we recommend the same type of training for all our clients and partners.

It is impossible to guarantee total security of stored data and improper use by the User or client, such as insecure software and hardware, which may compromise system security.

If You detect a security breach or believe there is any indication of vulnerability regarding your data, please contact our data protection officer directly at [email protected].

7. What are the rights of the data subject?

As the data subject, You have the rights listed below and may exercise them by submitting a written request to our data protection officer at [email protected].

Due to our security policy and to prevent social hacking or similar techniques for obtaining data and other restricted information, the requested data will only be provided upon verification of the identity of the personal data subject through secure means.

a) Confirmation of the existence of processing: this right allows You to know whether or not we are processing your personal data.

b) Access to data: this right allows You to access your personal data that we process.

c) Correction of incomplete, inaccurate or outdated data: this right allows You to request the correction of your personal data processed by us regarding the fact that they are incomplete, inaccurate, outdated or incorrect.

d) Anonymization, blocking or deletion of unnecessary, excessive or non-compliant data under the LGPD: this right allows You to request the anonymization, blocking or deletion of your data if the processing is unnecessary or non-compliant with the LGPD. If it is necessary to keep your data on our servers for the protection of Nexforce or Third Parties or legal requirements, this will be justified in our response to your request.

e) Data portability to another service or product provider: this right allows You to receive your data so that you may use it with another Service provider. However, Nexforce reserves the right not to deliver data that would compromise our intellectual property or trade secrets.

f) Deletion of personal data processed with the consent of the data subject: this right allows You to request the deletion of your personal data with the exception of cases of compliance with legal or regulatory obligations, transfers already made to third parties in accordance with LGPD requirements and data that has been anonymized for exclusive use by the Platform.

g) Information about public and private entities with which the controller shared data: this right allows You to be informed if we need to share your data with a public body, such as the National Data Protection Authority (ANPD).

h) Information about the possibility of not providing consent and the consequences of refusal: this right allows You to know that it is possible not to provide consent for the processing of data in full or specifically in relation to the purposes mentioned above and what the effects are in this regard.

In the case of website personalization Services, revoking consent for cookie use will only make the experience less personalized and prevent it from being improved.

It is important to note that there are cases in which the processing of data by Nexforce or its partners is essential for the provision of the contracted Services, so that the need is legitimate and takes precedence over any refusal.

i) Non-provision or revocation of consent: this right allows You not to provide or to revoke your consent regarding the processing of personal data. It is important to mention that the revocation of consent does not affect the data processing carried out before this request.

8. How to access and control the information you provided to us?

The management of your data is done securely by Nexforce and as already mentioned above, You can request information, changes or deletions regarding your data or resolve any questions about this Privacy Policy by contacting our data protection officer at [email protected].

After verifying your identity through a secure means, we will respond to your request within 10 (ten) business days.

You also have the right to contact the National Data Protection Authority (ANPD) directly.

9. Updates to this Privacy Policy

Nexforce is constantly evolving and improving, so this Privacy Policy undergoes changes as our Services evolve.

The most up-to-date version of this Privacy Policy can always be found on our website, but we will always inform our clients about any relevant modifications and changes.

You may suggest any modifications and resolve any questions about this Privacy Policy by contacting our data protection officer at [email protected].

Privacy Policy effective as of October 31, 2024.