Privacy Policy

At QUIKER, we value the trust you place in us when sharing your personal information. This Privacy Policy explains how we collect, use, protect, and disclose your information when you use our services, applications, websites, and digital platforms.

We are committed to protecting your privacy in accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Freedom of Information and Protection of Privacy Act (FIPPA), and other applicable Canadian provincial and federal regulations. Where applicable, we also comply with the European Union's General Data Protection Regulation (GDPR).

QUIKER Tecnologia e Inovação Ltda. is a company incorporated under the laws of the Federative Republic of Brazil (CNPJ No. 35.865.991/0001-50), headquartered in Ribeirão Preto, SP, Brazil, specializing in the development of software, applications, and digital services.

For questions or requests related to the protection of your personal information, please contact us at: privacidade@quiker.com.br.

QUIKER may collect the following personal information depending on how you interact with our services:

• Information you provide directly: full name, business number or tax identification, address, phone number, email address, payment information, and professional or registration details submitted through forms.
• Information collected automatically: IP address, approximate geolocation data, access logs, device type, operating system, cookies, and unique browsing identifiers.
• Sensitive Information: In specific contexts, such as health-related applications, we may collect biometric or health information, always with your explicit and informed consent.

We do not collect unnecessary information and always seek to minimize the amount of personal data requested.

Personal information collected by QUIKER is used for the following purposes:

• Providing and improving QUIKER's services.
• Meeting legal and regulatory obligations under Canadian and applicable international law.
• Performing contracts with clients and partners.
• Sending institutional communications, news, and service updates.
• Personalizing your experience on our platforms.
• Ensuring security and preventing fraud.
• AI Training: Using anonymized data to train artificial intelligence models, ensuring that automated decisions (such as recommendations) are transparent and fair.
• Marketing Communications: Sending promotional communications or relevant advertising when you have provided your consent.

We collect personal information only for identified, specific, and legitimate purposes, and do not use it in ways incompatible with those purposes, consistent with PIPEDA's accountability and purpose limitation principles.

QUIKER processes personal information based on the following legal grounds:

• Your express or implied consent, where required.
• The performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
• Compliance with a legal or regulatory obligation.
• Legitimate interests of QUIKER, always balanced against your fundamental rights and privacy interests.

You may withdraw consent at any time, subject to legal and contractual restrictions.

QUIKER may share personal information with:

• Technology partners, cloud service providers, and third-party service providers necessary for the delivery of our services. All such parties are required to protect your information to a standard comparable to our own.
• Government authorities, regulatory bodies, courts, or law enforcement agencies when required by Canadian law or lawful judicial order.
• Successor organizations in the event of a merger, acquisition, or corporate restructuring, provided that the receiving party agrees to handle personal information in a manner consistent with this Policy.

We do not sell personal information to third parties under any circumstances. Where data is used for marketing purposes, we provide clear opt-out mechanisms.

Under PIPEDA and applicable Canadian provincial privacy legislation, you have the right to:

• Access: Request confirmation of whether we hold personal information about you, and obtain a copy of that information.
• Correction: Request correction of inaccurate, incomplete, or outdated personal information.
• Withdrawal of Consent: Withdraw consent to certain types of processing, with reasonable notice, subject to legal and contractual limitations.
• Challenging Compliance: Challenge our compliance with PIPEDA or this Privacy Policy by contacting our Privacy Officer.
• Complaint to a Regulator: Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca, or with your applicable provincial Privacy Commissioner.

Additional rights may be available to residents of Quebec under Law 25 (Act to Modernize Privacy-Related Provisions), including the right to data portability, the right to de-indexation, and the right to object to automated decision-making. Quebec residents may also request that decisions made solely through automated means be reviewed by a human.

To exercise any of these rights, contact us at: privacidade@quiker.com.br.

QUIKER implements appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or unauthorized disclosure, including:

• Encryption of sensitive data in transit and at rest.
• Firewalls and intrusion detection systems to prevent unauthorized access.
• Internal access controls based on the principle of least privilege.
• Continuous system monitoring and security audits.
• Data governance and confidentiality policies.
• Two-factor authentication available for user accounts and internal systems.

Breach Response: In the event of a privacy breach that poses a real risk of significant harm, QUIKER will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting obligations. Where applicable, we will also comply with the 72-hour notification requirement under GDPR.

QUIKER uses cookies and similar technologies to improve navigation, personalize content, and analyze usage statistics. These include:

• Essential Cookies: Required for the operation of the site (e.g., login sessions, settings, and preferences).
• Analytical Cookies: Collect site usage data to help us improve our services.
• Marketing Cookies: Used for personalized advertising, only when you have provided your consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may limit the functionality of our platforms. Where required under applicable Canadian law, we will seek your consent before placing non-essential cookies.

Personal information will be retained for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Canadian federal and provincial laws and regulations. Once the retention period expires, information will be securely deleted or anonymized in accordance with our data retention procedures.

QUIKER's operations involve the use of cloud and technology services from providers located outside Canada, which may result in the transfer of personal information to other jurisdictions, including Brazil and countries within the European Economic Area. In all such cases, QUIKER ensures that appropriate contractual safeguards are in place to provide a level of protection for your information that is comparable to PIPEDA and applicable Canadian privacy standards. By using our services, you acknowledge that your information may be transferred to and processed in jurisdictions outside Canada.

QUIKER may update this Privacy Policy from time to time. Any changes will be posted on our website or communicated through our applications, along with the date of the most recent revision. We encourage you to review this Policy periodically. The most current version is always available at www.quiker.com.br/privacidade.

Material changes will be communicated to you in advance through appropriate means, such as email notification or a prominent notice on our platform.

Some of our services use artificial intelligence for personalization, recommendations, or analytics. Data used to train AI models is anonymized prior to use. Where our systems make automated decisions that could significantly affect you, those decisions are subject to human review upon request.

You have the right to:

• Request an explanation of any automated decision made about you and ask for human review of that decision.
• Challenge outcomes that affect your rights or interests.
• Opt out of having your personal information used to train AI models, by submitting a request to privacidade@quiker.com.br.
• Opt out of being subject to automated decision-making in the processing of your personal information.

Our commitment is to minimize bias and ensure transparency in all uses of artificial intelligence.

For questions, requests, or to exercise your privacy rights, please contact our Privacy Officer:

Email: privacidade@quiker.com.br

If you are not satisfied with our response, you have the right to escalate your concern to the Office of the Privacy Commissioner of Canada:

QUIKER Tecnologia e Inovação Ltda. is committed to protecting your privacy and building a relationship of trust. Thank you for choosing our services.