Privacy Policy

When you browse the website and app of Xamã, hire and use our services, some information and personal data are attributed to the company.

In this way, Xamã has developed this Privacy Policy because it is concerned about ensuring the privacy and protecting the data of its users. Here, in this document, we will detail how this data is used and for what purposes.

For a better understanding of this Privacy Policy, the following definitions are provided:  

‍(a) “Personal Data”: any information obtained due to this instrument, related to an identified or identifiable natural person, such as: name, CPF, RG, residential or commercial address, landline or mobile phone number, email address, geolocation information, among others.  

‍(b) “Sensitive Personal Data”: personal data about racial or ethnic origin, religious belief, political opinion, affiliation to a union or an organization of a religious, philosophical, or political nature, data related to health or sexual life, genetic or biometric data, when linked to a natural person;

‍(c) “Data Subject”:  a natural person to whom the personal data relates that are the subject of processing;

‍(d) “Processing”: any operation or set of operations performed with personal data or on sets of personal data, by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of availability, comparison or interconnection, restriction, erasure, or destruction.  

‍(e) “LGPD”: It is the General Data Protection Law, Law No. 13.709;2018.

‍(f) “USERS”: Any person who hires and uses Xamã's services.

‍INTRODUCTION

‍Xamã, processes personal data of users who hire its services and products, and we spare no effort to ensure that this data is protected and processed in accordance with the General Data Protection Law and other related regulations governing the subject.  

2. PERSONAL DATA PROCESSED AND PURPOSE

The processing of Personal Data is linked to the relationship of the data subject with Xamã. The data used will be those requested in the user registration for hiring our services.

Xamã, respecting the principle of transparency, details below how this situation occurs:

‍Purpose of Processing Personal Data Processed

‍1. Access to the Website
‍Browsing Data: IP number, date, time, and duration of access.

2. Registration on the Platform
Full name, phone number, email, identification document (RG or CPF), and credit card data.

3. Cookies
‍Browsing data: IP, access date, time, geographical location, browser type, duration of access, and pages accessed. Data about the access device: model, manufacturer, operating system, browser type, and connection speed type.

4. Use of specific features
Contact list, camera, photo album, of the mobile phone device.

5. Authenticate the user, generate security and prevent fraud
Full name, phone number, identification document (CPF or RG), biometric data, and installed applications.

6. Carry out payment transactions
Full name, contracted plan/service amount, financial data.

7. Send operational and marketing communications
Name, email, and phone number

To learn more about what cookies are and how they are processed at Xamã, as well as their purposes, you can consult our Policy/Cookie Notice.

Xamã may also process Personal Data in some other situations, such as, for example, to validate users' identities, personalize the experience, generate analyses and statistical reports, conduct research and scientific analyses, maintain proper operation and enhance the functionalities of the platforms, offer discounts, and carry out promotional campaigns, and compose the price of services.

If the user does not provide essential information for the functioning and realization of our services in our app and website, they will be unable to use our services.  

3. WITH WHOM Xamã MAY SHARE YOUR DATA
To provide services and develop activities, Xamã may operate in partnership with other organizations. Thus, in certain cases, it is necessary to share Personal Data that are entrusted to some partners and suppliers, as well as with public authorities to comply with legal requirements, as indicated below:

a) Suppliers and Partners: To enable our operations and services, Xamã seeks support from suppliers and partners. And, when the real necessity for providing our services is identified, Xamã may share the Personal Data collected from users with these partners and suppliers. An example of this is those partners we use to process the payment of contracted services. Xamã will conduct appropriate assessments of partners and suppliers, as well as establish contractual obligations regarding Information Security and Personal Data Protection to minimize risks involved in the processing of Data.

b) Police, judicial, and governmental authorities: Xamã is committed to always complying with the law. Thus, when there is any legal or regulatory obligation, requirement from any judicial or police authority with proper jurisdiction, that mandates the provision of Personal Data, Xamã will be obliged to comply and will comply. In the case of an abusive or excessive order, Xamã will defend the right to privacy and the protection of its users' Personal Data.  

4. RETENTION OF PERSONAL DATA
Xamã will analyze the eventual needs for retention for each type of Personal Data. To this end, it will consider its nature, necessity of collection, its purpose, and the need for retention to fulfill obligations and safeguard rights and prevent liabilities.  

Thus, Personal Data are retained exclusively for as long as necessary to fulfill the purposes for which they were collected, unless there is another reason for their maintenance such as, for example, compliance with legal, regulatory, or contractual obligations, regular exercise of rights in administrative, judicial, or arbitral processes, among others permitted by the LGPD.  

5. HOW YOUR DATA WILL BE PROTECTED  
Our priority is the security of Personal Data and the preservation of the privacy of our users. Therefore, Xamã spares no effort to care for Personal Data and use them solely for the purposes described in this Policy.

To ensure privacy and protect Personal Data, Xamã employs advanced technological resources and various measures such as, for example, strict access controls to systems and data processing environments.

In addition to the efforts that Xamã makes to protect your Personal Data, it is important that the user also adopts some measures to maintain a safer environment, such as (i) keeping data always updated; (ii) accessing the app from trusted networks; (iii) not trusting strange emails; (iv) not accessing suspicious sites; (v) keeping protective mechanisms active and updated, such as antivirus and antimalware; (vi) not installing applications or programs from strange or illegal sources; and (vii) not accessing “promotional content” from unknown sources.

And, if you identify or become aware of any factor that compromises the security of data processed in the activities of Xamã's apps and services, please contact us through the Customer Service Center at contato@xama.ai.

6. RIGHTS OF PERSONAL DATA SUBJECTS
The General Data Protection Law – LGPD guarantees data subjects rights related to their Personal Data, and to request the exercise of any of these rights guaranteed by law, just contact us through the channel contato@xama.ai.

When sending an email for contact, depending on the case, Xamã may ask for information (and even documents) relevant to confirm/prove whether the requester is the owner of the data or their legal representative, as a means of ensuring the protection of the privacy of the subjects.

Xamã is committed to respond to requests from the subjects within a reasonable timeframe and in accordance with applicable legislation.  

The aforementioned channel may also be used to answer questions, make comments and suggestions regarding this Privacy Policy.  

7. GENERAL PROVISIONS  
Xamã will constantly seek to improve the services provided and how it conducts its operations. Therefore, this Privacy Policy may undergo updates to reflect any improvements made.  

As a result, Xamã recommends that you periodically visit this page to stay updated.  In any case, we may send communication via email or indicate on our platforms about updates to this Privacy Policy for our users.

This Privacy Policy will be used in conjunction with the Terms of Use and Other Policies or Additional Terms applied or to be created to better regulate the relationship between Xamã and users regarding the protection of Personal Data.