Privacy Policy

Introduction

2CX SERVIÇOS LTDA is committed to protecting personal data under Brazil's General Data Protection Law (LGPD), and describes here how it protects information when collecting, processing, storing and discarding personal data.

We keep transparency with customers, consumers and visitors of www.2cx.com.br. Users provide information voluntarily through cookies, forms and resume submissions.

Personal data requested in forms remains confidential and is used only for its original purpose, without sharing with third parties, except when legally required by government authorities.

2CX processes personal data only with legal authorization or the user's express consent, consistent with the shared purpose.

Purposes of data processing

After user consent, we process data for:

• Promotional actions: information collected during sign-up to learn about our solutions and join raffles and promotions
• Customer contact: data requested when a customer expresses commercial interest
• Marketing actions: sending exclusive content about news and updates

Privacy commitment

2CX does not share, disclose, sell or otherwise process data beyond the purposes stated here, and may share it with its economic group, service providers or partners when necessary for contractual activities, based on consent or legitimate interest.

Data collected

Name, email, company, industry, job title, resume, phone number and national ID (CPF).

Data protection

Personal information is protected through physical, technical and organizational security measures to reduce the risk of loss, misuse and unauthorized access.

What are cookies?

Cookies are text files stored in the browser while using the internet. They collect, store and share browsing activity data, allowing the site to remember previous experiences and customizations, such as language choice.

There are two types:

• Session cookies: valid while the browser remains open
• Persistent cookies: stored for a longer period

How to disable them

Most browsers have automatic cookie settings. Our site does not collect them automatically, allowing you to adjust settings as you wish.

Third-party sites and applications

Protecting personal information is a priority. Some services rely on third parties: (a) business partners — vendors that help improve our services, such as email servers, hosting and marketing actions; (b) legal requests from authorities.

This policy does not apply to third-party sites. Third-party services mentioned: RD Station (legal.rdstation.com/pt/privacy-policy) and Google (policies.google.com/privacy).

Data retention period

2CX retains personal data only for as long as necessary to fulfil its purposes, including legal obligations and requests from authorities.

To determine adequate retention, we consider the volume, nature and sensitivity of the data, the potential risks of misuse or disclosure, the purpose of processing and applicable legal requirements.

Data collected through our "Careers" page is kept on file for up to 12 months.

Data subject rights

2CX offers options to delete, change, correct, restrict or port your data. To exercise your rights, contact: dpo@2cx.com.br.

While we use security measures and monitor vulnerabilities, we cannot guarantee that information can never be accessed, disclosed, altered or destroyed by a breach of these protections.

Policy changes and contact

Updates to this policy are available at www.2cx.com.br/politica-de-privacidade. We recommend reviewing it periodically.

For questions about data processing or to withdraw consent, contact our Data Protection Officer, Gisleide Ferreira da Silva: dpo@2cx.com.br.

Applicable law

In Brazil, the internet is regulated by the Brazilian Civil Rights Framework for the Internet (Federal Law No. 12,965/2014, regulated by Decree No. 8,771/2016), and personal data processing by Federal Law No. 13,709/2018 (General Data Protection Law — LGPD), in force since August 2020.