Privacy Policy

1. Who processes your data

Processing is carried out by the Alpha group. In transactions paid via PIX, the controller is Alpha Propriedades Digitais LTDA (CNPJ 43.400.885/0001-29, Brazil); in transactions paid in stablecoin, the group's international entity identified at checkout. Data Protection Officer (DPO) contact: propriedadesdigitais@gmail.com.

2. Data we collect

• Sign-up: name, email, date of birth, identity document (CPF or foreign document), WhatsApp, address.
• Receiving and refund details: PIX key, bank details, stablecoin wallet address (token and network), tax details for invoicing.
• Listings and negotiations: information and metrics of the listed Assets, offers, contracts, messages exchanged on the platform, delivery and dispute evidence.
• Payments: charge, confirmation and payout records — including transaction identifiers from the payment provider.
• Usage: access, device and browsing records required for security and operation (art. 15 of the Brazilian Internet Framework Law).

3. What we use it for

• Operating the marketplace: account, listings, offers, contracts, escrow, delivery, inspection, disputes and payouts (performance of contract).
• Security and fraud prevention: identity verification, confirmation of receiving and refund details, audit trails (legitimate interest and legal obligation).
• Legal and tax obligations: issuing and keeping records of the transactions.
• Operational communications: notifications about offers, payments, delivery, deadlines and disputes (performance of contract). Marketing communications only with consent.

4. Who we share it with

• Your contract's counterparty: Buyer and Seller see of each other what is necessary to negotiate and complete the Asset transfer — never receiving details or full documents.
• Infrastructure operators: hosting and database (Supabase), email delivery (Resend), website hosting (Hostinger).
• Payment providers: to process charges, escrow and payouts in the chosen payment method.
• Authorities: when required by law or court order.
• We do not sell personal data.

5. Cookies

We use cookies necessary for operation (session, preferences) and, with your consent through the banner, usage-measurement cookies. You can review your choice at any time via "Manage Cookies" in the footer.

6. International transfers

The platform serves multiple languages and operates with a Brazilian entity and an international entity; some data may be processed outside Brazil, with adequate safeguards as provided by the LGPD (art. 33).

7. How long we keep it

• Records of contracts, payments and commissions: for the period required by tax legislation and for the exercise of rights — deleting your account deactivates the profile but does not erase mandatory financial records.
• Access records: for the period set by the Brazilian Internet Framework Law.
• Other data: for as long as the account exists or as needed for the purpose.

8. Your rights

You may request confirmation of processing, access, correction, anonymization, portability, information about sharing, review of automated decisions and deletion of dispensable data — by writing to propriedadesdigitais@gmail.com. We will respond within the LGPD's timeframes, subject to the mandatory retention periods (§7).

9. Security

Receiving details and documents are kept in restricted-access areas, with role-based permission control, audit logging of administrative operations and encryption in transit. No staff member changes financial records outside the system's named, audited operations.

10. Changes to this Policy

We may update it; relevant changes will be announced on the platform. The date of the current version is at the top. The Terms of Use complement this Policy.