1. Introduction
XEND Exchange ("we", "our" or "the company") values user privacy and is committed to protecting the personal data entrusted to us. This Privacy Policy describes how we collect, use, store and protect your personal data in compliance with the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD).
XEND Exchange is a technology platform that connects companies to regulated financial partners. We do not act as a financial institution, FX provider or payment institution; every operation is executed and settled by duly authorized partners.
2. Data we collect
XEND Exchange may collect the following types of personal data:
- Browsing data: IP address, browser type, pages visited, date and time of access, and time spent on the site.
- Contact data: information you voluntarily provide when contacting us via chat, WhatsApp, form or email, such as name, company, phone number and email address.
- Transactional data: information related to operations intermediated with our regulated partners, where applicable.
3. Purpose of processing
We use your personal data for the following purposes:
- Provide support and respond to requests sent through our communication channels.
- Comply with legal and regulatory obligations.
- Improve the browsing experience on our site.
- Prevent fraud and ensure the security of operations.
- Respond to judicial and administrative requests.
4. Data sharing
XEND Exchange does not sell personal data. Your data may be shared only in the following cases:
- With regulated partners, strictly to the extent necessary to provide the services.
- With competent authorities, in compliance with legal obligations or judicial orders.
- With service providers essential to the operation of the site, who act as data processors and are bound by confidentiality obligations.
5. Storage and security
The personal data we collect is stored in secure environments, with appropriate technical and organizational measures to prevent unauthorized access, destruction, loss, alteration or any form of improper processing.
Data will be retained for the period necessary to fulfill the purposes described in this policy or for the term required by law.
6. Data subject rights
In compliance with the LGPD, you have the following rights regarding your personal data:
- Confirmation of the existence of data processing.
- Access to the personal data processed.
- Correction of incomplete, inaccurate or outdated data.
- Anonymization, blocking or deletion of unnecessary or excessive data.
- Portability of the data to another service or product provider.
- Deletion of personal data processed with consent.
- Information about the public and private entities with which the data has been shared.
- Withdrawal of consent, where applicable.
7. How to exercise your rights
To exercise any of the rights listed above or to clarify questions about the processing of your personal data, contact us through the following channels:
- Support chat: available on this site, in the bottom-right corner.
- Email for judicial requests: oficios@xend.exchange
We will respond to your request within the term established by the applicable legislation.
8. Cookies and local storage
Our site may use cookies and similar technologies to improve the browsing experience. Cookies are small text files stored on your device that help us understand how the site is used.
Our chat support uses local storage (localStorage) to keep your conversation session identifier, allowing the history to be preserved during navigation. This data remains restricted to your device and can be removed at any time through your browser settings.
You can configure your browser to refuse cookies or to alert you when a cookie is being sent. However, some site features may not work correctly without cookies.
9. Changes to this policy
This Privacy Policy may be updated periodically. We recommend that you review it regularly to stay aware of any changes. The date of the last update will always be shown at the top of this document.
10. Applicable law
This policy is governed by Brazilian law, in particular by the General Data Protection Law (Law No. 13.709/2018).