General Privacy Policy and Personal Data Protection

We are COIN NODES LTDA, registered under CNPJ no. 49.670.293/0001-03, and the other Coin Nodes group companies (all referred to as "Coin Nodes" or "we"), controller and responsible for the processing of your Personal Data.

This Notice aims to explain to you, as the data subject, how your data is processed, stored, and used by us. It governs the use of the "Landing Page" available at https://www.coinnodes.tech ("Site"), as well as our main Coin Nodes platform, which is only available to registered customers, and the WhatsApp messaging services we provide to business customers. We recommend that you read this Notice carefully.

Some of the provisions of this Notice may apply only to the Coin Nodes platform, and not to the Landing Page, and vice versa. The Landing Page only collects personal data when you contact us using the provided functionality; it does not collect any other personal data.

It is also worth noting that our Site may include links to third-party websites, plugins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When leaving our Site, we recommend that you read the privacy policy of each website you visit.

What concepts should you know about this topic?

We understand that some terms used in this Notice may be difficult to understand. With that in mind, we have prepared a glossary to facilitate your reading:

  • Competent Authority: entity responsible for overseeing, implementing, and enforcing data protection laws in its jurisdiction (e.g., National Data Protection Authority (ANPD) and data protection authorities of European Union countries - within the scope of the General Data Protection Regulation (GDPR)).
  • Controller: natural or legal person, public or private, who is responsible for making decisions regarding the Processing, i.e., Coin Nodes.
  • Personal Data: information related to an identified or identifiable natural person.
  • Sensitive Personal Data: Personal Data about racial or ethnic origin, religious belief, political opinion, union membership, or religious, philosophical, or political organization affiliation, health or sex life data, genetic or biometric data, when linked to a natural person.
  • DPO (Data Protection Officer) or Encarregado: professional - natural or legal person -, internal or external to the organization, responsible for the protection of Personal Data and for acting as a communication channel with the Data Subjects and the Competent Authority.
  • IP (or Internet Protocol): unique identifier for each computer connected to a network.
  • Data Subject(s): natural person whose Personal Data is subject to Processing, including users and visitors to our site, Coin Nodes employees, job applicants, representatives or representatives of suppliers, service providers, and business partners and customers.
  • Processing: any operation we carry out with your Personal Data, by automated or non-automated means: collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.
  • International Data Transfer: transfer of Personal Data to a foreign country or international organization of which the country is a member.

What types of Personal Data are processed?

The collection of some of your Personal Data is essential for us to carry out our activities. However, the form and purpose of the Personal Data Processing activities vary according to the context for which your information was collected.

We may process different types of Personal Data about you, which we group as follows:

Identification Data

  • Full name, profile picture, nationality, tax identification, address, username, or similar identifier, position, and date of birth.

Verification Data

  • Copies of your government-issued identification document and related information. We may also collect copies of proof of address.

Contact Data

  • Billing address, delivery address, email address, and phone numbers.

Operational Data

  • Data about payments to and from the data subjects, and data on products and services acquired by these data subjects.

Employer Data

  • Any information related to the company that the data subject represents.

Technical Data

  • Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices that the user uses to access the site.

Profile Data

  • Username and password, products or services used, interests, preferences, comments, and responses to surveys.

Usage Data

  • Information about how the user uses the website, products, and services.

Marketing and Communications Data

  • Include preferences for receiving marketing from us and third parties, and communication preferences.

We may aggregate Usage Data to calculate the percentage of users accessing a specific feature of the Site or our service, in an anonymized manner. However, if it is possible to identify you directly or indirectly, we will treat the aggregated data as Personal Data, and they will be used in accordance with this Privacy Notice.

Sensitive Personal Data regarding religious belief, political opinion, and membership in a union or organization of a religious, philosophical, or political nature will not be requested by us. If this data is voluntarily provided by you, Coin Nodes will ensure that no Processing is carried out for discriminatory purposes.

How do we collect your Personal Data?

We use different methods to collect data from and about you, including through:

Direct Interactions

You may provide us with your Personal Data by filling out forms or corresponding with us by mail, telephone, email, or other means. This includes information you provide when:

  • Requesting a demonstration of our products or services;
  • Creating an account on our Site and platforms;
  • Contracting our service or subscribing to our publications;
  • Requesting marketing communications to be sent to you; or
  • Contacting us through the Whistleblower Channel;
  • Applying for open positions;
  • Sending your comments, requesting support, or contacting us.

Technologies or Automated Interactions

As you interact with our Site, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this data using cookies, server logs, and other similar technologies.

Through Third Parties

Coin Nodes may also collect Personal Data through client companies, business partners, suppliers, service providers, or other companies in our business group.

You warrant the truthfulness and accuracy of the data and personal information you provide. Coin Nodes has no responsibility in case of insertion of false data, inaccuracy, or omission of Personal Data, and it is your responsibility to provide them accurately and update them whenever necessary.

What purposes do we process your Personal Data for?

In general terms, your Personal Data is processed for the following purposes:

  • Registering you as a new customer;
  • Processing and delivering our products and/or services;
  • Managing our relationship with you, including responding to your requests, listening to suggestions and complaints, providing assistance and support;
  • Recruiting and selecting candidates to work with us;
  • Preventing and responding to real or potential fraud, or illegal activities;
  • Managing and protecting our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting);
  • Using data analysis to improve our website, products/services, marketing, customer relationship, and experiences;
  • Assessing and monitoring risks to the security of the Coin Nodes website and platform, improving and developing new security tools, including compliance with anti-money laundering and counter-terrorism financing guidelines;
  • Safeguarding Coin Nodes' rights in contracts and legal, administrative, or arbitration proceedings; and
  • Complying with the legal and regulatory obligations that we must fulfill.

We will always carry out the Processing of your Personal Data for a defined purpose and based on a legal basis established by the applicable data protection laws.

Do we share your Personal Data?

We may share your Personal Data with other companies within the business group, service providers, business partners, suppliers, or with government agencies and entities, for:

  • Provision and operation of services and/or products;
  • Safeguarding rights in contracts, judicial, administrative, or arbitration proceedings; or
  • Compliance with a legal or regulatory obligation, court order, or request from administrative authorities with legal competence to request it.

We require our partners and third parties to treat your Personal Data in accordance with applicable data protection legislation. We do not allow our third-party service providers to use your personal data for their own purposes, and we only allow them to Process your Personal Data for specific purposes and in accordance with our instructions.

How do we process WhatsApp messages sent on behalf of our customers?

Coin Nodes provides business customers with a platform to send messages and serve their contacts on WhatsApp, including through the official WhatsApp Business API (WhatsApp Business Platform, by Meta Platforms, Inc.). In these operations, the business customer is the Controller of its contacts' Personal Data, and Coin Nodes acts as a Processor: we process the data only to provide the service and according to the customer's instructions.

  • Data processed: the recipient's phone number and WhatsApp profile name, the content of sent and received messages, and delivery information (sent, delivered, read or failed), with date and time.
  • Purposes: sending the messages requested by the customer (notices, alerts, service notifications and support), recording the delivery status and allowing the customer to answer received messages.
  • Sharing: messages travel through Meta's infrastructure, subject to WhatsApp's terms and privacy policy. We do not sell this data or use it for our own purposes or for advertising.
  • Security: API access credentials are stored encrypted, and access to the records is restricted to the team responsible for the operation.
  • Retention: technical records are kept for the period needed to provide the service and comply with legal obligations, and are deleted afterwards.

Data subject requests about these messages are forwarded to the responsible business customer, and can also be sent directly to us through the channel listed at the end of this Notice.

Does Coin Nodes carry out International Data Transfers of Personal Data?

In the scope of our activities, we may carry out operations involving the International Transfer of your Personal Data. We are committed to ensuring an adequate level of protection for them, ensuring that at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that the Competent Authority has considered to provide an adequate level of protection for personal data;
  • When we use certain service providers, we may use specific contracts on the subject, which provide the necessary protection to personal data during the transfer.

What about automatic collection and use of cookies?

Occasionally, Coin Nodes may use cookies to allow you to navigate between pages efficiently, store your preferences, and enhance your browsing experience. Learn more about how to change or block cookies in our Cookie Policy!

What security measures do we adopt to protect your Personal Data?

We take the security of information seriously and make every effort to protect your Personal Data, avoiding incidents such as unauthorized access. We have adopted several technical and administrative measures, including (i) login and password access controls; (ii) data encryption methods; (iii) access log storage; and (iv) data backups.

Our security procedures are continuously optimized as new techniques become available.

In any case, we recommend that you also take measures to keep the device you use to access our Site secure, such as: using antivirus and firewall software; using the updated version of your operating system, browser or software; and not sharing access data (login and password) with third parties.

How long do we keep your Personal Data?

We keep your Personal Data for the period necessary to carry out our legitimate purposes. Once the purpose is fulfilled, your data will be deactivated or deleted.

You may also exercise your rights to object, to erasure or to withdraw consent. In these cases, we will review your request and, if it is due, delete the Personal Data from our databases.

However, in certain cases we will need to keep personal data to safeguard the rights of Coin Nodes in a proceeding and/or to comply with a legal or regulatory obligation, within the periods set by Brazilian law, especially labor and tax laws and regulations, those of the National Financial System, and those on preventing and combating money laundering and terrorist financing.

What are your rights?

You, as a data subject, have a number of rights regarding your Personal Data:

  • Confirmation of processing, access to the data and information about the processing, and, when the processing is based on your consent or on a contract, a full electronic copy of the Personal Data;
  • Correction of incomplete, inaccurate or outdated data;
  • Anonymization, blocking or deletion of Personal Data that is unnecessary, excessive or processed by Coin Nodes in breach of data protection rules;
  • Portability to another controller, in a structured and interoperable format;
  • Deletion of data processed with your consent;
  • Information about the public and private entities with which the controller has shared data;
  • Information about the possibility of not giving consent and its consequences;
  • Withdrawal of consent;
  • Objection, if you find that the processing breaches the applicable data protection law;
  • Review of automated decisions, that is, decisions made through artificial intelligence without human intervention;
  • Filing a complaint about your data against the controller with the ANPD.

We may need to ask for specific information to confirm your identity, a security measure to ensure your Personal Data is not disclosed to anyone else. We may also contact you for more information about your request in order to speed up our response.

We try to answer all lawful and legitimate requests within 15 (fifteen) calendar days.

How to request the deletion of your data?

To request the deletion of your Personal Data, send an email to contato@coinnodes.tech with the subject "Data deletion", stating your name and the phone number or email related to the data. If the data comes from WhatsApp messages sent on behalf of a business customer, please also state the name of that business.

We will confirm your identity, delete the data under our control and notify the responsible business customer, when applicable, within 15 (fifteen) calendar days. Data we must keep due to a legal or regulatory obligation will be deleted at the end of the required period.

How can I contact Coin Nodes?

If you have any questions or would like more information about this Privacy Notice, including any request to exercise your rights, please contact us:

COIN NODES LTDA — CNPJ 49.670.293/0001-03 Av. Engenheiro Luiz Carlos Berrini, 1748, suite 1710, São Paulo/SP, Brazil Email: contato@coinnodes.tech

When can this Notice be changed?

This Privacy Notice may be updated in case of changes in the Processing of Personal Data. We recommend that you revisit it often to stay aware of everything new.

Last updated: October 21, 2026.

Privacy policy | Coin Nodes