ADD SOLUTION
PRIVACY & DATA PROTECTION

Your information deserves the same care we devote to technology.

Privacy, security and transparency are part of how we build relationships.

PRIVACY+SECURITY+TRANSPARENCY+RESPONSIBILITY
Version 1.0 · Last updated: August 17, 2026
01

About this Policy

This Policy clearly and transparently explains how ADD SOLUTION S/A (“Add Solution”, “we”, “us” or “our”) processes personal data. It applies when we act as a Controller, including in connection with our website, forms, sales channels, recruitment, events, communications and business relationships. When providing technology services, we may act as a Processor, following the relevant Controller’s instructions and the applicable contractual terms.

02

Who is responsible for your data?

When Add Solution determines the purposes and essential means of processing, it acts as the Controller. ADD SOLUTION S/A · CNPJ 13.272.636/0001-34 · Rua José Gomes Dias, 1234, Parque São Miguel, São José do Rio Preto, São Paulo, postal code 15057-508, Brazil · +55 17 3513-6767 · contato@addsolution.com.br.

03

Principles that guide processing

Purpose, suitability, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability guide our practices in accordance with applicable law.

04

Our role depends on our relationship with the data

We act as a Controller when we determine why and how data will be processed, such as for sales contacts, leads and job applicants. When providing services to clients, we may act as a Processor and process data in accordance with documented instructions, the contracted scope and applicable obligations.

05

What data may we process?

Depending on the interaction and need, we may process identification, contact, business-context, browsing, recruitment and security data. This may include name, position, company, email address, telephone number, location, area of interest, message, campaign parameters, résumé, logs and security events.

Never send passwords, credentials, tokens or keys through the contact form.
06

How do we receive data?

Directly from you when you complete forms, request contact, take part in a process or interact with us; automatically through cookies, logs and technologies that are actually enabled; or through professional and business relationships with clients, partners and representatives.

07

Why do we use personal data?

To respond to requests, prepare proposals, understand needs, maintain relationships, manage contracts, provide services and support, conduct recruitment, send authorized communications, analyze and improve the website, prevent abuse, protect systems, meet obligations and exercise rights.

08

What is the legal basis for using your data?

Processing does not always depend on consent. Depending on the context, it may be based on consent, pre-contractual procedures and a contract, a legal or regulatory obligation, legitimate interests following an assessment, the regular exercise of rights, or another basis provided by law.

09

Communications and marketing

Contact details may be used for content, news, events and commercial communications when there is a legal basis. When used, marketing consent must be separate, clear, optional and revocable, without preventing us from handling a request supported by another legal basis.

10

Cookies and analytics technologies

The website may use necessary, functional, analytics and marketing cookies for operation, security and usage insights, depending on the technologies actually enabled. Specific providers will only be listed once they have been approved and implemented; non-essential technologies that require consent must not load before the user makes a choice.

11

Job applicants and career opportunities

Application data may be processed to assess qualifications, make contact, conduct interviews, manage the process and meet obligations. Job applicants are not automatically repurposed as sales leads or subscribed to marketing communications.

12

With whom may we share data?

Add Solution does not sell personal data. We may use service providers needed for our operations and disclose data to meet a legal obligation, respond to a competent authority, exercise rights, protect security or carry out a corporate reorganization, subject to applicable safeguards.

13

May your data be processed outside Brazil?

The website’s main infrastructure is located in Brazil. Current or future service providers may process data in other countries. Where an international transfer occurs, we will adopt the mechanisms and safeguards provided by law, without claiming that specific transfers occur unless supported by evidence.

14

How do we protect information?

We adopt technical, administrative and organizational measures appropriate to the context and risks to protect data against unauthorized access, loss, alteration, disclosure or improper processing. No system is completely immune to risk.

15

How long do we retain data?

As a general corporate rule, data covered by this Policy may be retained for up to five years, depending on the context and purpose. The period may vary due to a legal obligation, contract, the exercise of rights, fraud prevention, security, auditing or an order from a competent authority.

16

Your data. Your rights.

Under applicable law, you may request confirmation, access, correction, anonymization, blocking or deletion, data portability, information about sharing, withdrawal of consent, objection and rights relating to automated decisions, as applicable.

17

Children and adolescents

The corporate website and sales channels are primarily intended for organizations and professionals. We do not intentionally seek to collect data from children or adolescents through these forms. Any identified situation will be assessed in accordance with the law.

18

Automated decisions

Automation may support technology, operational, security, marketing or analytics processes. If solely automated decisions are made that affect a data subject’s interests, the applicable rights and transparency requirements will be observed.

19

Incidents involving personal data

We maintain processes to identify, assess and address security events. Where legal requirements are met, we will make the necessary notifications to Brazil’s National Data Protection Authority (ANPD) and affected data subjects, as applicable.

20

When we process data on behalf of clients

For technology, infrastructure, support, monitoring or operations services, the client may act as the Controller and Add Solution as the Processor, following documented instructions, the contracted scope and legal and contractual responsibilities.

21

Can this Policy change?

Yes. Technologies, services, processes and legal requirements evolve. The current version will always be available on this page, and material changes may be communicated through additional channels where appropriate. Version 1.0 · August 17, 2026.

21

Data Protection Officer

Tatiane Davantel

The Data Protection Officer serves as the point of contact for matters relating to personal data protection.

tatiane@addsolution.com.br+55 17 3513-6767
23

Privacy also begins with a transparent conversation.

Contact us with questions or requests, or to exercise your rights. We may request information that is strictly necessary to confirm your identity. You may also submit a petition to Brazil’s National Data Protection Authority (ANPD).