PRIVACY POLICY

1. Data controller

STOXS CLUB INOVA SIMPLES (I.S.), registered under Brazilian company number CNPJ 68.250.184/0001-81, is responsible for decisions regarding the processing of personal data described in this policy.

For questions or to exercise your rights, contact contato@stoxs.club.

2. Data we process

We may process identification and contact data, professional information, information submitted in applications, and technical information required for the website’s operation and security.

Do not send sensitive personal data or third-party information that is not necessary for the assessment. When providing co-founder data, confirm that you are authorized to share it with STOXS.

3. Purposes

We use personal data to:

• receive, organize, and assess applications and expressions of interest;
• identify contacts and maintain a relationship history;
• send links, invitations, and application-related communications via WhatsApp;
• contact you about assessments, alignment, and next steps;
• prevent abuse, fraud, and security failures; and
• comply with legal obligations and respond to requests to exercise rights.

4. Public startup profile

When the applicable authorization version expressly states this purpose, the public startup profile may display the entrepreneurs’ submitted name, role, LinkedIn, and WhatsApp. This information appears on the public startup profile to identify the team and enable direct contact about the company.

Public pages may be accessed, saved, and copied by third parties outside STOXS’s control. Other personal and contact data not expressly included in that authorization remain private and are not published on the profile.

You may withdraw the authorization or request removal of this information at contato@stoxs.club. Earlier authorizations whose version stated that contact details would not be displayed do not permit this publication and will not be converted retroactively.

5. Legal bases for processing

Depending on the purpose, processing may rely on your consent, preliminary procedures requested by you, compliance with legal obligations, and STOXS’s legitimate interest in protecting its processes and systems. Authorizations for WhatsApp contact, publication of responses, or image use are requested separately when applicable.

6. Sharing and storage

To the extent necessary, data may be shared with service providers that support hosting, storage, communications, relationship management, and security.

Some providers may process data outside Brazil, subject to applicable safeguards. STOXS does not sell personal data.

7. Retention

Data is retained for up to 24 months after the last application-related interaction. Information may be kept for longer when required to comply with a legal obligation, respond to an authority’s order, or exercise rights in administrative, judicial, or arbitration proceedings. It will then be deleted or anonymized in a manner compatible with the systems used.

8. Your rights

You may request confirmation and access, correction, information about sharing, portability when applicable, objection, withdrawal of consent, and deletion of data processed with consent, subject to legal retention requirements.

Send requests to contato@stoxs.club. We may request additional information to confirm your identity and protect data from unauthorized access.

9. Security and technical identifiers

We use technical and organizational controls to reduce the risk of unauthorized access, alteration, disclosure, or loss. No system is completely immune to incidents, but we review controls according to the nature of our operations.

We may use technical identifiers that are strictly necessary for the website’s operation and protection. They are not used for advertising.

10. Updates

This policy may be updated to reflect legal or operational changes. The current version will be published on this page with its last updated date.