Políticas de privacidade

Políticas de privacidade

Your privacy and the security of your personal data are of utmost importance to us at Bankei (Bankei Soluções em Tecnologia LTDA). This Privacy Notice has been prepared to explain clearly and transparently how we collect, use, share, and protect your personal information. Our commitment is to ensure that you have full control over your data and understand how it is handled in every interaction with Bankei.


In this document, you will find detailed information about the types of data we collect, the purposes for which we use them, and the rights you have regarding this information. We believe transparency is fundamental to building and retaining the trust you place in us.


Please read this notice carefully. It has been designed to be understandable and accessible, avoiding technical jargon whenever possible. If, after reading, you have any questions or require further clarification, please do not hesitate to contact us. We are always available to ensure that you feel comfortable and confident with how we handle your personal information.


Remember: by using our services, you agree to the practices described in this Privacy Notice. However, we want that agreement to be based on your clear and conscious understanding of our policies.

Introduction


At Bankei, we understand that the digital revolution in the financial sector brings not only incredible opportunities but also great responsibilities. As an innovative fintech, we are at the forefront of transforming banking services by offering agile, efficient, and personalized financial solutions. However, we recognize that such innovation is genuinely valuable only when accompanied by an unwavering commitment to protecting the privacy and security of our customers’ data.


Our data security approach rests on three main pillars: transparency, user control, and state‑of‑the‑art security. We believe you have the right to know exactly how your information is used, to have control over it, and to trust that it is safeguarded by the most advanced security systems available.


Throughout this document, we explain how these principles apply in every aspect of our interaction with your personal data. From the moment you register on our platform to every transaction you perform, we are committed to keeping your data secure and using it ethically and responsibly.


We understand that trust is the foundation of any relationship. Therefore, our privacy and data security policy is not just a static document—it is a living commitment that evolves continuously to meet your expectations and best industry practices.


We invite you to explore this document and familiarize yourself with our practices. Your understanding and trust are paramount to us, and we welcome feedback and suggestions to further enhance our approach to privacy and data security.

Scope of Application


This section outlines the scope of our privacy and data security policy, explaining who it covers and the types of personal data we collect.


Our privacy and data security policy applies to all individuals who interact with Bankei, including active, inactive, and prospective customers. This includes those who use our app, visit our website, request or use our products and services, participate in surveys or promotions, or contact us by any means. It also includes representatives, proxies, guardians, curators, employees, or partners of customers or entities with whom we maintain business relationships, as well as third parties who interact with these individuals through our app.


Bankei collects various types of personal data, always with the objective of providing safe, personalized, and efficient financial services. Below, we detail the categories of data we collect and their respective purposes:



Personal Data Provided by the Data Subject:

These are the data you provide directly, such as name, CPF, address, email, phone number, and others. We collect this data to identify you, contact you, and deliver our financial services. They are essential for creating and maintaining your account, complying with regulatory obligations, and ensuring transaction security.


Profile‑Related Data:

Includes information about your financial situation, credit history, and investment preferences. We collect this data to personalize our services, assess credit risk, and offer products that match your financial profile. This information helps us make informed decisions about loans, credit limits, investment recommendations, and identifying suspicious transactions.


Biometric Data:

We use facial or fingerprint recognition technology to enhance account security and prevent fraud. These data are collected during registration and in certain high-risk transactions, and can be used via your registered mobile device for app access and/or transactional validation. The goal is to ensure that only you have access to your account, protecting it from unauthorized access and securing your transactions.


Navigation and Device Data:

We collect information on how you interact with our app and website, including IP address, device type, operating system, and usage patterns. These data help us improve user experience, detect and prevent suspicious activity, and optimize the performance of our digital platforms.


Data Arising from Use of Our Products and Services:

This includes information related to your transactions, account balances, payment history, and use of specific products. The purpose is to provide continuous and efficient service, detect unusual patterns that may indicate fraud, and develop new products and services tailored to your needs.


Publicly Available Data:

We may collect information about you that is publicly accessible, such as data from public records or information you make available on digital media. The purpose is to complement our understanding of your profile, verify information for fraud prevention, and comply with KYC (know your customer) regulatory obligations.

Storage and Processing of Data and Files


At Bankei, the storage and processing of your data and files are carried out with the utmost care and in strict compliance with applicable laws and regulations, notably the General Data Protection Law (LGPD). Our commitment is to deliver a superior, secure, and personalized banking experience, using technology ethically and responsibly.


Retention Period:

In accordance with legal requirements—including the Civil Code, regulations from the Central Bank of Brazil, the Securities and Exchange Commission, and the Federal Revenue Service—we retain your identification data, transaction records, contracts, and related information for a minimum period of 10 (ten) years. This timeframe is essential to comply with legal and regulatory obligations and to protect interests in case of future disputes or needs.


We collect and process various data types to ensure service functionality, security, compliance, and fraud prevention, as detailed below:


Identification Data: User ID, full name, CPF, RG, CNH, address, email, phone number, date of birth, nationality, and parents’ names (if available).


Financial Data:

Including monthly income, transaction information, and other relevant financial details.

Usage and Device Data:

Approximate location, app performance info, crash logs, in‑app activity, and device identifiers.


Biometric Data:

User photo and identity document for verification.


Call Recordings:

When you contact our call center.


Data Processing:

We use a combination of processes, such as machine learning and artificial intelligence, to analyze your financial profile, offer appropriate products and services, detect and prevent fraud, and continually improve our operations.

Data Eligible for Deletion:

Upon your request, we can delete or anonymize certain data that are not essential to legal or regulatory obligations, including: App performance information and non‑transaction-related crash logs, provided they are not inextricably linked to your identity data, Approximate location history, as long as it is not tied to any Bankei‑performed validation, Marketing and personalization preferences.

Data That Must Be Retained:

Identification, financial, biometric, and usage & device data, except where eligible for deletion as described, must be retained.


Privacy Commitment:

We ensure that all data is processed with the highest respect for your privacy. We implement rigorous security protocols and continuously review and improve our processes to align with best industry practices.

Transparency and Control:

We keep you informed about how your data is used and provide mechanisms for you to exercise your rights as the data subject, including access, correction, and, where applicable, deletion of your information.



Bankei is committed to responsible and transparent data usage, always balancing legal obligations with respect for your privacy and control over your personal data.

Data Sharing


At Bankei, we recognize that data sharing is a necessary component of modern financial operations, but we also fully appreciate its sensitivity. In this section, we explain transparently how and why we share your personal data, with your privacy and security as our top priority.


Data sharing is conducted only when necessary to provide our services, comply with legal obligations, or enhance your financial experience. We divide this into four main categories:


Sharing with Other Companies in the Bankei Group:
When required, we may share your data with other companies within our corporate group to offer a broader range of integrated financial services—all aimed at providing you with a more complete and personalized experience.


Business Partners and Service Providers:
We work with carefully selected partners who assist us in various operations, such as payment processing, fraud/credit analysis, or technology services. These partners are contractually bound to maintain the confidentiality of your data and use it only for specific, agreed-upon purposes.


Authorities and Regulatory Bodies:
In certain situations, we are legally required to share information with governmental and regulatory authorities, such as the Central Bank of Brazil or the Federal Revenue Service. This includes requirements related to anti-money laundering or judicial orders.


At Your Request:
We respect your right to control your data. Upon your request—such as for data portability to other institutions—we will comply after completing appropriate security checks.

In all sharing scenarios, we employ strict safeguards to protect your data, including advanced encryption, robust confidentiality agreements with our partners, and stringent access controls.

Whenever possible, we offer options to control how your data is shared. If you have specific questions about data sharing, please contact us for detailed information or clarification.

Rights as a Personal Data Subject


At Bankei, we believe empowering our customers with control over their personal data is essential to building trust. This section details the rights you have as a data subject and how you can exercise them. Our commitment is to ensure these rights are respected and implemented efficiently and transparently.


As a data subject, you have rights guaranteed by the General Data Protection Law (LGPD) and other applicable regulations, including:


Confirmation and Access:

You have the right to know whether we process your personal data and, if so, to access that information, including obtaining a copy.


Correction:

You may request the correction of incomplete, inaccurate, or outdated data to ensure it remains precise and current.


Anonymization, Blocking, or Deletion:

In certain circumstances, you can request anonymization, blocking, or deletion of data that are unnecessary, excessive, or processed in non-compliance with LGPD.


Portability:

Where regulated by the National Data Protection Authority (ANPD), you may request the portability of your personal data to another service provider.


Information on Sharing:

You have the right to be informed about the public and private entities with which we share your data.


Withdrawal of Consent:

If data processing is based on your consent, you may withdraw it at any time, and be informed of the implications.


Objection:

In certain situations, you can object to data processing and be notified of the consequences.


To exercise any of these rights, please contact our dedicated privacy email. Upon receiving your request, our specialized team will act promptly and efficiently.


Please note that while we strive to accommodate all requests, some limitations, legal or operational, may prevent full compliance. In those cases, we will clearly explain the reasons and seek alternatives to address your request.


We also ensure that exercising these rights does not negatively impact the quality of the services we provide. Our tech team continuously integrates these rights into our systems to ensure efficient and secure handling of data-subject requests.


We recognize that understanding these rights can be complex. Therefore, in addition to providing clear policy information, we may offer educational materials and personalized support to help you understand and effectively exercise your rights.


Your right to privacy and control over your personal data is a top priority at Bankei. We continue to invest in technologies and processes that make it easier for you to exercise these rights, always balancing data protection with the provision of innovative and personalized financial services.

Other Provisions


This section covers additional important aspects of our privacy and data security policy. These provisions complement the information provided earlier and aim to offer a more comprehensive understanding of how Bankei protects and manages your personal data.


Security Measures:

At Bankei, your data security is our highest priority. We implement state-of-the-art technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, advanced firewalls, intrusion detection systems, and continuous monitoring of our infrastructure. We also conduct regular security audits and continuously train our team in best practices of information security.


Legal Bases for Processing:

The processing of your personal data complies with legal bases under LGPD, the Civil Code, the Consumer Protection Code, and Banking Secrecy Law, as well as directives from the Central Bank, COAF, Federal Revenue Service, and CVM. Depending on the nature of the processing, we rely on your consent, contractual necessity, legal or regulatory compliance, or legitimate interest—always balancing the latter with your fundamental rights and freedoms.


Consent:

Accessing and using our services implies your consent to data processing as described in this policy. In specific cases—such as Open Finance and the Credit Information System (SCR)—we may request explicit consent via checkbox or a similar process.


Legitimate Interest:

When processing is based on legitimate interest, we conduct thorough assessments to ensure it is justified and does not harm your rights. Examples include fraud prevention or service improvement.


Data Retention and Deletion:

We retain your personal data only for the time necessary to fulfill their purposes, including legal, accounting, or reporting obligations. The retention period varies by data type and purpose. For example, we are required to retain certain data for specific periods to comply with demands from the Central Bank of Brazil, the Securities and Exchange Commission, and other regulatory bodies. When data is no longer needed, it will be securely deleted or anonymized.


Changes to the Privacy Policy:

Our privacy policy may be updated periodically to reflect changes in our practices or in response to new regulations. Whenever significant changes occur, we may notify you via our app, website, or email. We recommend that you review our policy regularly to stay informed about how we protect your data.

Account and Personal Data Deletion


At Bankei, we respect your right to control your personal data, including the decision to terminate your relationship with us or request deletion of specific information. This section details the procedures for account deletion and personal data removal, ensuring a transparent and efficient process.


Account Deletion:

If you decide to close your Bankei account, we offer several convenient options. If available, you may initiate the deletion process directly through our app, where you will be guided through screens explaining the implications and requesting necessary confirmations to ensure this action is intentional and secure.


Alternatively, you may request account deletion by contacting our customer center via our general support email. Upon receiving your request, one of our specialized agents will verify your identity and guide you through the closure process.


Please note that account deletion may require retention of certain data for specific periods to meet legal and regulatory obligations.


Personal Data Deletion:

To request deletion of specific personal data without closing your account, please send an email to our privacy-specific channel, including your full name, CPF, and specifying which data you want removed from our platform.


Once we receive your request, our data protection team will carefully assess it. We will respond, detailing which data can be deleted and explaining reasons if certain data cannot be removed (e.g., due to legal or regulatory obligations).


In both cases—account or specific data deletion—we commit to processing your request promptly and transparently, taking all necessary steps to protect your privacy throughout the process.

Contact Us


At Bankei, we value open and transparent communication with our customers, especially regarding privacy and data security matters. We are always ready to hear your questions, concerns, or suggestions. This section outlines the communication channels available for contacting us on privacy and data protection issues.


Customer Service Center:

For general inquiries about our services, our customer service hotline is available 24/7 at 0800-591-8305. Our representatives are trained to handle a wide range of issues and, if needed, can escalate Privacy matters to our specific data protection team.


General Support Email:

For written communications about any aspect of our services, you can email [email protected]. This channel is continuously monitored.


Dedicated Privacy Channel:

Recognizing the importance and sensitivity of privacy issues, we have established a dedicated email channel for these matters: [email protected]. This channel is managed directly by our data protection experts, ensuring your concerns are addressed with the highest level of care and expertise.


When contacting us, please provide sufficient information to verify your identity. This is crucial for protecting your privacy and ensuring we only discuss sensitive information with authorized individuals.


We are committed to responding to all inquiries promptly and comprehensively. If your issue requires further investigation, we will keep you informed of progress and an estimated timeline for complete resolution.


Your feedback is invaluable. We use the information and suggestions received through these channels to continually improve our data privacy and security practices.

At Bankei, we believe effective communication is critical to building and maintaining trust. We are here to listen and ensure your concerns about privacy and data security are always handled with the utmost seriousness and attention.

Bankei is in the process of registering with the Brazilian Securities and Exchange Commission (CVM).

Small business corporations and the offerings presented on this platform are automatically exempt from registration by the CVM. The CVM does not pre‐evaluate the offerings. The offerings made do not imply any guarantee from the CVM regarding the accuracy of the information provided, compliance with applicable law, or assessment of the small business’s quality. Before accepting an offering, please carefully read the essential information of the offering, especially the risk‐alerts section.

Bankei is in the process of registering with the Brazilian Securities and Exchange Commission (CVM).

Small business corporations and the offerings presented on this platform are automatically exempt from registration by the CVM. The CVM does not pre‐evaluate the offerings. The offerings made do not imply any guarantee from the CVM regarding the accuracy of the information provided, compliance with applicable law, or assessment of the small business’s quality. Before accepting an offering, please carefully read the essential information of the offering, especially the risk‐alerts section.

For You

For your business

Instagram
Instagram
Instagram
Instagram
Instagram

Bankei is currently undergoing the registration process with the CVM.

Small business corporations and the offers presented on this platform are automatically exempt from registration by the Brazilian Securities and Exchange Commission (CVM). CVM does not conduct prior analysis of the offers. The offers made do not imply any guarantee by CVM regarding the accuracy of the information provided, compliance with current legislation, or assessment of the quality of the small business corporation. Before accepting an offer, please carefully read the essential information about the offer, especially the risk warning section.