PRIVACY POLICY

Last modified : July 22, 2023

This privacy policy (" Privacy Policy ") is intended to inform passengers and drivers (" Users ") about the guidelines for processing their personal data, made available for the use and exercise of the transport service offered by the digital application platform (" Platform ").

The information collected by the Platform is treated in accordance with the General Data Protection Law – Law No. 13,709/2018 – (LGPD), with the aim of providing the transport service and ensuring security in the management of data provided by Users.

Central  Pop Driver  (" Transporter "), provider of the passenger and/or object transportation service, is responsible for the operation of the digital application platform and acts towards Users as "Operator " in accordance with the provisions of the LGPD.

All data and information collected from Users will be incorporated into the Controller's database linked to the Transport Center, in accordance with the provisions of the LGPD.

Users' personal data, necessary to provide the transport service, are collected in accordance with the conscious and consensual provision of their holders.

By using the Platform and the service provided, the User freely and expressly consents to their data and information being processed in accordance with the rules set out in this  Privacy Policy . The rules provided may be changed at any time and will come into force as soon as they are made available for your access.

The use of the service provided presupposes acceptance of the terms of the Privacy Policy, expressly, when the User registers on the Platform.

The protection of Users' data and privacy follows the guidelines of Brazilian legislation, in particular the Marco Civil da Internet (Law No. 12,965/2014) and the General Data Protection Law (Law No. 13,709/2018).

1. USERS
   1.1. This  Privacy Policy  specifically applies to Users:
   (i)  Passengers : individuals who request or make trips, including those who travel at the request of other individuals, as well as those who request or receive product delivery orders.
   (ii)  Drivers : individuals who provide passenger and/or cargo transportation services through the digital application represented by the  Platform .

1. DATA COLLECTED
   2.1. When using the  Platform  , the User provides the Processing Agents with personal data essential for the provision of transport services.
   
   2.2. When using the Platform, the following personal data voluntarily transmitted by the User may be stored, which vary depending on the profile:
   (i)  Drivers: name, CPF, date of birth, sex, National Driving License (CNH) number, telephone, email, full address, model of transport vehicle, year of transport vehicle, license plate of transport vehicle, color of transport vehicle, identification of the owner of the transport vehicle, bank account information, PIX key, photo of the user, photo of driver's license, photo of proof of residence, photo of license with authorization to provide the service (if applicable), IMEI of customer restriction;
   (ii)  Passengers: name or company name (in the case of a business establishment), CPF or CNPJ (in the case of a business establishment), full address, telephone, email, identification photo, contact name identification (in the case of a business establishment), identification of the Facebook used by the user (in the event of a login linked to the social network);
   
   2.2.1. The data mentioned above will be required from Users during the registration procedure on the Platform and can be found in the specific display section.
   
   2.3. When using the contracted services, information related to the use of the Platform is also stored, such as:
   (i) Usage information: services contracted, professionals requested, routes taken, values, date, time and place of contracting the services, electronic correspondence, as well as the result of processing transactions with the payment processor;
   (ii) Access information: dates and times of each action and access, IP, geolocation data, error data, information about the device used, operating system and browser version, session ID, in addition to services that the User uses and how you use them;

1. PROCESSING OF PERSONAL DATA
   3.1. Personal data made available on the Platform, freely and consciously by Users, is treated in accordance with the LGPD to provide, maintain, protect, improve and develop the services provided.
   
   3.2. Personal data may be used to improve the Services, for the purposes of research, auditing, analysis and communication with customers, in addition to generating statistics, including consumption trends, in which case the information will be anonymized.
   
   3.2.1. Personal data voluntarily provided by Users may be used to send marketing messages and/or publicize services provided by Central de Transporte.
   
   3.2.2. By subscribing to the services provided by the Platform, Users consent to receive informative content of interest to them through the sending of personalized emails and text messages.
   
   3.3. Personal data may also be used and shared with service providers linked to the Platform who carry out the activities of data storage, customer service, conducting market research, satisfaction surveys and improving the Platform.
   
   3.3.1. By subscribing to the services provided by the Platform, Users consent to receive informative content of interest to them through the sending of personalized emails and text messages.
   
   3.4. By sending comments and feedback regarding the Platform, Users authorize the publication, use, analysis and processing of information made available in any marketing or advertising materials, in accordance with this Privacy Policy.
   
   3.4.1. The identification of the User is authorized through their registration name, company and city.
   
   3.5. Personal data will also be used to analyze and solve technical problems, as well as to identify, prevent and enforce fraud in the use of the Services.
   
   3.6. All stored data may be used by Processing Agents in the event of complying with a legal or judicial order, responding to requests from police, ministerial and administrative authorities, as well as to establish, defend or regularly exercise rights in a judicial or administrative context, in the form of law.
   
   3.7. Users' prior authorization will be requested to use personal data for purposes other than those defined in this Privacy Policy.
   
   3.8. Specifically with regard to the payment service carried out by credit card administrators, linked to the Platform, the choice of service provider, acquirer and gateway is the responsibility and responsibility of the Controller, and may be changed without any consultation or prior authorization from Users.
   
   3.9. The Platform uses technologies such as cookies, pixel tags, local storage or other identifiers, whether mobile or not, or similar technologies (“cookies and other technologies”), to authenticate the User’s account, promote and improve the Services, personalize the user experience and evaluate the effectiveness of communication and advertising.

1. SAFETY AND STORAGE
   4.1. The personal data collected is stored in cloud services linked to the world wide web, usually used by technology companies, provided by service providers with excellent security standards that may be located in Brazil or other countries, such as the United States of America (USA), Latin American and European countries.
   
   4.2. When contracting cloud data storage services, the Controller seeks companies that employ a high level of information security, establishing contracts that do not violate the privacy definitions provided for in this policy and applicable Brazilian laws.
   
   4.3. Processing Agents carry out their activities with the aim of protecting and securing Users' personal data, focusing on prevention and ensuring controlled access, preventing unauthorized alteration, disclosure or destruction of stored information, in compliance with the principle of confidentiality.
   
   4.4. Before accessing the services offered by the Platform, Users are subjected to a verification step to access the registered account in order to guarantee protection against unauthorized access to systems.
   
   4.5. Considering that no security system is absolutely safe, liability for any damages and/or losses resulting from failures, viruses or database invasions is excluded, except in cases of intent or negligence.
   
   4.5.1. It should be noted that the Platform uses security technology that invalidates improperly generated tokens.
   
   4.6. Any conscious compromise of access data, password and/or payment information must be immediately reported by Users in contact made through the service channel available on the Platform in its “Contact Us” section.
   
   4.7. Users must keep their personal data confidential and observe careful practices to not share access and security information, in compliance with their own privacy interests.

1. USER PRIVACY AND EXCLUSION OF PERSONAL DATA
   5.1. The personal data collected is always available on the Platform for the User to view.
   
   5.2. In the personal data section available on the Platform, Users will be able to check the personal information included in their personal registration.
   
   5.3. Personal data is processed by Processing Agents during the use of the services provided by the Platform and will be deleted in the event of: (i)
   Verification that the purpose has been achieved or that the data is no longer necessary or relevant to achieving the specific purpose desired;
   (ii) End of the treatment period;
   (iii) Communication from the holder, including the exercise of his right to revoke consent, safeguarding the public interest.
   
   5.4. In compliance with the General Data Protection Law, the User may, at any time, request the deletion of their personal data, aware that such a request will result in disconnection from the Platform and termination of the provision of the transport service.
   
   5.4.1. The deletion of the User's personal data will be carried out through the Platform in the “personal data” section through the option made available to expressly express the deletion of data.
   
   Passengers who wish to delete their data must follow the steps below:
   
   1 - Log in and access your application
   2 - Access the menu by clicking on the 3 dashes in the top left corner
   3 - Click on "My data", first option on the list
   4 - Click on "Delete account", last option on the list
   5 - Check the box "I have read and agree to the statement above"
   6 - Select the "Delete account" button
   After completing these steps, access your registered email and confirm your desire to delete the data.
   
   5.4.2. The exclusion of personal data will be carried out automatically by the Platform system after the express manifestation of the user.
   
   5.5. The User's personal data will be deleted after the deletion procedure of the account registered on the Platform, guaranteeing the anonymous condition provided for in the LGPD.
   
   5.6. The User's personal data may be kept in the database, even after account deletion, in the event of:
   (i) Compliance with legal or regulatory obligations by the Controller;
   (ii) Financial and/or administrative pending items related to the registration;
   (iii) Protection, in relation to the holder, of the regular exercise of their rights or provision of services that benefit them, respecting their legitimate expectations and fundamental freedoms.

1. SHARING OF PERSONAL DATA
   6.1. Processing agents do not share personal information with external companies, organizations and individuals, except in the following circumstances:
   (i) With the user's consent, in the manner authorized by the General Data Protection Law;
   (ii) For external processing, in compliance with the needs of the contracted service and due to previously provided consent;
   (iii) At the request of the holder;
   (iv) For legal reasons to: a) respond to requests from administrative authorities that have legal competence, in accordance with the Marco Civil da Internet; b) support and promotion of Parent Company activities; c) protection, in relation to the holder, of the regular exercise of their rights or provision of services that benefit them, respecting their legitimate expectations and fundamental rights and freedoms; and d) in the event of a merger, acquisition or sale of the Controlling Company's assets, respecting the User's prior consent, privacy and prior communication, in accordance with the LGPD.
   
   6.2. Information that is not personally identifiable may be shared with independent service provider partners within the Platform, such as publisher sites, advertisers or related sites.
   
   6.3. Personal data may be transferred to service providers linked to the Platform located in other countries, such as the United States of America, European Union countries and Latin America, in order to carry out preliminary procedures relating to the services provided to Users, as well as to obtain information that may contribute to the improvement of the Platform.
   
   6.4. In any case of sharing with partners located in other countries, it is contractually established that the partner has data protection and information security standards compatible with this privacy policy, so that confidentiality and privacy are always guaranteed.

1. GENERAL PROVISIONS
   7.1. This  Privacy Policy  may be revised at any time, making changes to this page. Any significant changes to the  Privacy Policy  will be informed through a notice on the  Platform  and/or notified by sending an email to  Users .
   
   7.2. It is recommended that  Users  periodically review this  Privacy Policy  to learn the latest information about data management practices.
   
   7.3. Pursuant to the LGPD rules, the Operator and the Controller are jointly considered as “ Processing Agents ”.
   
   7.4. The present Privacy Policy  will be interpreted in accordance with Brazilian legislation, in the Portuguese language, with the forum of the central district of Governador Valadares being elected to resolve any dispute, question or doubt arising, with the express waiver of any other, however privileged it may be.