Privacy Policy

NAUTPLUS is operated by NautPlus Tecnologia Náutica Ltda. (“NAUTPLUS”, “we”). This Privacy Policy describes how we handle the personal data of site visitors, waitlist subscribers and users of the NAUTPLUS platform.

This document was prepared in compliance with Law No. 13,709/2018 (the Brazilian General Data Protection Law — “LGPD”), the Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014), the Consumer Protection Code (Law No. 8,078/1990), and other applicable rules.

By using our site or providing your data, you acknowledge the practices described here. If you do not agree, please do not use the site or provide your personal data.

For ease of reading, we adopt the concepts of the LGPD:

• Personal data: information relating to an identified or identifiable natural person.
• Sensitive personal data: data on racial or ethnic origin, religious belief, political opinion, health, sex life, genetic or biometric data, among others.
• Data subject: the natural person to whom the personal data relates.
• Processing: any operation performed on personal data, such as collection, use, access, storage, sharing, and deletion.
• Controller: the party that decides on the processing of data — in this case, NAUTPLUS.
• Processor: the party that processes personal data on behalf of the controller.
• Data Protection Officer (DPO): the person appointed to act as the communication channel between NAUTPLUS, data subjects, and the ANPD.
• ANPD: the Brazilian National Data Protection Authority.

3.1. Data you provide to us

• First and last name;
• Email address;
• Phone or WhatsApp, when provided;
• Interest profile (owner, marina, service provider, sailor, or shipyard) and other answers submitted in the waitlist or contact forms;
• Any content you voluntarily send us by email or through our support channels.

3.2. Data collected automatically

• IP address and access logs, with date and time, as required by the Brazilian Civil Rights Framework for the Internet;
• Device type, browser, operating system, and language;
• Pages visited, referral source, and interactions on the site;
• Cookie data and similar technologies (see the Cookies section).

We do not intentionally collect sensitive personal data through the site. Please do not send us such data unless necessary.

We process your data only for specific, legitimate purposes, always relying on one of the legal bases set out in art. 7 of the LGPD:

• Managing the waitlist and pre-launch — to record your interest, prioritize access, and notify you when it is your turn to receive the invitation. Legal basis: consent and preliminary procedures related to a contract.
• Responding to contacts and providing support — to handle your questions, requests, and suggestions. Legal basis: legitimate interest and preliminary contractual procedures.
• Sending communications and news about NAUTPLUS, when you choose to receive them. Legal basis: consent — you may unsubscribe at any time.
• Operating, maintaining, and improving the site — security, usage metrics, fraud prevention, and error correction. Legal basis: legitimate interest.
• Complying with legal and regulatory obligations, including the retention of access logs. Legal basis: compliance with a legal obligation.
• Exercising rights in judicial, administrative, or arbitration proceedings. Legal basis: regular exercise of rights.

Where processing is based on legitimate interest, we limit use to what is strictly necessary and safeguard your fundamental rights and freedoms.

Cookies are small files stored on your device. We use the following categories:

• Necessary cookies — essential to the operation of the site, such as remembering your language choice. They cannot be disabled.
• Performance and analytics cookies — help us understand, in aggregate, how the site is used, in order to improve it.
• Functionality cookies — remember preferences to provide a better experience.

Non-necessary cookies are only enabled with your free, informed, unequivocal, and granular consent. You may accept, reject, or manage categories, and withdraw consent at any time, in a simple manner, through the site's cookie settings or your browser.

This section follows the ANPD's guidance “Cookies and Personal Data Protection”.

We do not sell your personal data. We may share it, only as necessary, with:

• Service providers (processors) acting on our behalf — hosting, email delivery, analytics, CRM, and cloud infrastructure — contractually bound to protect the data and process it only per our instructions;
• Public authorities and regulators, when required by law, court order, or legitimate request;
• Third parties in corporate transactions (merger, acquisition, or restructuring), preserving confidentiality and the original purposes;
• Partners, only with your authorization where applicable.

Some of our providers may store or process data on servers located outside Brazil. In such cases, we adopt the safeguards required by arts. 33 to 36 of the LGPD to ensure an adequate level of protection, such as specific contractual clauses and the selection of providers with recognized security standards.

We keep your data only for as long as necessary for the purposes for which it was collected, observing:

• Waitlist data: until you join the platform, or until consent is withdrawn or a deletion request is made;
• Application access logs: for a minimum period of 6 (six) months, under art. 15 of the Brazilian Civil Rights Framework for the Internet;
• Data required to comply with a legal obligation or to exercise rights: for the corresponding legal periods.

Once the purposes and legal periods end, the data is securely deleted or anonymized.

We adopt technical and administrative security measures to protect data against unauthorized access and accidental or unlawful destruction, loss, alteration, or disclosure — including encryption in transit, access control, monitoring, and careful selection of providers.

No system is completely secure. In the event of a security incident that may create relevant risk or harm to data subjects, we will notify the ANPD and the affected data subjects, as required by law.

The LGPD (art. 18) guarantees you the following rights at any time, upon request:

• confirmation of the existence of processing;
• access to the data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the law;
• portability to another provider, upon express request;
• deletion of data processed on the basis of consent;
• information about the entities with which we share your data;
• information about the possibility of not consenting and the consequences of doing so;
• withdrawal of consent;
• objection to processing carried out on a basis other than consent, in case of non-compliance with the law.

To exercise any of these rights or clarify privacy questions, contact our Data Protection Officer (DPO) at dpo@nautplus.com.br. This service is free of charge and we will respond as soon as possible, within legal deadlines.

We may request additional information to confirm your identity and protect your data before fulfilling the request.

The NAUTPLUS site and platform are not intended for anyone under 18, and we do not intentionally collect data from children and adolescents. If we identify such collection without proper legal basis, the data will be deleted. Any processing of minors' data will observe their best interests, under art. 14 of the LGPD.

We may update this Policy at any time to reflect legal, technical, or business changes. The current version will always be available on this page, with the date of the last update. Material changes may be communicated through additional means.

Controller: NautPlus Tecnologia Náutica Ltda.. Data Protection Officer (DPO): dpo@nautplus.com.br. For general matters, you may also reach us through the channels listed in the site footer.

This Policy is governed by the laws of the Federative Republic of Brazil. The courts of the data subject's domicile are elected to settle disputes, without prejudice to the right of access to the ANPD and to consumer protection bodies.