Privacy Policy

KryzerHub and the Kryzer Digital brand are currently operated by NEXTO COMERCIO ELETRONICO LTDA, Brazilian company registered under CNPJ 50.161.003/0001-85.

This Policy explains how we process personal and operational data when users access our website, use KryzerHub, or connect accounts, stores, marketplaces, APIs and other third-party services to the platform.

This Policy applies to the Kryzer Digital website, KryzerHub and the features, integrations and services made available through the platform. Third-party services connected to KryzerHub remain subject to their own terms and privacy policies.

Depending on the features used, we may process account and contact data; business and store information; technical integration credentials and identifiers; product, listing, price, inventory, order, logistics, fee and performance data; end-customer information received from marketplaces when required to perform the authorized operation; access records, IP address, device, browser, logs and security events; and support communications.

We do not ask users to provide personal data beyond what is necessary for the service. Sensitive credentials and integration tokens must be handled on a restricted basis and only to enable features authorized by the user.

Data may be provided directly by the user, generated through use of the platform, or received from connected services with authorization, including marketplaces, management systems, authentication providers, payment services and other integrations enabled by the user.

We process data to provide and manage accounts; authenticate users; connect authorized services; synchronize products, orders, inventory and operational information; perform automations configured by the user; provide support; send service-related communications; protect the platform against fraud, abuse and unauthorized access; maintain technical and audit records; comply with legal obligations; and improve product security, performance and user experience.

When artificial intelligence features or external assistants are enabled by the user, only data necessary for the requested action and authorized feature may be sent to the relevant provider, according to the user's configuration and instructions.

Personal data is processed in accordance with the Brazilian General Data Protection Law (LGPD). Depending on the context, processing may be based on performance of a contract or preliminary procedures, compliance with a legal or regulatory obligation, exercise of rights, legitimate interests, or consent when required.

We may share strictly necessary data with providers supporting platform operations, including cloud hosting and infrastructure, database, authentication, monitoring, support, payment and authorized integration providers. We may also share data with marketplaces and other connected platforms when required to perform an action requested or authorized by the user.

We do not sell personal data of users or end customers.

When connecting a marketplace account, including TikTok Shop, Mercado Livre, Shopee or another supported channel, the user authorizes KryzerHub to access and process data allowed by the granted scope solely to provide the contracted and authorized features. Access may be revoked by the user or by the source platform through the mechanisms available there.

Kryzer uses cloud infrastructure providers. Data may be stored or processed in Brazil and the United States, as well as other locations that may be used by authorized providers or integrations. Where personal data is transferred internationally, we seek to apply mechanisms and safeguards consistent with applicable law.

We retain data for as long as necessary to provide the service, fulfill legitimate purposes, comply with legal obligations, and preserve security and audit records. When the contractual relationship ends, data under our control will be deleted or anonymized within a reasonable operational period, except where retention is required by law, needed for the exercise of rights, or technically necessary during limited backup cycles.

We apply technical and organizational measures proportionate to risk to protect data against unauthorized access, loss, alteration, disclosure or improper destruction. Measures include access controls, authentication, event logging, encrypted connections, credential management and vulnerability review. No system is completely immune from incidents, and controls are reviewed as the platform and risk environment evolve.

Under the LGPD, data subjects may request, where applicable, confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, withdrawal of consent, objection, and review of decisions based solely on automated processing, subject to applicable legal and technical limitations.

The website and application may use cookies and local storage required for authentication, session management, preferences, security and platform functionality. Additional measurement or third-party features, when used, may be subject to specific controls and policies.

KryzerHub is a business and professional tool and is not directed to children. We do not intentionally seek to collect children's data outside situations where such data is lawfully processed by a seller or connected platform and is strictly necessary for an authorized operation.

We may update this Policy to reflect legal, technical or operational changes. The latest update date will be shown on this page. Material changes may also be communicated through platform channels.

Privacy, data protection and data-subject requests may be submitted through the official support channels available in KryzerHub and on the Kryzer Digital website. Requests will be reviewed and handled in accordance with applicable law and may require identity verification.