Privacy · LGPD · transparency

Data needs a safe operation too.

This page explains, in plain language, what data we process, why we process it and how you can exercise your rights.

Last updated: 1 August 2026

How to read this policy

Five points you can follow without legalese.

On the site we may process data you give us voluntarily when you contact us by email or WhatsApp, plus the technical data required for security and operation, such as IP address, browser, access logs and session information. The SSO may process account identification and authentication data, including data received from the OAuth provider you chose.

We use data to answer enquiries, to provide and protect the services, to authenticate users, to prevent abuse, to keep security records and to meet legal obligations. We do not sell personal data.

We may use suppliers for infrastructure, hosting, email delivery, authentication and communication in order to run the services, always for the contracted purpose. When you choose WhatsApp, email or social sign-in, that interaction also becomes subject to those providers' own policies.

You may request confirmation of processing, access, correction, information on use and sharing, anonymisation, blocking, deletion where applicable, portability and review of automated decisions, subject to legal exceptions. You may also withdraw consent where that is the applicable basis.

We keep data for as long as the purpose, the security of the services and legal obligations require. We apply access controls, service separation, logging and technical measures proportional to the risk. No internet-connected environment is presented here as absolutely invulnerable.

Want to exercise a right?

Export and deletion are two screens inside your own account — no ticket, no waiting. For anything else, write to us with enough context. Do not send passwords or unnecessary sensitive data.

Export and deletionExport and deletion from your own account negocios@ukari.com.brWe answer through the appropriate channel, respecting identity checks and the applicable legal deadlines.
Verifiable

Check instead of trusting.

Every claim below links to somebody else's report, not to ours.

TLS and HSTS Check the grade at SSL Labs No third-party code Read the CSP at Mozilla Observatory LGPD, art. 18 Export and deletion from your own account security.txt Where to report a vulnerability (RFC 9116) Pix or card, via Mercado Pago No card number ever reaches our servers A public contract Cancellation, refund and data, in writing

Transparency:

this is the public view of the site's practices. Legal identification, suppliers and specific deadlines must be kept up to date in each product's contractual and operational documents.

Terms of service →