KRATOR+ Privacy Policy

Section 1

Introduction

KRATOR+ respects user privacy and is committed to protecting the personal information of everyone who uses the platform. This Privacy Policy describes, in plain and accessible terms, what personal information KRATOR+ collects, why it is collected, how it is used, who it may be shared with, and the rights available to users in connection with their information.

KRATOR+ is operated by MAMA BIA. MAMA BIA is responsible for overseeing privacy and data protection practices across the platform, including the implementation of the technical and organizational measures described in this Policy, and serves as the point of contact for privacy-related inquiries.

This Privacy Policy applies to all products, features and services offered under the KRATOR+ brand, including the website, applications, and any related services that reference this Policy. By accessing or using KRATOR+, users acknowledge that their personal information will be handled in accordance with the terms described below.

Section 2

Information We Collect

KRATOR+ collects personal information in a limited and purposeful way: to operate the platform, provide the services users request, maintain security, and comply with applicable legal obligations. The categories of information collected are described below.

Name

Collected when a user creates an account, contacts support, or otherwise provides identifying information in connection with the platform.

Email Address

Used to create and secure a user's account, deliver service communications, and respond to inquiries submitted to KRATOR+.

Phone Number

Collected where provided by the user, for account verification, security purposes, or where required to deliver a specific feature of the platform.

IP Address

Collected automatically as part of standard network communication, and used for security monitoring, fraud prevention, and to approximate general geographic location where relevant to the service.

Device Information

Includes details such as device type, operating system and unique device identifiers, collected to ensure the platform functions correctly across different devices and to support security controls.

Browser Information

Includes browser type, version and language settings, collected to optimize how the platform is displayed and to diagnose technical issues.

Usage Data

Information about how a user interacts with KRATOR+, including features accessed, pages viewed, and the frequency and duration of use, collected to understand and improve the service.

Technical Logs

System-generated records of platform activity, including timestamps and error data, used for security monitoring, troubleshooting, and maintaining the reliability of the service.

Support Requests

Information submitted when a user contacts KRATOR+ support, including the content of the request and any information reasonably necessary to resolve it.

User Communications

Records of communications between a user and KRATOR+, including messages sent through the platform's official channels, retained to maintain service quality and resolve disputes.

Section 3

How We Use Information

Personal information collected by KRATOR+ is used only for defined and legitimate purposes connected to the operation of the platform. These purposes include:

• Operating the platform — delivering the core functionality that users request when accessing KRATOR+.
• User authentication — verifying identity to protect accounts from unauthorized access.
• Customer support — responding to inquiries, troubleshooting issues, and providing assistance to users.
• Security monitoring — detecting and responding to potential threats, unauthorized access, or misuse of the platform.
• Fraud prevention — identifying and preventing fraudulent activity connected to accounts or transactions.
• Compliance with legal obligations — meeting requirements imposed by applicable law or regulatory authorities.
• Service improvements — analyzing how the platform is used to guide the development of new features and correct existing issues.
• Communications with users — sending information related to the service, including updates, security notices, and responses to support requests.

KRATOR+ does not use personal information for purposes incompatible with those described in this Policy without first providing notice and, where required by applicable law, obtaining consent.

Section 4

Cookies and Tracking Technologies

KRATOR+ uses cookies and similar tracking technologies to operate the platform reliably, understand how it is used, and remember user preferences. Cookies used by KRATOR+ fall into the following categories.

Users can manage or disable cookies at any time through their browser settings. Disabling certain cookies, particularly essential cookies, may affect the availability or functionality of parts of the platform.

Section 5

Information Sharing

KRATOR+ does not sell personal information. Information is shared only where necessary to operate the platform, comply with applicable law, or protect the rights, property or safety of KRATOR+, its users, or others. Categories of recipients with whom information may be shared include:

• Service providers — third parties engaged to perform functions on behalf of KRATOR+, such as customer support or payment processing, under contractual confidentiality obligations.
• Hosting providers — infrastructure providers responsible for storing and processing data required to operate the platform.
• Security providers — third parties that support the detection and prevention of fraud, abuse, or security incidents.
• Legal authorities — where required to comply with a valid legal process, such as a court order or subpoena.
• Regulatory bodies — where required under applicable law or in response to a lawful request from a competent regulator.

Section 6

Data Retention

KRATOR+ retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy. Retention periods are determined based on the nature of the information and the purpose for which it was collected, and generally correspond to the need to:

• Provide the services requested by the user;
• Comply with applicable legal, tax, or regulatory obligations;
• Resolve disputes and enforce agreements; and
• Apply the KRATOR+ Terms of Service.

When personal information is no longer required for these purposes, it is securely deleted or anonymized in accordance with MAMA BIA's internal data retention procedures.

Section 7

Data Security

MAMA BIA maintains technical and organizational measures designed to protect personal information processed in connection with KRATOR+ against unauthorized access, loss, misuse or disclosure. These measures include:

• Encryption — protecting information in transit and, where appropriate, at rest.
• Access controls — restricting access to personal information to individuals who require it to perform their function.
• Monitoring systems — continuously monitoring platform activity to detect anomalies and potential security incidents.
• Security reviews — periodic assessment of systems and processes to identify and address vulnerabilities.
• Incident response procedures — defined processes for identifying, containing and responding to security incidents, including notification where required by applicable law.

While MAMA BIA takes reasonable steps to protect personal information, no method of transmission or storage is completely secure, and KRATOR+ cannot guarantee absolute security.

Section 8

User Rights

Depending on the jurisdiction in which a user is located, applicable data protection law — including frameworks such as the General Data Protection Regulation (GDPR) and Brazil's Lei Geral de Proteção de Dados (LGPD) — may grant specific rights in relation to personal information. KRATOR+ supports the exercise of these rights, which generally include:

Access

The right to request confirmation of whether personal information is being processed, and to obtain a copy of that information.

Correction

The right to request that inaccurate or incomplete personal information be corrected or updated.

Deletion

The right to request the deletion of personal information, subject to applicable legal retention requirements.

Data Portability

The right to receive personal information in a structured, commonly used format, and to request its transfer to another provider where technically feasible.

Objection

The right to object to the processing of personal information carried out on certain legal bases, including for direct marketing purposes.

Restrict Processing

The right to request that the processing of personal information be limited under certain circumstances, such as while the accuracy of the information is being verified.

Requests to exercise these rights may be submitted using the contact details provided in Section 12. KRATOR+ will respond to verified requests within the timeframe required by applicable law.

Section 9

International Transfers

Personal information collected by KRATOR+ may be processed in countries other than the country in which a user is located, including where MAMA BIA's service providers or infrastructure are based. Where personal information is transferred internationally, MAMA BIA adopts appropriate safeguards designed to ensure the information continues to receive a level of protection consistent with this Policy and applicable data protection law, regardless of where it is processed.

Section 10

Children's Privacy

KRATOR+ is not directed to children, and the platform is not intended for use by individuals below the age at which they may lawfully consent to the processing of their personal information without parental or guardian authorization under applicable law. KRATOR+ does not knowingly collect personal information from children outside of the circumstances permitted by applicable law. Where MAMA BIA becomes aware that personal information has been collected from a child without the appropriate legal basis, it will take reasonable steps to delete that information.

Section 11

Changes to this Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in KRATOR+'s practices, the services offered, or applicable legal requirements. Material changes will be reflected by updating the date below, and, where required by applicable law, users will be notified through appropriate channels prior to the change taking effect. Continued use of KRATOR+ following an update constitutes acknowledgment of the revised Policy.

Last Updated

July 2026

Section 12

Contact Information

Questions, requests, or concerns regarding this Privacy Policy or the handling of personal information on KRATOR+ may be directed to the department responsible for privacy and data protection, listed below.