1. Purpose of this Annex
1.1. This Annex forms an integral part of the Privacy Policy (www.lexxen.com/privacy) and the Terms of Use (www.lexxen.com/terms).
1.2. Lexxen operates by integrating services provided by authorized institutions. This Annex informs you with whom your data is shared and for what purpose, in compliance with the duty of transparency under Article 9 of Law No. 13.709/2018 (LGPD, the Brazilian General Data Protection Law).
1.3. This Annex is updated whenever a partnership is added, replaced or terminated. The date above indicates the most recent revision.
1.4. Material changes will be communicated through the official channels.
2. How to read this Annex
| Role | Meaning |
|---|---|
| Partner (independent controller) | Authorized institution that provides the service and processes your data to comply with its own regulatory obligations, under its own privacy policy |
| Processor | Supplier that processes data exclusively under Lexxen's instructions, under contract |
3. Partners by purpose
3.1. Payment account
| Partner | Role | Purpose |
|---|---|---|
| Woovi | Independent controller | Opening and maintaining an individual payment account in the User's name; executing payment orders |
| Celcoin Instituição de Pagamento S.A. | Independent controller | Opening and maintaining a payment account; executing payment orders |
3.2. Card issuance
| Partner | Role | Purpose |
|---|---|---|
| Clara | Independent controller | Issuing and processing cards with a credit function |
| Raim, in partnership with Brasil Bitcoin | Independent controller | Issuing and processing cards backed by virtual assets |
3.3. Virtual assets: intermediation, conversion and custody
| Partner | Role | Purpose |
|---|---|---|
| Avenia | Independent controller | Intermediation and conversion of virtual assets; on-ramp and off-ramp |
| Brasil Bitcoin | Independent controller | Intermediation, conversion and custody of virtual assets |
| UnblockPay | Independent controller | Intermediation and conversion of virtual assets |
| Bridge | Independent controller | Intermediation of virtual assets and stablecoin infrastructure |
3.4. International accounts
| Partner | Role | Purpose |
|---|---|---|
| Bridge | Independent controller | Opening and maintaining international accounts in the User's name |
3.5. Identity verification and fraud prevention
| Supplier | Role | Purpose |
|---|---|---|
| Sumsub | Processor | Identity verification (KYC/KYB), liveness check, screening against sanctions and PEP lists |
3.6. Infrastructure
| Supplier | Role | Purpose |
|---|---|---|
| (to be filled in: cloud provider) | Processor | Hosting, processing and storage |
| (to be filled in: communications) | Processor | Sending transactional e-mails and notifications |
4. Sharing with authorities
Regardless of this Annex, data may be shared with public authorities where there is a legal obligation or an order to do so, including: the Council for Financial Activities Control (COAF, Brazil's financial intelligence unit), the Central Bank of Brazil, the Brazilian Federal Revenue Service, the Judiciary and law enforcement authorities.
Pursuant to Article 11 of Law No. 9.613/1998 (the Brazilian Anti-Money Laundering Law), the reporting of suspicious transactions is mandatory and may not be disclosed to the User.
5. International transfer
Some Partners and processors are headquartered abroad or process data outside Brazil. These transfers comply with Article 33 of the LGPD, as detailed in section 7 of the Privacy Policy.
6. Contact
Questions about this Annex: Siffermann Sociedade Individual de Advocacia, Thiago de Oliveira Rocha Siffermann (OAB/GO 40.724), compliance@lexxen.com
LEXXEN LTDA, CNPJ 63.987.111/0001-53 Goiânia/GO, updated on August 31, 2026