{"id":1010,"date":"2026-01-15T10:00:00","date_gmt":"2026-01-15T10:00:00","guid":{"rendered":"https:\/\/aridika.com\/?page_id=1010"},"modified":"2026-01-15T10:00:00","modified_gmt":"2026-01-15T10:00:00","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/aridika.com\/pt\/privacy-policy\/","title":{"rendered":"pol\u00edtica de Privacidade"},"content":{"rendered":"<p><strong>Last updated: 1 October 2026.<\/strong> This Privacy Policy explains how Aridika Research Lab O\u00dc (<em>&#8220;Aridika,&#8221; &#8220;we,&#8221; &#8220;us,&#8221; &#8220;our&#8221;<\/em>) collects, uses, discloses, transfers and protects personal data of visitors, prospective clients and account holders of aridika.com\/ and the Aridika autonomous AI crypto trading platform (<em>the &#8220;Service&#8221;<\/em>). This policy complies with the EU General Data Protection Regulation (Regulation (EU) 2016\/679, &#8220;GDPR&#8221;), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (collectively, &#8220;CCPA\/CPRA&#8221;), the Estonian Personal Data Protection Act of 2019, and other applicable data protection laws.<\/p>\n<div class=\"arx-pg-toc-pg34\">\n<h4>Sections<\/h4>\n<ul>\n<li><a href=\"\/pt\/#pp-controller\">1. Who the controller is<\/a><\/li>\n<li><a href=\"\/pt\/#pp-data\">2. The categories of personal data we collect<\/a><\/li>\n<li><a href=\"\/pt\/#pp-sources\">3. How we collect it<\/a><\/li>\n<li><a href=\"\/pt\/#pp-purposes\">4. The purposes for processing<\/a><\/li>\n<li><a href=\"\/pt\/#pp-legal\">5. Our legal bases under GDPR<\/a><\/li>\n<li><a href=\"\/pt\/#pp-sharing\">6. Who we share data with<\/a><\/li>\n<li><a href=\"\/pt\/#pp-international\">7. International data transfers<\/a><\/li>\n<li><a href=\"\/pt\/#pp-retention\">8. How long we keep data<\/a><\/li>\n<li><a href=\"\/pt\/#pp-rights\">9. Your rights<\/a><\/li>\n<li><a href=\"\/pt\/#pp-security\">10. How we protect data<\/a><\/li>\n<li><a href=\"\/pt\/#pp-children\">11. Children<\/a><\/li>\n<li><a href=\"\/pt\/#pp-ccpa\">12. California residents (CCPA\/CPRA)<\/a><\/li>\n<li><a href=\"\/pt\/#pp-changes\">13. Changes to this policy<\/a><\/li>\n<li><a href=\"\/pt\/#pp-contact\">14. How to reach the Data Protection Officer<\/a><\/li>\n<\/ul>\n<\/div>\n<h2 id=\"pp-controller\">1. Who the controller is<\/h2>\n<p>The data controller for personal data processed under this policy is <strong>Aridika Research Lab O\u00dc<\/strong>, incorporated under the laws of the Republic of Estonia, registration no. 14982200, with registered office at Rotermanni 12, Tallinn 10111, Estonia. Our Data Protection Officer is reachable at <a href=\"mailto:dpo@aridika.com\">dpo@aridika.com<\/a>.<\/p>\n<h2 id=\"pp-data\">2. The categories of personal data we collect<\/h2>\n<p>We collect only data that is strictly necessary for the purposes listed in Section 4. The categories include:<\/p>\n<ul>\n<li><strong>Identity data<\/strong> \u2014 full legal name, date of birth, nationality, country of residence, national identifier or passport number, a liveness selfie, and (where required by the law of the country of residence) tax identification number.<\/li>\n<li><strong>Contact data<\/strong> \u2014 email address, telephone number, physical address, preferred communication language.<\/li>\n<li><strong>Financial &amp; transactional data<\/strong> \u2014 funding method, deposit source, withdrawal destination, counterparty bank or wallet address, transaction history on your Aridika account.<\/li>\n<li><strong>Account data<\/strong> \u2014 Aridika username, hashed password, two-factor authentication binding, API keys you generate.<\/li>\n<li><strong>Technical &amp; device data<\/strong> \u2014 IP address, device fingerprint, browser type and version, operating system, time zone, access timestamps, language settings.<\/li>\n<li><strong>Usage data<\/strong> \u2014 pages visited, buttons clicked, dashboard sessions, support chat transcripts, calculator interactions, A\/B-test assignments.<\/li>\n<li><strong>Marketing &amp; preferences<\/strong> \u2014 subscription status to the Signal Letter, consent to marketing emails, preferred frequency.<\/li>\n<li><strong>Compliance data<\/strong> \u2014 results of sanctions screening, politically-exposed-person (PEP) screening and adverse-media checks performed as part of KYC\/AML obligations.<\/li>\n<\/ul>\n<h2 id=\"pp-sources\">3. How we collect personal data<\/h2>\n<p>We collect personal data directly from you (when you open an account, use the dashboard, contact the desk, subscribe to the Signal Letter), automatically (through cookies, server logs, device fingerprinting as described in our <a href=\"\/pt\/cookie-policy\/\">Pol\u00edtica de Cookies<\/a>) and from third parties where lawfully permitted (KYC verification providers, sanctions-list databases, your funding bank for payment confirmations, our exchange venue partners for execution reporting).<\/p>\n<h2 id=\"pp-purposes\">4. The purposes for which we process personal data<\/h2>\n<ul>\n<li>To open and administer your Aridika account.<\/li>\n<li>To comply with our KYC, AML and counter-terrorist-financing obligations under EU AMLD6 and the laws of other jurisdictions where you are resident.<\/li>\n<li>To route trades on your behalf through our exchange venue partners.<\/li>\n<li>To settle deposits and withdrawals.<\/li>\n<li>To provide customer support.<\/li>\n<li>To detect, investigate and prevent fraud, abuse, and security incidents.<\/li>\n<li>To improve the Aridika engine and the dashboard \u2014 including training and re-weighting the trading model (we use <strong>aggregated, pseudonymised<\/strong> transaction data for this, never named client identities).<\/li>\n<li>To send operational notices (balance alerts, security notifications, policy updates) \u2014 these are not opt-outable because they are necessary for the Service.<\/li>\n<li>To send marketing communications where you have consented \u2014 these are always opt-outable with one click.<\/li>\n<li>To comply with legal obligations, respond to lawful requests from public authorities, and defend our legal rights.<\/li>\n<\/ul>\n<h2 id=\"pp-legal\">5. Our legal bases under the GDPR<\/h2>\n<ul>\n<li><strong>Performance of a contract<\/strong> (Art. 6(1)(b) GDPR) \u2014 processing necessary to deliver the Service to you.<\/li>\n<li><strong>Legal obligation<\/strong> (Art. 6(1)(c)) \u2014 processing necessary to comply with KYC\/AML, tax reporting, sanctions and record-keeping obligations.<\/li>\n<li><strong>Legitimate interests<\/strong> (Art. 6(1)(f)) \u2014 processing necessary for fraud prevention, security, service improvement, aggregated analytics and defending our legal rights, provided those interests are not overridden by your rights.<\/li>\n<li><strong>Consent<\/strong> (Art. 6(1)(a)) \u2014 processing for optional marketing communications, non-essential cookies, and voluntary features such as the Signal Letter.<\/li>\n<\/ul>\n<h2 id=\"pp-sharing\">6. Who we share personal data with<\/h2>\n<p>Aridika never sells personal data. We share only the minimum data necessary with the following categories of recipients, under contractual safeguards aligned with Art. 28 GDPR:<\/p>\n<ul>\n<li><strong>Exchange venue partners<\/strong> \u2014 your account identifier, order parameters and settlement details are routed to the venues the engine selects for execution.<\/li>\n<li><strong>Custody partners<\/strong> \u2014 your account identifier and balance movements are relayed to our segregated-custody counterparties.<\/li>\n<li><strong>KYC &amp; AML providers<\/strong> \u2014 your identity, contact and compliance data are shared with regulated providers for identity verification and sanctions screening.<\/li>\n<li><strong>Payment processors &amp; banks<\/strong> \u2014 your name, bank\/wallet details and transaction amounts are shared with payment processors to settle deposits and withdrawals.<\/li>\n<li><strong>Infrastructure providers<\/strong> \u2014 our data-centre, CDN, email, logging and analytics providers process technical and usage data under GDPR-compliant Data Processing Agreements.<\/li>\n<li><strong>Professional advisers<\/strong> \u2014 auditors, lawyers, tax advisers, under contractual confidentiality.<\/li>\n<li><strong>Public authorities<\/strong> \u2014 only in response to a legally binding request we have verified to be lawful (court orders, tax authority subpoenas, financial-regulator requests).<\/li>\n<\/ul>\n<h2 id=\"pp-international\">7. International data transfers<\/h2>\n<p>Aridika operates infrastructure in the European Economic Area, the United Kingdom, the United States and Singapore. When personal data is transferred outside the EEA, we rely on the European Commission&#8217;s Standard Contractual Clauses (2021\/914) or an adequacy decision where available. A copy of the applicable transfer safeguards is available on request from the DPO.<\/p>\n<h2 id=\"pp-retention\">8. How long we retain personal data<\/h2>\n<p>Account data is retained for the duration of your relationship with Aridika plus five years from account closure (longer where mandated by local KYC\/AML law \u2014 up to seven years in Estonia, ten in some other jurisdictions). Server logs and dashboard-usage data are retained for 24 months. Support chat transcripts are retained for 36 months. Marketing preferences are retained for the lifetime of the account plus one year.<\/p>\n<h2 id=\"pp-rights\">9. Your rights<\/h2>\n<p>Where the GDPR or an equivalent applies, you have the right to:<\/p>\n<ul>\n<li><strong>Access<\/strong> \u2014 obtain a copy of the personal data we hold about you.<\/li>\n<li><strong>Rectification<\/strong> \u2014 have inaccurate personal data corrected.<\/li>\n<li><strong>Erasure<\/strong> \u2014 ask us to delete personal data, subject to our legal retention obligations.<\/li>\n<li><strong>Restriction<\/strong> \u2014 ask us to limit processing in specific circumstances.<\/li>\n<li><strong>Portability<\/strong> \u2014 receive your personal data in a structured, machine-readable format.<\/li>\n<li><strong>Objection<\/strong> \u2014 object to processing based on legitimate interests, including profiling.<\/li>\n<li><strong>Withdraw consent<\/strong> \u2014 where processing is based on consent, you can withdraw it at any time.<\/li>\n<li><strong>Lodge a complaint<\/strong> \u2014 with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, <a href=\"https:\/\/www.aki.ee\/\">aki.ee<\/a>) or your local supervisory authority.<\/li>\n<\/ul>\n<p>To exercise any of these rights, email the DPO at <a href=\"mailto:dpo@aridika.com\">dpo@aridika.com<\/a>. We respond within 30 days of receiving a verified request.<\/p>\n<h2 id=\"pp-security\">10. How we protect personal data<\/h2>\n<p>We maintain technical and organisational measures aligned with ISO\/IEC 27001 principles and the EU&#8217;s NIS2 directive, including: AES-256-GCM encryption of data at rest; TLS 1.3 for data in transit; passkeys \/ hardware FIDO2 keys and TOTP for employee access; principle-of-least-privilege IAM; mandatory multi-factor authentication for client accounts; annual third-party penetration testing; a documented incident-response runbook; and segregation of production and research environments.<\/p>\n<h2 id=\"pp-children\">11. Children<\/h2>\n<p>Aridika is not directed at persons under 18 years of age, and we do not knowingly collect personal data from a minor. If you believe we have collected personal data from a minor, email the DPO and we will delete the data within 72 hours.<\/p>\n<h2 id=\"pp-ccpa\">12. California residents (CCPA\/CPRA)<\/h2>\n<p>California residents have additional rights under the CCPA as amended by the CPRA, including the right to know, the right to delete, the right to correct, the right to limit use of sensitive personal information, and the right to opt out of sale or sharing. Aridika <strong>does not sell<\/strong> personal information as the term is defined by CCPA\/CPRA. To exercise your rights, email <a href=\"mailto:dpo@aridika.com\">dpo@aridika.com<\/a> with &#8220;California request&#8221; in the subject line.<\/p>\n<h2 id=\"pp-changes\">13. Changes to this policy<\/h2>\n<p>We may update this Privacy Policy from time to time. Material changes will be announced by email to account holders at least 14 days before taking effect. The &#8220;Last updated&#8221; date at the top of this page reflects the most recent revision.<\/p>\n<h2 id=\"pp-contact\">14. How to reach the Data Protection Officer<\/h2>\n<p>Postal: Data Protection Officer, Aridika Research Lab O\u00dc, Rotermanni 12, Tallinn 10111, Estonia. Email: <a href=\"mailto:dpo@aridika.com\">dpo@aridika.com<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Aridika Privacy Policy \u2014 GDPR-compliant, with full breakdown of data categories, purposes, legal bases, retention, international transfers and rights.<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":50,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1010","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy \u2014 Aridika | GDPR &amp; CCPA Compliant<\/title>\n<meta name=\"description\" content=\"The complete Aridika privacy policy \u2014 GDPR, UK GDPR and CCPA\/CPRA compliant. How we collect, use, share, transfer and retain personal data of visitors and account holders.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Aridika Privacy Policy \u2014 Full GDPR &amp; CCPA Breakdown\" \/>\n<meta property=\"og:description\" content=\"Data categories, legal bases, retention, international transfers and your rights \u2014 spelled out in plain language.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aridika.com\/pt\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Aridika\" \/>\n<meta property=\"og:image\" content=\"https:\/\/aridika.com\/wp-content\/themes\/aridika\/assets\/images\/social-banner.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Aridika Privacy Policy \u2014 Full GDPR &amp; CCPA Breakdown\" \/>\n<meta name=\"twitter:description\" content=\"Data categories, legal bases, retention, international transfers and your rights \u2014 spelled out in plain language.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/aridika.com\/wp-content\/themes\/aridika\/assets\/images\/social-banner.png\" \/>\n<meta name=\"twitter:site\" content=\"@aridika_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aridika.com\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/aridika.com\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy \u2014 Aridika | GDPR &amp; CCPA Compliant\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aridika.com\\\/#website\"},\"datePublished\":\"2026-01-15T10:00:00+00:00\",\"description\":\"The complete Aridika privacy policy \u2014 GDPR, UK GDPR and CCPA\\\/CPRA compliant. How we collect, use, share, transfer and retain personal data of visitors and account holders.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aridika.com\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/aridika.com\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aridika.com\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/aridika.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aridika.com\\\/#website\",\"url\":\"https:\\\/\\\/aridika.com\\\/\",\"name\":\"Aridika\",\"description\":\"Autonomous AI Crypto Trading Platform\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/aridika.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy \u2014 Aridika | GDPR &amp; CCPA Compliant","description":"The complete Aridika privacy policy \u2014 GDPR, UK GDPR and CCPA\/CPRA compliant. How we collect, use, share, transfer and retain personal data of visitors and account holders.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_PT","og_type":"article","og_title":"Aridika Privacy Policy \u2014 Full GDPR &amp; CCPA Breakdown","og_description":"Data categories, legal bases, retention, international transfers and your rights \u2014 spelled out in plain language.","og_url":"https:\/\/aridika.com\/pt\/privacy-policy\/","og_site_name":"Aridika","og_image":[{"url":"https:\/\/aridika.com\/wp-content\/themes\/aridika\/assets\/images\/social-banner.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_title":"Aridika Privacy Policy \u2014 Full GDPR &amp; CCPA Breakdown","twitter_description":"Data categories, legal bases, retention, international transfers and your rights \u2014 spelled out in plain language.","twitter_image":"https:\/\/aridika.com\/wp-content\/themes\/aridika\/assets\/images\/social-banner.png","twitter_site":"@aridika_ai","twitter_misc":{"Est. reading time":"7 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/aridika.com\/privacy-policy\/","url":"https:\/\/aridika.com\/privacy-policy\/","name":"Privacy Policy \u2014 Aridika | GDPR &amp; CCPA Compliant","isPartOf":{"@id":"https:\/\/aridika.com\/#website"},"datePublished":"2026-01-15T10:00:00+00:00","description":"The complete Aridika privacy policy \u2014 GDPR, UK GDPR and CCPA\/CPRA compliant. How we collect, use, share, transfer and retain personal data of visitors and account holders.","breadcrumb":{"@id":"https:\/\/aridika.com\/privacy-policy\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aridika.com\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/aridika.com\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/aridika.com\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/aridika.com\/#website","url":"https:\/\/aridika.com\/","name":"\u00c1rido","description":"Plataforma aut\u00f4noma de negocia\u00e7\u00e3o de criptomoedas com IA","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aridika.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"}]}},"_links":{"self":[{"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/pages\/1010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/comments?post=1010"}],"version-history":[{"count":0,"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/pages\/1010\/revisions"}],"wp:attachment":[{"href":"https:\/\/aridika.com\/pt\/wp-json\/wp\/v2\/media?parent=1010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}