En esta secciónLegal

Terms of Use

En esta página

Version: 2.0 Effective Date: March 2, 2020 Last Updated: March 17, 2026

Table of Contents

  1. Introduction and Acceptance
  2. Definitions
  3. Inkryptus Platform
  4. Registration, Access, and Eventual Identity Verification
  5. Security and Access
  6. Services Offered by Inkryptus
  7. Tokens and Crypto Assets
  8. Fees and Operational Costs
  9. Restrictions and Prohibited Conduct
  10. Operational Limits and Compliance
  11. Intellectual Property
  12. Responsibilities and Exemptions
  13. Suspension, Termination, and Inactivity
  14. Support and Service
  15. Privacy and Data Protection
  16. Legal and General Provisions
  17. Contact and Communication Channel

1. Introduction and Acceptance

1.1. Purpose of this Document

These Terms of Use ("Terms") govern access to, navigation of, and use of the Inkryptus digital platform, comprising the official website (https://www.inkryptus.com), mobile application ("Inkryptus App"), and all integrated operating environments, including but not limited to: digital wallet functions, swap, staking, harvest, and future extensions of the HyFi (Hybrid Finance) ecosystem as described in the official Whitepaper. Inkryptus operates as a provider of hybrid finance technology solutions, combining the security and familiarity of Centralized Finance (CeFi) with the transparency and traceability of the Decentralized Finance (DeFi) environment, in accordance with the technical and economic principles of the INKY Token as defined in the Whitepaper.

1.2. Acceptance of Terms

Use of the Platform constitutes reading, understanding, and full acceptance of these Terms and their supplementary policies, including the Privacy Policy and the Fee Schedule. By clicking "I have read and agree," the User expresses free, informed, and unequivocal consent, acknowledging these Terms as a valid and binding electronic contract, in accordance with applicable civil and digital legislation. Use of the Platform is restricted to users aged 18 (eighteen) years or older with full legal capacity. Minors may only access the services through express and documented legal representation.

1.3. Changes and Updates

Inkryptus may update, revise, or modify these Terms and supplementary policies for technical, operational, regulatory, or security reasons. A "material change" is one that significantly impacts: (i) fees and costs; (ii) withdrawal, blocking, or account closure rules; (iii) responsibilities and limitations; or (iv) dispute resolution mechanisms. Material changes will be communicated to Users with a highlight in the application and, whenever possible, by registered email, at least 15 (fifteen) calendar days before the effective date. In the event of regulatory urgency, legal determination, or proven risk to the security or continuity of the service, Inkryptus may apply changes with immediate effect, limited to what is strictly necessary, notifying the User prominently as soon as operationally viable. A User who disagrees with material changes may close their account and, when operationally possible and legally permitted, request the withdrawal of available digital assets before the new conditions come into effect, subject to any restrictions arising from active contracts, verification procedures, legal obligations, determinations by competent authorities, or technical limitations of the networks used. Continued use of the platform after the effective date of any change will constitute acceptance of the new conditions. Inkryptus will maintain a version history of the Terms in the Official Channels.

1.4. Official Communication

All communications, notifications, and notices related to these Terms will be considered valid when made through the official Inkryptus channels, namely: Website: https://www.inkryptus.com Institutional email: support@inkryptus.com Official mobile application (iOS and Android)

Inkryptus will never request passwords, private keys, seed phrases, or 2FA codes through any channel. Any interaction conducted outside of official channels will have no legal validity and may represent a fraud risk.

2. Definitions

2.1. Technical Terms and Expressions Used

For the purposes of interpretation and application of these Terms, the expressions below shall have the meanings assigned to them below, applying both in the singular and plural, as the context requires: a) Inkryptus: commercial name used by an ecosystem of operational, technological, and/or controlling entities responsible for the Inkryptus Platform and its services, which may include affiliated companies, subsidiaries, or entities established in different jurisdictions, as applicable to each feature, without prejudice to the User experience or rights provided in these Terms. b) Platform: a set of digital environments owned by Inkryptus, comprising the official website (https://www.inkryptus.com), the mobile application (Inkryptus App), and other integrated technological interfaces through which products and services linked to the hybrid (HyFi) ecosystem are made available. c) User: a natural person or legal entity duly registered on the Platform who uses any of the services or features offered by Inkryptus, upon acceptance of these Terms. Identity verification (KYC) may be required in the future, progressively or in a modular fashion, depending on the nature of the services, third-party integration, or applicable legal requirements. d) Inkryptus Account: an individual and exclusive record identifying the User within the Platform, enabling access to contracted services, transaction history, and available balances. e) Inkryptus Wallet: a secure custodial and auditable digital environment that enables the storage, sending, and receiving of crypto assets compatible with the BNB Smart Chain (BEP20), serving as the integration point between Inkryptus products (staking, swap, and harvest). f) Crypto Asset: a digital representation of value recorded on a decentralized blockchain network, which may be used as a medium of exchange, unit of account, or store of value, without issuance or guarantee by any governmental authority. g) INKY Token: the official utility digital asset of the Inkryptus ecosystem, issued on the BNB Smart Chain (BEP20), used as a unit of liquidity, means of fee payment, staking participation, and other internal operations, in accordance with the informational guidelines of the Inkryptus Whitepaper. h) Swap: a feature that enables instant conversion between tokens and crypto assets supported on the BEP20 network, in an auditable and transparent manner, without the need for external exchanges. i) Staking: the process of voluntarily locking tokens in audited smart contracts with the aim of generating rewards proportional to the User's participation in a staking pool, in accordance with the platform's economic rules. j) Harvest: an operation that allows the withdrawal of accumulated profits from staking contracts, without affecting the principal capital invested. k) Onboarding: an eventual identity verification process (KYC/AML), when applicable, which involves the collection and validation of personal data, documents, and any additional information, such as proof of life and source of funds. l) Services: the set of digital features made available by Inkryptus, including wallet, swap, staking, harvest, marketplace, and any new products and integrations that may be implemented. m) Transaction: any financial or contractual operation performed by the User within the Platform, including deposits, withdrawals, swaps, staking, harvest, and internal transfers. n) Fees: amounts charged by Inkryptus for the execution of certain services, as set out in the current Fee Schedule available on the official website and application. o) Blockchain Network: the decentralized technological infrastructure used for the public and immutable recording of transactions related to the INKY Token and other compatible crypto assets, auditable via BscScan. p) Partners: companies, platforms, or external service providers that maintain integration with Inkryptus under a contract, for technical feasibility, liquidity, auditing, marketing, or operational support purposes. q) Fee Schedule: a public document, updated periodically, that presents the fees applicable to operations performed within the Platform (withdrawals, swaps, staking, and harvest), available at https://www.inkryptus.com/legal/fees. r) Privacy Policy: a supplementary document governing the processing of Users' personal data in accordance with applicable data protection laws, including national and international regimes, as described in Section 15 of these Terms. s) Network Events (Fork, Airdrop): technical changes on blockchains that may generate new token versions, copies, or free distributions (airdrops), for which Inkryptus has no obligation of support, conversion, or transfer. t) Compliance: the set of rules, policies, and procedures adopted by Inkryptus to ensure conformity with national and international legislation related to anti-money laundering (AML), counter-terrorism financing (CTF), data protection, and regulatory compliance. u) Inactive Account: an account that shows no transactions or access for a period equal to or greater than 24 (twenty-four) consecutive months, which may be administratively closed as provided in Section 13.3 of these Terms. No maintenance fee is charged on an inactive account. v) Competent Jurisdiction and Applicable Law: expressions designating the forum and applicable legislation for resolving disputes arising from these Terms, defined according to the entity responsible for the service used and applicable rules of private international law, as set forth in Section 16.

Technical Interpretation Note:

The technical terms, internal expressions, and feature names used in this document - such as HyFi, INKY Pool, Compound, Harvest, Swap, among others - are purely descriptive and illustrative, reflecting the operational terminology adopted by Inkryptus. These terms do not alter the legal nature of the services provided, which remain classified as digital infrastructure technology solutions, without constituting financial products, securities, collective investments, or operations subject to the regulation of monetary or capital market authorities, in accordance with the applicable legislation in each jurisdiction.

2.2. Interpretation and Scope

The definitions set forth in this clause apply to all sections, policies, and supplementary annexes of these Terms, prevailing over any divergent interpretation. Terms not expressly defined shall be interpreted according to their common usage in the technology, blockchain, and digital assets market, observing the principles of good faith, economic purpose, and technical consistency with the HyFi (Hybrid Finance) model adopted by Inkryptus.

3. Inkryptus Platform

3.1. Applicability (Website, App, APIs, and Integrated Systems)

Inkryptus operates a digital hybrid finance ecosystem (Hybrid Finance – HyFi), combining the security and predictability of Centralized Finance (CeFi) with the autonomy, traceability, and decentralization of Decentralized Finance (DeFi), as specified in the Inkryptus Whitepaper. Access to the Platform is provided through the Inkryptus mobile application (available for iOS and Android) and programming interfaces (APIs) or integrated systems that may be made available by the company or its partners. The Platform encompasses, among other features, the Digital Wallet (Wallet), Token Swap, INKY Pool Staking, Harvest, and Marketplace modules, and may integrate new financial or educational solutions as the ecosystem evolves. All operations performed through these environments are subject to the rules and limits defined in these Terms, supplementary policies, and best digital security practices.

3.2. License of Use

Inkryptus grants the User a limited, personal, non-exclusive, non-transferable, and revocable license to access and use the Platform and its services, exclusively for lawful purposes and in accordance with these Terms and applicable laws. This license does not transfer to the User any intellectual property rights, patents, trademarks, trade secrets, or software belonging to Inkryptus, with all rights reserved. The User is expressly prohibited from: (i) reproducing, modifying, distributing, selling, renting, sublicensing, translating, or creating derivative works based on the Platform; (ii) using the system for unlawful, fraudulent, or other purposes that could compromise its integrity; and (iii) attempting to reverse engineer, exploit vulnerabilities, or gain unauthorized access to Inkryptus data and systems. Failure to comply with these conditions may result in immediate account suspension, access blocking, and civil and criminal liability depending on the severity of the act.

3.3. Availability and Updates

Inkryptus may, at any time and at its sole discretion, update, modify, suspend, or wholly or partially discontinue Platform features, whether for technical, operational, legal, security, or ecosystem technological evolution reasons. In the event of permanent discontinuation of a feature with assets under custody, Inkryptus will provide at least 30 days' prior notice (unless prevented by legal/regulatory impediment or security risk) and will grant an operational window for withdrawal/migration. The company will endeavor to maintain continuous Platform availability, but does not guarantee uninterrupted, error-free access; temporary unavailability may occur due to scheduled maintenance, updates, network failures, or external factors beyond its control. Such interruptions do not generate any right to compensation or reimbursement, and Users are advised to follow official communications and plan their operations accordingly. Scheduled maintenance will be communicated within the application in advance, preferably during low-usage hours. Continued use of the Platform after updates or modifications implies tacit acceptance of the new versions and supplementary policies, including the Privacy Policy and the current Fee Schedule.

4. Registration, Access, and Eventual Identity Verification

4.1. Account Creation Process

Access to Inkryptus Platform services requires prior registration and creation of an Inkryptus Account. For initial access, the User must provide basic identification information, such as a valid email address and access credentials. Additional information and identity verification may be requested in the future, either optionally or mandatorily, depending on the activation of specific features, third-party integration, or legal requirements. The registration process is carried out through the Inkryptus mobile application, and prior acceptance of these Terms and the Privacy Policy is required. After account creation, the User may access the basic features of the Platform, subject to the limits defined for Simplified Registration until the completion of verification steps (KYC), when requested.

4.2. Identity Verification (KYC) - Conditional Application

Inkryptus adopts Identity Verification (KYC) procedures as required by applicable legislation, including the Virtual Assets Legal Framework (Law 14,478/2022), Brazilian Central Bank regulations, and anti-money laundering rules (Law 9,613/1998). Identity verification (KYC) may be performed progressively, in a modular or segmented manner, depending on: (i) integration with external service providers, including fiat ramps; (ii) legal or regulatory requirements applicable to certain jurisdictions; (iii) mitigation of operational risks, fraud, or misuse of the Platform; or (iv) access to specific ecosystem features.

While such procedures are not required, the User acknowledges operating in a blockchain environment and is solely responsible for the legality of their actions, the origin of the assets used, and compliance with the tax and regulatory obligations of their jurisdiction.

4.3. Minimum Age Requirements

Use of the Platform is restricted to persons aged 18 (eighteen) years or older with full legal capacity. Creating accounts on behalf of minors is prohibited, unless duly authorized by a legal guardian with documentation formally accepted by Inkryptus.

4.4. Information Update and Security

The User is solely responsible for the accuracy and currency of the data provided during registration, and undertakes to keep it correct and complete whenever changes occur. When a registration update is required, Inkryptus will indicate the required information/documents, the basis for the request, and will grant a minimum period of 10 calendar days for submission, except in cases of immediate security risk or legal determination. Restrictive measures will be proportional to the identified risk, prioritizing the least restrictive measure possible and maintaining withdrawal functionality in cases where no serious irregularity is identified. Inkryptus reserves the right to request periodic document revalidation, especially in cases of atypical transactions, regulatory requirements, or identification of inconsistencies. Failure to comply with the obligations of this clause does not exempt the User from responsibility for the information provided and may result in notification to competent authorities, when required by law.

4.5. Account Suspension and Cancellation

In limited circumstances and as a protective measure, Inkryptus may temporarily suspend, limit, or restrict the User's access and/or place a temporary hold on transactions and funds pending review. Such measures may be applied in the following circumstances: (i) provision of false, incomplete, or inconsistent information; (ii) unjustified refusal to comply with verification or update requests; (iii) reasonable and documented indications of fraud, misuse of the platform, or violation of these Terms; (iv) indications of activities related to money laundering, terrorism financing, tax evasion, or international sanctions; or (v) judicial, administrative, or regulatory determination by a competent authority.

Restrictive measures will be proportional to the identified risk, prioritizing the least restrictive measure possible. Inkryptus will endeavor to maintain, at a minimum, withdrawal functionality available to the User, except where expressly prohibited by an authority order or when the withdrawal itself is the subject of suspicion.

Whenever permitted by law and without compromising ongoing investigations or security measures, Inkryptus will inform the User of: (i) the general reason for the measure taken; and (ii) the available regularization/contestation procedure. The User may submit a challenge or review request through the platform's official support channels.

Inkryptus will observe the following indicative timeframes: (i) initial screening: up to 5 (five) business days; (ii) internal analysis and decision: up to 30 (thirty) calendar days, extendable with notice to the User. Blocks lasting longer than this period will only be maintained by order of a competent authority or documented and proven need for risk mitigation.

Upon completion of the internal analysis with no finding of irregularity, restrictions will be immediately lifted and funds unblocked, without prejudice to any obligation to indemnify for direct damages proven to result from wrongful blocking.

4.6. User Responsibility

The User declares awareness that the security of their account depends on the accuracy of the information provided and full compliance with Inkryptus's identification and compliance policies. Failure to comply with the obligations of this clause may result in access restriction, asset freezing, and notification to competent authorities, without prejudice to other applicable legal measures.

5. Security and Access

5.1. User Responsibility over Credentials

Access to the Inkryptus Platform is carried out through personal login and password, with the User being solely responsible for safeguarding, confidentiality, and proper use of their credentials. This information is non-transferable and may not be shared with third parties under any circumstances. Any operation performed using the correct registered login and password will be presumed legitimate and of the User's authorship, even if carried out by third parties, unless direct failure by Inkryptus is proven. The User declares awareness that account security depends on their own practices and must use trusted devices, updated antivirus, strong and unique passwords, and avoid access on public or unsecured networks.

5.2. Two-Factor Authentication (2FA)

To strengthen account security, Inkryptus provides a two-factor authentication (2FA) mechanism, which may be mandatory for certain operations, such as withdrawals, transfers, or registration changes.

The User is responsible for safeguarding their credentials and for enabling and maintaining 2FA. Inkryptus recommends the use of strong passwords, trusted devices, and avoiding public networks. Successful login with valid credentials constitutes presumption of legitimate use, unless there is proof of direct platform failure.

5.3. Prevention of Phishing and Fraud

Inkryptus will never request passwords, private keys, seed phrases, or two-factor authentication (2FA) codes through any channel, including official ones. These credentials must never be shared with anyone, including Inkryptus support staff.

When assisting Users, Inkryptus support may only request: account email address, transaction ID (TXID) or hash, identity verification documents (when required by KYC procedures), screenshots of error messages, or other non-sensitive operational data.

Official Inkryptus channels are: Website: https://www.inkryptus.com Institutional email: support@inkryptus.com, dpo@inkryptus.com, security@inkryptus.com Inkryptus mobile application (iOS and Android)

Any communication received outside these channels should be treated as a fraud attempt (phishing). The User is responsible for verifying the authenticity of messages and for not clicking on suspicious links, QR codes, or attachments. Inkryptus may broadcast security alerts and preventive recommendations through its official channels, without any obligation to compensate for any damages caused by the User's negligence in following such guidance.

5.4. Incident Reporting and Access Recovery

In the event of unauthorized access, loss of device, suspected intrusion, password theft, or cyberattack, the User must immediately report the incident to Inkryptus's official support via email at support@inkryptus.com, requesting preventive account blocking. Inkryptus may require proof of identity, a verification video, or additional documents before restoring access, in order to prevent fraud and ensure account integrity. Until the verification procedure is completed, the company may maintain temporary blocking of transactions and balances, when necessary to preserve the security of the User or the Platform.

5.5. Limitation of Liability

Inkryptus is not responsible for losses, damages, or expenses resulting from: (i) negligence or carelessness by the User in safeguarding their credentials; (ii) shared or improper use of the account; (iii) security failures of the device, browser, or access network; or (iv) external attacks and events beyond Inkryptus's reasonable control.

Successful login with valid credentials constitutes presumption of legitimate use, unless there is clear and unequivocal proof to the contrary. The company adopts information security best practices, including encryption, session authentication, and continuous transaction monitoring, but does not guarantee absolute inviolability, recognizing the inherent nature of risk in digital systems and blockchain environments.

6. Services Offered by Inkryptus

6.1. Nature of Services

Inkryptus acts as a provider of technological infrastructure and digital solutions within the hybrid finance ecosystem (Hybrid Finance – HyFi), integrating resources from centralized (CeFi) and decentralized (DeFi) finance in a secure, transparent, and auditable environment. Inkryptus is not a financial institution, securities broker, investment advisory firm, credit company, securities intermediary, or payment service provider, as defined by the applicable financial and regulatory legislation in each jurisdiction. The company operates exclusively as a technological infrastructure provider, offering interfaces, smart contracts, technical custody systems, and automated crypto asset management services, without holding possession, control, or administration of third-party financial resources as envisaged by banking or securities legislation. Asset custody is purely technical, aimed at the automated execution of transactions within the Platform's infrastructure, and does not constitute financial deposit, fiduciary management, or investment intermediation. Inkryptus services are provided in an automated manner under the User's exclusive responsibility, as the User freely decides how to use the features and is solely responsible for their investment, transfer, or crypto asset conversion decisions. Use of the Platform implies awareness that the products and services described are technological and utilitarian in nature and do not constitute securities, collective investment contracts, financial instruments, or instruments subject to the regulation of monetary or capital market authorities, in accordance with applicable legislation in each jurisdiction.

6.2. Inkryptus Wallet

The Inkryptus Wallet is the digital environment integrated into the Platform for the storage, sending, receiving, and management of crypto assets compatible with the BNB Smart Chain (BEP20) network.

Custody is carried out in a custodial and auditable manner, with transaction signatures recorded on-chain, as described in the Inkryptus Whitepaper. The Wallet allows the User to monitor balances, yields, transaction history, and active contracts, serving as the integration point between all Inkryptus products (staking, swap, and harvest). Inkryptus adopts cryptographic security measures and 2FA authentication, but the User acknowledges that storing crypto assets in a digital environment involves technological risks, including possible third-party failures, network unavailability, and market volatility.

The Inkryptus Wallet may operate, depending on the feature used, in a managed custody or integrated technological infrastructure model, in which the Platform or authorized partners may maintain technical control of the mechanisms necessary to move digital assets, adopting security measures compatible with the nature of the service. The specific terms of custody, movement, and operational control will be communicated to the User through official channels and/or the interfaces of the corresponding feature.

6.3. Swap (Token Conversion)

The Inkryptus Swap module enables instant conversion between tokens within the BNB Smart Chain (BEP20) network, without the need for external exchanges. Transactions are processed by auditable smart contracts, with a fixed operating fee as provided in the Fee Schedule, and automatically reflect the updated balance in the User's Wallet. The Swap function may be used for portfolio diversification, quick liquidity, or reinvestment of earnings, depending on the User's strategies. Inkryptus does not guarantee future price, price stability, or absence of losses resulting from market fluctuations, and it is the User's responsibility to review rates and amounts before confirming any conversion.

6.4. Staking (Yield Pool)

Inkryptus Staking is the main product for the voluntary locking of INKY tokens in audited smart contracts, enabling the User to participate in pools of variable reward distribution, in accordance with pre-defined and transparent rules. Staking plans have determined terms and yield rates. Currently available modalities include free (no lock-up), 12-month, and 36-month plans, subject to the current conditions on the Platform and in the Inkryptus Whitepaper. Previously offered plans (such as 6-month and 24-month) have been discontinued for new contracts as of app version 2.08.0; existing contracts under those plans remain active until their original maturity date.

Rewards are distributed automatically and proportionally to the User's participation, with a performance fee of 25% applied exclusively on the effective daily profit, with 75% credited to the User and 25% allocated to network operations, liquidity, and sustainability, as set out in the economic structure described in the Whitepaper. Staking contracts with lock-up periods do not allow early withdrawals, ensuring predictability and stability for the pools. Returns are variable and do not constitute a promise of fixed returns and may fluctuate according to the ecosystem's internal metrics, market conditions, and technical performance of the smart contract. Inkryptus staking plans do not constitute a public offering of securities, nor do they represent a promise of profitability or collective investment; returns are variable and derive from the programmed on-chain emission of the INKY Token, distributed proportionally among participants under the rules of the public staking contract. Participation in staking is optional and autonomous, and it is up to the User to evaluate the risks, terms, and characteristics of each plan before joining.

6.5. Harvest (Rewards)

Harvest is the operation for withdrawing profits accumulated in staking contracts, without affecting the principal amount invested. Rewards are automatically credited to the Inkryptus Wallet after confirmation of the operation, and may be: (i) reinvested in new contracts (Compound); (ii) converted via Swap to other assets; or (iii) withdrawn according to current conditions.

The Harvest operation entails the applicable operational fee and subjects the User to network fluctuations or gas costs, where applicable.

6.6. Marketplace and Partnerships

The Platform may include Marketplace modules and integrations with external partners, offering complementary products, services, or utilities (such as NFTs, discounts, or educational solutions). Such services may be operated by third parties, subject to their own additional terms, with no direct responsibility on the part of Inkryptus for their execution, security, or content. Inkryptus undertakes to verify the technical and legal integrity of partners, but the use of third-party services occurs at the User's own risk and responsibility, and the User must read and accept the respective terms and policies.

6.7. Modification and Continuity of Services

Inkryptus reserves the right to modify, add, suspend, or discontinue any Platform feature at any time for technical, regulatory, operational, or strategic reasons. In the event of service discontinuation involving values under custody, a reasonable period will be granted for asset withdrawal or migration, with notice through official channels. All changes will be communicated transparently, preserving the integrity of balances, active contracts, and the User's personal data.

7. Tokens and Crypto Assets

7.1. INKY Token and Supported Assets

Inkryptus operates in an ecosystem based on digital assets compatible with the BNB Smart Chain (BEP20), offering technical and operational support to auditable tokens integrated into its infrastructure. The INKY Token is the native and official utility asset of the Platform, as described in the Inkryptus Whitepaper, serving as the central unit of liquidity, means of fee payment, staking instrument, reward asset, deflationary element, and technical governance token. All supported crypto assets must be registered, verified, and compatible with the BEP20 network. Transactions on different networks, such as Ethereum (ERC20), Polygon, Avalanche, or others, are prohibited unless expressly enabled by Inkryptus. Sending tokens to incorrect addresses, incompatible networks, or unverified wallets may result in permanent and irreversible loss of funds, without Inkryptus being responsible for recovery.

7.2. Trading, Custody, and Liquidity Rules

Tokens held in the Inkryptus Wallet are the exclusive property of the User and are held in a custodial, auditable, and secure manner, in accordance with the hybrid model described in the Whitepaper - with on-chain transaction execution and internal technical management. Inkryptus adopts cryptographic security standards, two-factor authentication (2FA), and multi-layer verification, maintaining a public record of transactions via BscScan, without direct access to Users' private balances. Asset liquidity will depend on market conditions, transaction volume, and availability of trading pairs (swap), and is not guaranteed by Inkryptus under any circumstances. The company does not ensure profitability, appreciation, or price stability of tokens, nor does it guarantee their acceptance outside the Inkryptus ecosystem. Every purchase, sale, conversion, staking, or harvest operation is executed upon the User's express order, based on market conditions at the time of the transaction.

7.3. Market Risks and Volatility

The User declares awareness that crypto assets are high-risk assets subject to significant price fluctuations, limited liquidity, and the absence of government guarantees. Operations carried out on the Platform are subject to market fluctuations, third-party failures, regulatory changes, cyberattacks, and other external factors that may affect the value of assets. The User acknowledges that returns/gains are not guaranteed and that partial or total loss of capital may occur. Inkryptus does not provide financial or investment advice. Where estimated APR/APY figures are displayed, such values are merely indicative and subject to variation, and do not constitute a promise of profitability. Past results do not guarantee future results. Inkryptus is not responsible for financial losses, devaluation, network interruption, unavailability of external services, or effects resulting from the User's investment decisions. The User is responsible for understanding and evaluating the risks before carrying out any transaction with crypto assets. Any estimates, scenarios, or projections that may be published in Inkryptus informational materials are purely illustrative in nature and do not constitute a promise of financial return, guarantee of appreciation, or investment recommendation.

7.4. Network Events (Forks, Airdrops, and Protocol Updates)

Inkryptus may, at its sole discretion, choose whether or not to support network events such as hard forks, soft forks, airdrops, protocol updates, or modifications to blockchains linked to supported tokens. In such cases, the company is not obligated to distribute, convert, or provide technical support for new assets originating from such events. The decision on the treatment of resulting assets will be evaluated on a case-by-case basis, based on security, technical feasibility, and regulatory compliance criteria. Lack of support for a particular event does not constitute a service failure, loss, or contractual breach, and it is the User's responsibility to follow official communications and manage their assets in accordance with Inkryptus's guidance. Inkryptus has no control over public blockchain networks used for the issuance or transfer of crypto assets and, therefore, cannot be held responsible for delays, validation failures, network congestion, forks, protocol updates, or other external technical events that affect the confirmation of transactions.

7.5. General Provisions on Digital Assets

The User acknowledges that the INKY Token and other Platform crypto assets do not represent securities, corporate shares, credit rights, or participation in Inkryptus profits, being exclusively digital utility assets within the HyFi ecosystem.

All technical and economic information relating to the INKY Token, including emission parameters, burn, total supply, and on-chain contracts, is published and kept updated in the Inkryptus Whitepaper and in public records of the BNB Smart Chain (BEP20), serving as a source of transparency and independent auditing.

7.6. Blockchain Nature and User Autonomy

The User acknowledges that Inkryptus operates as a public blockchain-based technology platform, in which transactions are executed in a decentralized, irreversible, and on-chain recorded manner. In the absence of fiat ramp services or banking intermediation, Inkryptus does not exercise prior control over the origin of crypto assets used by the User, who bears full responsibility for compliance with the fiscal, exchange, regulatory, and illicit prevention laws applicable to their jurisdiction.

8. Fees and Operational Costs

8.1. Applicable Fees (Withdrawal, Swap, Staking, Harvest, and Compound)

The use of services provided by Inkryptus may entail the collection of fixed, periodic, or conditional fees, depending on the nature of the operation performed. Applicable fees include, among others:

(i) Fixed Fee per Financial Action: a fixed amount of 3 USDT charged per Withdrawal, Swap, Harvest, or Compound operation, in accordance with current policy; (ii) Staking Performance Fee: a percentage of 25% applied exclusively on the effective daily profit obtained in staking operations, with 75% credited to the User, as set out in the Whitepaper; All fees applicable to an operation will be displayed to the User prior to transaction confirmation, allowing for prior verification and informed decision-making.

The User, upon executing any operation, fully acknowledges and accepts the applicable fees, as described in the Fees and Commissions Table on the official Inkryptus website and application.

8.2. Fee Schedule and Changes

Inkryptus maintains an official fee schedule, updated periodically and available at https://www.inkryptus.com/legal/fees and on the mobile application. This schedule contains a detailed description of the current fees, their nature (fixed, percentage, or conditional), method of collection, and date of last update, superseding any previous information, announcements, or promotional materials. The company may modify, add, suspend, or adjust fees at any time, upon prior publication through official channels, with immediate effect for new operations and no retroactive impact on already completed transactions. Fee updates aim to ensure technical, regulatory, exchange, or market appropriateness, ensuring predictability and transparency for Users.

8.3. Payment and Deduction of Fees

Operating fees and costs may be charged:

(i) automatically at the time of operation execution; (ii) through direct deduction from the available balance in the Inkryptus Wallet, in USDT or INKY Token, depending on the service; or (iii) by automatic offset between earnings and contractual obligations within the Platform. Insufficient balance may result in a failure to execute the operation or temporary blocking of certain features until the payment is settled. Inkryptus does not charge hidden fees, percentages on invested capital, undisclosed spreads, or additional administrative fees, except those expressly provided in these Terms or in its Fee Schedule.

8.4. Network and Third-Party Costs (Gas, Slippage, and Partners)

Certain operations may be subject to external costs inherent to the use of public blockchains, such as network fees (gas fees), price variations (slippage), and costs of integration with liquidity providers or external partners. These amounts are independent of Inkryptus and are the User's exclusive responsibility, being automatically charged according to the policy of the blockchain used. Inkryptus does not profit from these external fees and recommends that the User check network conditions and transaction costs in advance before confirming any operation.

8.5. Final Provisions on Fees

All fees, charges, and operational costs are expressed in US dollars (USD) or equivalents in USDT or INKY Token, depending on the contracted service and the options available in the application. The User declares awareness that executing any transaction implies automatic agreement with the fees in effect at the time of the operation. In the event of promotions, bonuses, or exemption periods, the specific conditions will be officially published by Inkryptus, with defined terms and rules.

9. Restrictions and Prohibited Conduct

9.1. Misuse of the Platform

The User undertakes to use the Inkryptus Platform exclusively for legitimate purposes and in compliance with these Terms, applicable national and international laws, and internal security and compliance policies. The use of Inkryptus services for unlawful, fraudulent, abusive, deceptive, offensive, or other purposes that may affect the integrity of the Platform, other Users, or third parties is expressly prohibited. Misuse of the Platform includes any action that compromises its performance, functionality, reputation, or security, as well as disregard for best digital conduct and community ethics.

9.2. Illicit Activities and Money Laundering

The use of the Inkryptus Platform for the following is strictly prohibited:

(i) money laundering, terrorism financing, tax evasion, or concealment of illicit resources; (ii) financial pyramids, Ponzi schemes, unauthorized multi-level marketing, or operations promising guaranteed returns; (iii) transactions in jurisdictions sanctioned by international bodies (OFAC, UN, EU, among others); (iv) purchase, sale, or custody of illicit assets, including non-compliant or unknown-origin tokens; and (v) any other act contrary to the applicable legislation in the User's jurisdiction or to international financial crime prevention standards.

Inkryptus adopts sanctions screening controls (including OFAC, UN, and EU lists) and continuous operations monitoring. Preventive measures will be proportional and subject to review, with the possibility of regularization by the User through documentation. The company will comply with AML/CFT obligations set forth in Law 9,613/1998 and applicable COAF and Central Bank regulations.

9.3. Fraud, Bots, and Market Manipulation

The use of bots, scripts, unauthorized automation, crawlers, or reverse engineering software that interfere with the functioning of the Platform or its internal metrics is prohibited. Creating multiple accounts for the purpose of self-benefit, circumventing operational limits, exploiting vulnerabilities, or gaining undue advantage is also prohibited. Any attempt at market manipulation, including volume forgery, spoofing, wash trading, or spreading misleading information about the INKY Token or other assets, will be considered a serious violation of these Terms. Detection of such practices may result in immediate account suspension, blocking of the funds involved, and notification to competent authorities.

9.4. Rules of Conduct and Integrity

The User must act with ethics, respect, and transparency in all interactions inside and outside the Platform, including on public channels, social media, events, and communities linked to Inkryptus. The following are expressly prohibited:

(i) unauthorized use of the Inkryptus brand, logo, visual identity, or trade name without prior written authorization; (ii) publishing false, defamatory, or misleading content about Inkryptus, its products, employees, or other Users; (iii) promising guaranteed returns or representing Inkryptus as a financial institution, brokerage, or investment fund; (iv) any form of harassment, discrimination, or hate speech in official community spaces; and (v) distributing malware, spam, phishing, or malicious links in Inkryptus-controlled environments.

9.5. Sanctions, Suspension, and Cooperation with Authorities

The vast majority of Users will never be affected by the measures described in this section. However, in cases of reasonable and documented indications of fraud, manipulation, money laundering, terrorism financing, tax evasion, violation of international sanctions, or other illicit activities, Inkryptus may apply proportional compliance measures, including: (i) temporary suspension or limitation of features; (ii) temporary hold on transactions and funds until verifications are completed; (iii) permanent account closure in the event of serious and proven violation, after internal review; (iv) retention of records, logs, and technical evidence for the legally required period, subject to the LGPD; and (v) notification to competent authorities as required by applicable law. In urgent cases involving immediate risk to the platform, the ecosystem, or third parties, or to preserve the integrity of any ongoing review, or to comply with a legal or regulatory determination, such measures may be adopted without prior notice. In all other cases, Inkryptus will notify the User before or promptly after implementing any restriction and will provide a formal channel for clarification and contestation. The adoption of measures provided for in this clause, when grounded and proportional, will not, in and of itself, give rise to a right to compensation. Nothing in this clause removes Inkryptus's liability in cases of willful misconduct, gross negligence, or duly proven wrongful blocking, subject to the CDC when applicable. Inkryptus will maintain internal audit records of blocking, suspension, and authority notification decisions, in accordance with applicable legislation.

10. Operational Limits and Compliance

10.1. Transaction and Movement Limits

Inkryptus may establish operational and financial limits applicable to operations carried out on the Platform, including deposits, withdrawals, swaps, staking, harvests, and bonuses. These limits are set based on security criteria, movement history, User risk profile, and KYC verification level, and may be adjusted at any time without prior notice, subject to compliance analysis or regulatory determination. The User acknowledges that certain transactions may be subject to manual analysis or additional approval, with varying timeframes, depending on volume, origin of funds, and complexity of the operation. The execution of operations outside established limits may be automatically blocked, without this constituting a contractual failure or right to compensation.

10.2. Due Diligence Procedures (AML/CFT)

Inkryptus adopts internal policies to prevent abuse, fraud, and unlawful use of the Platform, consistent with its nature as a blockchain-based technological infrastructure. Formal anti-money laundering and counter-terrorism financing (AML/CFT) procedures may be implemented progressively, especially in the case of integration with fiat ramps, regulated custodial services, or as required by applicable law. User Responsibility and Duty to Cooperate:

The User acknowledges that they are solely responsible for the legality of the origin of digital assets used on the Platform and for the legality of their operations, and must refrain from engaging in unlawful, fraudulent, or other activities incompatible with applicable legislation in their jurisdiction. The User undertakes to cooperate in good faith with any reasonable requests for information made by Inkryptus, when necessary for the prevention of abuse, compliance with future legal obligations, or operational risk mitigation.

The provision of false, incomplete, or misleading information, as well as the commission of unlawful acts by the User, may give rise to individual liability for directly proven damages caused to Inkryptus or third parties, without prejudice to applicable civil, administrative, or criminal sanctions. This clause does not imply a transfer, delegation, or sharing of Inkryptus's regulatory obligations to the User; such obligations, when existing, remain exclusively Inkryptus's responsibility.

10.3. Cooperation with Regulatory Authorities

Inkryptus cooperates fully with fiscal, regulatory, law enforcement, and judicial authorities, both domestic and international, whenever requested in accordance with the law. The User expressly authorizes the sharing of strictly necessary information and records for: (i) compliance with legal and regulatory obligations; (ii) investigation of suspicious or unlawful operations; (iii) external and internal audits; and (iv) reporting operations to competent authorities for the prevention of money laundering and terrorism financing, as required by applicable legislation or future regulatory obligations. Inkryptus undertakes to restrict the use of and access to this information to the minimum necessary for the legal purpose, preserving confidentiality, integrity, and data security in accordance with applicable data protection laws and international information security standards.

10.4. User Responsibility in Compliance

The User declares awareness that use of the Platform implies adherence to Inkryptus's compliance policies, and undertakes to provide truthful, complete, and up-to-date information and not to use the Platform for unlawful purposes, tax evasion, concealment of resource origins, or transactions incompatible with their economic capacity. Omission, falsification, or refusal to provide information may result in preventive account blocking, retention of funds, and immediate notification to competent authorities, without prejudice to other applicable administrative or judicial measures.

11. Intellectual Property

11.1. Inkryptus Copyrights and Trademarks

All intellectual and industrial property rights related to the Inkryptus Platform and all its components - including, but not limited to, trademarks, logos, trade names, domain names, graphical interfaces, illustrations, texts, manuals, source code, databases, algorithms, smart contracts, authentication systems, diagrams, layout, and visual identity - are the exclusive property of Inkryptus or its duly authorized licensors and partners, and are protected by applicable intellectual property laws and international treaties on copyright, industrial property, unfair competition, and software protection. The User acknowledges that use of the Platform does not imply assignment, transfer, or granting of any ownership rights over such assets, and any use beyond the limits of this contractual license is prohibited.

11.2. Content Use and Limited License

Inkryptus grants the User a limited, personal, non-exclusive, non-transferable, and revocable license to access and use the Platform, solely and exclusively for legitimate purposes related to the services made available, in accordance with these Terms. The User is expressly prohibited, without prior written authorization from Inkryptus, from: (i) reproducing, copying, modifying, distributing, selling, sublicensing, renting, translating, compiling, or creating derivative works based on Platform content; (ii) reverse engineering, decompiling, disassembling, or attempting to obtain the source code of the Platform, its algorithms, smart contracts, or integrated systems; (iii) using, exploiting, or displaying Inkryptus trademarks, logos, or visual elements in promotional materials, personal profiles, websites, social media, or marketing campaigns without formal authorization; and (iv) employing any technology, script, or automated system to copy, index, exploit, or interfere with Platform functionality. Failure to comply with these provisions constitutes a serious contractual breach, subject to civil and criminal liability, in addition to immediate account suspension.

Unauthorized, improper, or misleading use of the Inkryptus brand or any distinctive sign associated with the company - including in domain names, social media profiles, emails, communication channels, presentations, or promotional materials - constitutes a violation of industrial property rights and may give rise to judicial, administrative, and criminal measures, as well as compensation for losses and damages. Inkryptus may take immediate content removal measures, extrajudicial notification, or blocking of profiles and domains whenever unauthorized use of its corporate identity is detected, without prior notice.

11.4. Reporting Violations and Respecting Third-Party Rights

Third parties who identify unauthorized use of Inkryptus intellectual property may report the occurrence through official support channels (support@inkryptus.com), providing supporting documentation. Inkryptus also respects the intellectual property rights of third parties and may remove, suspend, or restrict content available on the Platform upon valid proof of violation, in compliance with applicable legislation and the principles of good faith and reasonableness. In cases of unfounded or fraudulent complaints, the complainant may be held civilly and criminally liable for any resulting damages.

12. Responsibilities and Exemptions

12.1. User Responsibility

The User is solely responsible for their use of the Inkryptus Platform and all its features, including investment decisions, transaction execution, data storage, and device security. The User is exclusively responsible for:

(i) maintaining the confidentiality of their access credentials (login, password, and 2FA authentication); (ii) verifying the compatibility of addresses, networks, tokens, and contracts before performing any operation; (iii) ensuring that their actions comply with Inkryptus's laws, regulations, and internal policies; (iv) fully understanding the risks associated with digital assets and blockchain operations, including volatility, liquidity, network failures, and price fluctuations; and (v) complying with the tax and fiscal obligations arising from any earnings obtained through the Platform, in accordance with the applicable fiscal, exchange, and regulatory legislation of their jurisdiction of residence or domicile. Inkryptus is not responsible for losses or damages resulting from User error, negligence, misuse of the account, unauthorized access, or personal device security failures.

12.2. Inkryptus's Responsibility

Inkryptus acts exclusively as a technological provider, offering digital infrastructure for custodial custody, token conversion (swap), staking, marketplace, and other services described in these Terms. Inkryptus's activities are limited to the provision of technological solutions described in these Terms, without any characterization of financial intermediation or securities offering, and does not provide any financial, tax, or legal advisory services. All educational, promotional, or training materials made available by Inkryptus are purely informational in nature and do not constitute a promise of profitability, investment recommendation, or guarantee of results.

Inkryptus undertakes to adopt information security, auditing, and regulatory compliance best practices, with technical diligence compatible with market best practices, without this implying a guarantee of results or absolute elimination of risks.

12.3. Limitations of Liability

Inkryptus acts exclusively as a technological provider of digital infrastructure and is not responsible for losses resulting from: (i) market fluctuations, depreciation, or crypto asset volatility; (ii) forks, protocol updates, blockchain network failures, or third-party events beyond its reasonable control; (iii) unavailability of partners, liquidity providers, oracles, or integrated external services; (iv) operational errors by the User, including transfers to incorrect addresses, network incompatibility, or loss of credentials; and (v) force majeure or fortuitous events, as defined by applicable legislation. Indirect damages, loss of profits, and loss of opportunity are excluded to the maximum extent permitted by applicable legislation, except in cases expressly provided in these Terms or required by law. No provision of this clause restricts the non-derogable consumer rights provided by the Consumer Protection Code and other applicable consumer protection legislation. Inkryptus does not exempt itself from liability for direct damages demonstrably resulting from failure attributable to its actions through willful misconduct, gross negligence, or service defect, within the limits of applicable legislation.

12.4. Risks Inherent to the Crypto Asset Market

The User acknowledges that crypto assets and digital tokens are high-risk assets, subject to sharp price fluctuations, restricted liquidity, regulatory uncertainty, and technological vulnerability. Transactions conducted through the Platform are irreversible once confirmed on-chain and cannot be reversed or cancelled by Inkryptus after on-chain confirmation. The User understands that participation in activities such as staking, swaps, or harvests involves risks of partial or total loss of invested capital, and that past returns do not guarantee future results. Adherence to the Platform implies express acceptance of these risks, exempting Inkryptus from any liability for losses resulting from market fluctuations, technical failures, or personal investment decisions.

13. Suspension, Termination, and Inactivity

13.1. Cancellation by the User

The User may, at any time, request the voluntary closure of their Inkryptus account by submitting a formal request to the official support channel (support@inkryptus.com) or through the settings available in the application. Closure will be subject to the absence of:

(i) outstanding financial obligations or open fees;

(ii) blocked or invested funds in active contracts, such as ongoing staking or yield pools; and (iii) internal investigations or judicial determinations that prevent immediate account settlement.

Closure will be processed maintaining only strictly necessary restrictions, with clear information to the User on pending issues and regularization pathways. In the absence of any restriction, closure will be processed within 10 business days of the request. Upon confirmation of the request, Inkryptus will grant the User a reasonable period for withdrawal of available balances, except in cases of legal, investigative, or security blocking. After cancellation, the User will no longer have active access to the Platform. Transaction records will be retained for the legally required period and may be requested through official support channels for tax or compliance purposes. Reactivation with the same registration data will not be possible.

13.2. Suspension and Termination for Terms Violation

Inkryptus may, when reasonably justified, suspend, limit, or terminate the User's access to the Platform. In urgent cases (immediate security risk, legal determination, or active threat to the ecosystem), this may occur without prior notice. In all other cases, the User will be notified before or promptly after the restriction is applied.

Circumstances that may lead to such measures include: (i) violation of these Terms of Use or any supplementary policies (Privacy, Fees, AML/CFT); (ii) indications of fraud, misuse, or irregular use of services; (iii) failure of identity verification, documentary inconsistency, or refusal to comply with registration update requests; (iv) non-compliance with compliance rules, AML/CFT policies, or international sanctions; (v) judicial, administrative, or regulatory authority determination; or (vi) operational, technical, or security risks that may compromise the integrity of the Platform or third parties.

During any suspension, Inkryptus may place a temporary hold on balances and transactions until the internal review is completed or applicable legal obligations are fulfilled. If the review concludes with no indication of irregularity, access and funds will be restored promptly. If irregularity is confirmed, permanent account closure will be communicated to the User through official channels, along with instructions for any available appeal process. The User may submit a challenge or request for review through the platform's official support channels at any time during the process.

13.3. Inactive Accounts and Maintenance Fees

Accounts that remain inactive for a period exceeding 24 (twenty-four) months may be administratively closed by Inkryptus, after prior notification to the User's registered email. Before definitive closure, the User will be invited to withdraw any available digital assets. An inactive account is one that has not had any access or financial transactions for a period equal to or greater than 24 (twenty-four) consecutive months. Inkryptus may automatically close the account upon prior notification sent to the registered email, granting the User a minimum period of 30 (thirty) days for fund withdrawal. No maintenance fee will be charged on inactive accounts. After the period expires without any response, remaining balances will be transferred to a segregated custody wallet, remaining available for withdrawal upon formal request through official support channels, provided there is no legal prescription or judicial restriction.

Even after account closure, whether voluntary or compulsory, Inkryptus may retain the User's information, records, and documents for the period necessary to comply with legal, regulatory, fiscal, and security obligations, including those related to applicable data protection laws, anti-money laundering (AML), and counter-terrorism financing (CTF). Retained data will be stored in a secure environment with restricted access, exclusively for the legal purposes provided, and may be shared with competent authorities upon formal request.

14. Support and Service

14.1. Official Support Channels

Inkryptus provides a single and official user service channel via the email address support@inkryptus.com, intended exclusively for technical, financial, operational, or security requests. All communications, questions, verification requests, cancellations, or unblocking requests must be directed exclusively to this institutional channel. Contacts made through social media, messaging applications, unofficial chats, personal emails of employees, or third parties have no contractual, technical, or legal validity and are not recognized by Inkryptus as legitimate support channels. The User is responsible for verifying the authenticity of the email domain (@inkryptus.com) before responding to any message or providing personal information. Inkryptus will never request passwords, 2FA codes, private keys, or seed phrases through any channel, including official support. If any communication requests these credentials, the User should ignore it and report it immediately. Inkryptus will endeavor to make additional service channels available as the platform evolves.

14.2. Service Rules and Procedures

When requesting support, the User must provide complete, truthful, and verifiable information and cooperate with the service process. Inkryptus may require identity verification, a verification video, or additional documents to validate account ownership before making any adjustments, unblocking actions, data changes, or releasing funds. Incomplete, inaccurate, or third-party requests may be refused or archived without review, aimed at protecting the User and the Platform. Inkryptus does not provide in-person service, screen-sharing support, or technical assistance by phone, WhatsApp, or other informal means. Requests for registration data changes, refunds, transaction corrections, account unblocking, or cancellations must follow the formal process through the institutional channel, respecting the timeframes and criteria defined in these Terms.

14.3. Response Times and Availability

User service is available on business days within the operating hours internally defined by Inkryptus, which may vary depending on demand, time zone, and the nature of the request. The average response time is up to 48 (forty-eight) business hours, which may vary depending on the complexity of the case and the demand on the support team. Security situations, account blocking, or suspected fraud will have absolute service priority. During maintenance periods, system updates, or high operational demand, timeframes may be extended without this constituting a contractual breach or service failure.

14.4. Official Communications and Notifications

All communications sent by Inkryptus to the User will be considered official and legally valid when originating from email addresses under the @inkryptus.com domain or published on institutional channels (website, application, or User panel). Such communications will have the effect of electronic notification, dispensing with additional formalities. Inkryptus recommends that the User keep their email address updated and regularly check their inbox and spam folders to ensure receipt of official notifications and announcements.

15. Privacy and Data Protection

15.1. Principles and Purpose of Processing

Inkryptus processes the personal data of its Users based on the principles of good faith, purpose, necessity, transparency, security, and accountability, in accordance with applicable data protection legislation.

The processing of personal data aims to enable the safe and proper functioning of the Platform and to allow the provision of services offered to the User.

Personal data may be used for the following purposes:

(i) creation, authentication, and maintenance of the User's account on the Platform;

(ii) execution of features and operations requested by the User, including transactions, interactions with integrated services, and use of Platform resources;

(iii) identity verification, access authentication, and prevention of fraud, abuse, or unlawful activities;

(iv) compliance with legal, regulatory, fiscal, and anti-money laundering and terrorism financing obligations;

(v) communication with the User for the sending of operational notifications, security alerts, contractual updates, and responses to support requests;

(vi) performance analysis, security, stability, and continuous improvement of the Platform, products, and services; and

(vii) sending of institutional or promotional communications, when applicable and permitted by legislation.

Inkryptus undertakes to process only the data strictly necessary for each purpose and to restrict access to information to individuals or partners who need to use it in the performance of their duties.

For the provision of its services, Inkryptus may collect and process different categories of personal data provided directly by the User or generated from the use of the Platform. The categories of data may include, among others: (a) identification data, such as name, tax ID number (CPF/CNPJ), date of birth, email, phone number, and address; (b) financial and operational data related to transactions performed on the Platform, including deposits, withdrawals, transaction history, and digital asset movements; (c) technical browsing and Platform usage data, such as IP address, access records, device identifiers, browser information, operating system, approximate geolocation, and cookies; (d) data used for identity verification and security, when required by compliance processes, fraud prevention, or regulatory obligations. The processing of such data occurs based on the legal bases provided in applicable legislation, including: (i) performance of a contract or pre-contractual procedures related to the use of the Platform and services contracted by the User; (ii) compliance with a legal or regulatory obligation, including identity verification procedures (KYC), anti-money laundering (AML/CFT), tax obligations, and notifications to competent authorities; (iii) legitimate interest of Inkryptus, when necessary to ensure Platform security, prevent fraud, protect users, improve features, and ensure service integrity, always observing the fundamental rights and freedoms of the data subject; and (iv) the User's consent, when required by law or applicable to optional, specific, and previously informed purposes. When applicable, the User may revoke consents granted, without prejudice to the lawfulness of processing carried out previously.

15.3. Sharing and International Data Transfer

Inkryptus may share personal data with third parties only when necessary for the performance of services, compliance with legal obligations, or protection of the Platform's security and its Users. Sharing may occur with: (i) technology service providers responsible for infrastructure, hosting, cloud storage, information security, data analysis, and operational support; (ii) partners specializing in identity verification, fraud prevention, transaction monitoring, and compliance obligations; (iii) technical or operational partners necessary for the operation of specific Platform features or integration with other services; (iv) independent auditors, consultants, and professional service providers subject to confidentiality obligations; and (v) administrative, regulatory, fiscal, law enforcement, or judicial authorities when there is a legal or regulatory obligation or valid requisition.

Inkryptus does not sell, rent, or make personal data available to third parties for unauthorized marketing purposes. In certain situations, personal data may be stored or processed outside the national territory, including when using technological infrastructure services or suppliers located in other countries. In such cases, Inkryptus will adopt appropriate technical, organizational, and contractual measures to ensure the protection of personal data, observing applicable legislation and, when necessary, mechanisms recognized by the National Data Protection Authority (ANPD), such as specific contractual clauses, contractual safeguards, or transfer to countries with an adequate level of data protection. Additional information on data processing, retention, sharing, and the exercise of data subjects' rights is available in the Inkryptus Privacy Policy, which forms an integral part of these Terms of Use.

15.4. Rights of the Data Subject

Under applicable data protection laws, the User, as a personal data subject, has the following rights: (i) confirmation of the existence of processing;

(ii) access to data and processing purposes;

(iii) correction of incomplete, inaccurate, or outdated data; (iv) anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance with the law; (v) portability of data to another provider, upon express request;

(vi) revocation of consent, where applicable; and

(vii) information on the sharing of data with third parties.

These rights must be exercised through the institutional channel support@inkryptus.com, with the subject line "Request – Data Protection." Requests related to data subject rights will be responded to within 15 (fifteen) calendar days of receipt, with a confirmation of receipt sent to the requester. Inkryptus may request proof of identity before fulfilling the request. In cases of high complexity, the timeframe may be extended with notice to the data subject, subject to ANPD regulations.

15.5. Information Security and Data Retention

Inkryptus adopts technical and administrative security measures, including encryption, access control, continuous monitoring, log recording, and storage on secure servers, protecting data against unauthorized access, leaks, or accidental or unlawful destruction. Personal data will be stored for the period necessary to fulfill the processing purposes, subject to legal, regulatory, and fiscal requirements. After the end of the contractual relationship, data may be retained in anonymized form or blocked, in accordance with applicable data protection laws and international data retention and minimization principles.

15.6. Supplementary Privacy Policy

The provisions of this clause must be interpreted in conjunction with the Inkryptus Privacy Policy, available at https://www.inkryptus.com/legal/privacy, which forms an integral part of these Terms. In the event of a conflict between these Terms and the Privacy Policy, the provision that ensures greater protection to the data subject will prevail, subject to applicable legal and regulatory requirements.

16.1. Applicable Law

The relationships established between Inkryptus and Brazilian individual Users are governed by Brazilian law, including, where applicable: the Consumer Protection Code (Law 8,078/1990), the General Data Protection Law (Law 13,709/2018), the Internet Civil Framework (Law 12,965/2014), the Virtual Assets Legal Framework (Law 14,478/2022), and complementary regulations of the Brazilian Central Bank, as well as the Civil Code (Law 10,406/2002). The provisions herein must be interpreted in accordance with the principles of good faith, social function of the contract, and balance between the parties, observing, where applicable, consumer protection, data privacy, intellectual property, anti-money laundering, and counter-terrorism financing rules and legislation.

16.2. Venue and Arbitration

The parties will seek to resolve any disputes, preferably, through direct negotiation or mediation, using Inkryptus's official channels. Arbitration is optional for individual Users and may only be initiated upon express agreement after the dispute arises; it is not permitted as a pre-dispute arbitration clause as a condition for platform use, in accordance with applicable consumer protection legislation or other applicable law. In the absence of resolution through negotiation, mediation, or voluntary arbitration, the User's domicile jurisdiction or another defined by applicable legal rules is elected, ensuring access to the competent judicial forum in accordance with applicable legislation. Nothing in these Terms removes the jurisdiction or competence of Brazilian administrative authorities.

16.3. Tolerance and Partial Invalidity

Tolerance of non-compliance with any obligation set forth in these Terms does not imply waiver of rights, constituting an act of mere liberality, and does not prevent Inkryptus from demanding full compliance at any time. If any clause of these Terms is deemed invalid, illegal, or unenforceable, in whole or in part, by a competent authority, the remaining provisions will remain valid and effective, preserving, where possible, the economic and legal purpose originally intended by the parties.

16.4. Assignment and Succession of Rights

Inkryptus may assign, transfer, or delegate in whole or in part the rights and obligations arising from these Terms to its parent companies, affiliates, subsidiaries, successors, or commercial partners, without this implying any change to the essential conditions of the contract or prejudice to the User's rights. The User may not assign or transfer their account or any rights and obligations arising from these Terms to third parties without prior express authorization from Inkryptus. In the event of corporate restructuring, merger, incorporation, or acquisition, these Terms will remain fully valid, preserving the original terms of use and privacy.

16.5. Contractual Integration and Supplementary Policies

These Terms constitute the entire agreement between Inkryptus and the User, superseding any prior understandings, communications, or contracts - verbal or written - dealing with the same subject matter. The following supplementary policies form an integral and inseparable part of this agreement: (i) Privacy and Data Protection Policy;

(ii) Fee and Operational Cost Schedule;

(iii) Whitepaper; and

(iv) Cookie Policy;

The Inkryptus Whitepaper is purely informational and technical in nature, reflecting conceptual ecosystem guidelines, operational parameters, and tokenomics. This document does not replace, supplement, or modify these Terms of Use and has no contractual force or binding legal effect. In the event of any divergence between the Whitepaper and these Terms, the provisions of this instrument shall prevail. Inkryptus may update, revise, or modify these Terms and their supplementary policies at any time for technical, regulatory, operational, or security reasons, and must notify Users in advance through publication on official channels (website, application, or User panel). Changes will take effect no less than 5 (five) business days after publication, except in cases of regulatory urgency, relevant operational risk, or immediate legal determination, in which case Inkryptus may apply the new conditions with immediate effect, with express notice to the User. Continued use of the Platform after the effective date will constitute tacit acceptance of the new conditions, without the need for a new formal declaration. Any translation of these Terms into other languages is for informational purposes only. In the event of any interpretive divergence, the current version published on the Platform's official channels, as indicated to the User at the time of acceptance, shall prevail.

17. Contact and Communication Channel

17.1. Official Support Email

The primary and official Inkryptus service channel is the institutional email support@inkryptus.com, intended exclusively for technical support requests, operational questions, account verification, security incidents, regulatory communications, and administrative demands. All communications directed through this channel will be internally recorded and handled in accordance with the priority levels defined in these Terms. The User acknowledges that any contact made outside the official @inkryptus.com domain, including messages via social media, instant messaging applications, personal emails, or unverified profiles, will not be considered a valid means of communication with Inkryptus and may represent an attempt at fraud or phishing. The company recommends that the User carefully check the sender's email address before responding or sending confidential information, maintaining secrecy of their access credentials.

17.2. Physical Address and Official Correspondence

The contracting entity under these Terms is Inkryptus Investimentos e Corretagem Ltda, CNPJ 36.514.802/0001-67, with registered office at Rua dos Tupis, 38, Sala 1301, Centro, Belo Horizonte/MG, CEP 30190-991, Brazil. Inkryptus may maintain administrative, operational, or correspondence addresses in different jurisdictions, in accordance with its current corporate and operational structure, with official addresses disclosed and updated on the Platform's institutional channels. This address is intended exclusively for official correspondence, judicial notifications, subpoenas, or legal communications and is not a public service location. Any physical or judicial notification must be addressed to this registered office in order to produce valid legal effects before Inkryptus.

17.3. Formal Notifications and Communications

All communications sent by Inkryptus to Users - including Terms changes, institutional notices, security alerts, regulatory communications, and contractual notifications - will be considered valid, effective, and with the legal effect of electronic notification when: (i) sent from email addresses under the @inkryptus.com domain; or (ii) officially published on the institutional website https://www.inkryptus.com or on the Inkryptus application. The User undertakes to keep their email address updated and to regularly monitor official communications, acknowledging that failure to follow these messages does not invalidate their effectiveness or applicability.

17.4. Public Information Channels and Risk Notices

The official Inkryptus website (https://www.inkryptus.com) is the public means for disseminating contractual updates, supplementary policies, fee schedules, technical whitepaper, transparency reports, and market risk notices. The company does not provide personalized support or service through social media, forums, video channels, messaging applications, user groups, or personal profiles, even if they appear to be affiliated with the brand. Any communication originating outside of official channels should be disregarded by the User and immediately reported to institutional support in order to prevent security risks, phishing, or digital fraud.

Última actualización