Terms and Conditions of Use — Payzoi

15 May 2025

These Terms govern the use of the PAYZOI platform, operated by PAYZOI PAGAMENTOS LTDA, enrolled with the Brazilian National Registry of Legal Entities (CNPJ) under No. 34.652.051/0001-10, headquartered at Av. das Américas, 1452, Rio de Janeiro/RJ, Brazil. By creating an account, accessing the dashboard or integrating the API, you declare that you have read, understood and accepted these Terms. If you do not agree with any item, do not use the services.

Nature of the operation

PAYZOI is a technology platform that acts as a payment gateway. It provides a hosted checkout, an API and a dashboard to create and process charges by Pix and credit card, with settlement carried out through institutions authorized by the Central Bank of Brazil with which it is integrated (Banco Genial).

PAYZOI is not a financial institution or a payment institution authorized by the Central Bank of Brazil, and is not subject to such authorization because it acts as a payment intermediary. It does not provide custody of funds in its own name.

The user's account on PAYZOI is an internal environment for controlling charges, balances and payouts. It is not a payment account, checking account or any kind of bank account. All credits result from charges paid within the platform and follow the usage and payout rules set out in these Terms.

1. Account opening

1.1. All credits to the account come from charges paid by Pix or credit card through the platform. PAYZOI does not accept direct deposits into the account.

1.2. To open an account, the user must provide up-to-date and truthful data and documents: full name or corporate name, CPF or CNPJ, email, phone number with WhatsApp and any other information requested at sign-up. Only persons aged 18 or over may create and use an account. PAYZOI may request additional documents, a selfie holding an ID document, or confirm information with credit bureaus and public databases.

1.3. The user is responsible for keeping their registration data correct and up to date at all times.

1.4. The account must be accessed exclusively through the PAYZOI dashboard, with login, personal password and a second authentication factor. Passwords, codes and API keys (secret key and webhook secret) are personal and must not be shared with third parties or exposed on websites, apps or public repositories.

1.5. The user must immediately notify support of any access, transaction or API key use they do not recognize.

1.6. PAYZOI may suspend or close accounts with irregularities, false information, or that breach these Terms or the law.

1.7. Account ownership cannot be transferred after approval and the creation of any charge, paid or not. This includes migrating from a CPF to a CNPJ, even if the partner is the same person; in that case, a new account must be opened.

2. Limits for new accounts

2.1. New accounts have an initial daily volume limit equivalent in Brazilian reais to US$ 1,000.00, combining Pix and card. Live credit card payments depend on specific enablement of the account.

2.2. To request a limit increase, the user must write to [email protected] with the subject "Limit Increase", sending proof of revenue or of use of other platforms. PAYZOI may propose a fee adjustment as a condition to approve the increase.

2.3. PAYZOI may approve or deny increase requests based on internal compliance criteria, risk analysis and usage profile.

2.4. Requests will be reviewed within 5 (five) business days, with a reply by email or another registered channel.

3. Account approval

3.1. Every account undergoes a registration review before approval. Until the review is complete, the account remains pending and its API keys, both test and live, do not process charges.

3.2. During the review, the user may be contacted by WhatsApp, email or another official channel to confirm email, phone number and documents. The information must match the registration data.

3.3. Account approval does not automatically enable live mode or all payment methods. Enabling real payments, and credit card in particular, may require additional review.

3.4. Accounts with inconsistent data, invalid documents or an irregular history may be rejected or subjected to additional checks. Reviews take place during business hours.

3.5. The result will be communicated through the registered channels. If rejected, the user may correct the data or send new documents and request a new review.

4. Use of the account

4.1. The account balance may only be withdrawn to the account holder, as set out in section 9. All transactions follow PAYZOI's anti-money laundering and compliance policies.

4.2. The user must clearly state on their sales channels (website, social media, sales pages and checkout) that PAYZOI acts solely as a payment processor and is not responsible for the delivery, support, content, quality or fulfillment of obligations relating to the products and services sold. The notice must appear before the payment is completed, preferably on the sales page or in the purchase terms.

4.3. When selling products, content or services unsuitable for minors, the user must obtain the buyer's confirmation that they are of legal age (18 or over).

4.4. All transactions are continuously monitored. In the event of atypical or suspicious activity, PAYZOI may temporarily block the account until the review is complete.

4.5. Using the platform to receive payments from the account holder themselves, to simulate sales, or for any operation that attempts to circumvent PAYZOI's limits, fees or policies is prohibited. Such transactions will be blocked and may lead to account suspension.

4.6. Using the platform for illegal products or activities is prohibited, including child sexual abuse material (Brazilian Law No. 11,829/2008), unauthorized gambling, piracy, fraud, pyramid schemes and any other activities prohibited by law. Before starting to sell, the user must submit their activity for review by PAYZOI, which may refuse activities it considers prohibited or of a risk incompatible with the platform.

4.7. PAYZOI will issue a monthly Service Invoice (NFS-e) for the fees charged in the previous month, sent to the registered email. The holder must keep their corporate name, CPF/CNPJ and address up to date.

Audits

4.8. PAYZOI may audit the account's transactions at any time, especially in cases of a sudden increase in volume, a high rate of disputes or chargebacks, reports of misconduct from buyers, or an internal risk assessment.

4.9. When requested, the user must submit the Audit Form containing:

• the channels used to offer the product or service;
• a full description of what was sold;
• the purchase terms presented to the buyer;
• the amount and purpose of the transactions;
• evidence of the notice required in item 4.2.

4.10. Failure to submit the information, or submitting incomplete, false or inconsistent information, may result in a temporary or permanent block of the balance, suspension of charge creation and withdrawals, and immediate changes to the commercial terms (fees, holding periods and limits).

Liability for reversals

4.11. The user is fully liable for all transactions on their account, including those reversed, refunded or returned through chargeback, the Special Refund Mechanism (MED), court order or a similar mechanism.

4.12. Any reversed amount will be debited from the user's account and may result in a negative balance. The user undertakes to fully reimburse PAYZOI, regardless of the reason for the reversal.

4.13. If the balance is negative, PAYZOI may:

1. send a notice with a deadline for settlement;

2. apply a penalty of 2% on the debt, default interest of 1% per month and monetary adjustment by the IPCA-E index;

3. register the debt with credit default databases and pursue out-of-court or judicial collection, passing the related charges on to the user;

4. offset the debt against proceeds from future sales.

4.14. Continued default may lead to a partial or full block of the account, unilateral termination for cause and permanent removal from the platform, without prejudice to applicable civil and criminal liability.

5. Security

5.1. PAYZOI adopts technical and administrative measures to protect data and transactions, including encryption of sensitive information, two-factor authentication and continuous monitoring. Card data is entered only on PAYZOI's hosted checkout and never passes through the user's servers.

5.2. Login, API key generation and withdrawal requests require validation through an authenticator app (for example, Google Authenticator).

5.3. The user is responsible for protecting their credentials: not sharing passwords, codes or keys; keeping the secret key on the server only; verifying the signature of every webhook received as described in the API documentation; and using protected devices. Losses resulting from keys exposed by the user are the user's responsibility.

5.4. In the event of unauthorized access, loss or leak of credentials, the user must notify support immediately and generate new keys in the dashboard. Failure to notify promptly may release PAYZOI from liability for losses resulting from the delay.

5.5. PAYZOI may periodically request data updates or a password change. Failure to comply may result in temporary suspension of the account.

5.6. In the event of a security incident compromising the user's data or transactions, PAYZOI will inform the affected user and the competent authorities, as required by law, and take measures to mitigate the risks.

6. Pix payments

6.1. PAYZOI allows receiving payments through Pix, the instant payment system of the Central Bank of Brazil, 24 hours a day, including weekends and holidays.

6.2. Each Pix code generated at checkout is valid for 15 (fifteen) minutes, never beyond the charge's expiration time. While a valid Pix code exists, card payment for the same charge is blocked, to prevent duplicate payment.

6.3. Generating a Pix code requires the payer's CPF or CNPJ.

6.4. Amounts received by Pix, net of fees, become available for withdrawal right after the payment is confirmed, except for blocks provided for in these Terms.

6.5. Pix is irreversible once completed, except in the cases covered by the MED (section 8). PAYZOI is not liable for internet failures or failures of other institutions' systems affecting operations.

6.6. Pix transaction amounts are subject to per-transaction and daily limits set by Central Bank of Brazil rules and by PAYZOI's risk analysis.

7. Credit card payments

7.1. Credit card payments are processed in full, in a single installment, on PAYZOI's hosted checkout. Enabling cards in live mode depends on specific approval of the account.

7.2. All charges are made in Brazilian reais (BRL). Buyers with cards issued abroad pay in reais, and any currency conversion and related charges are the responsibility of the issuing bank and the buyer.

7.3. Proceeds from card sales, net of fees, are held as a pending balance for the holding period set for the account, currently 7 (seven) days, and only then become available. PAYZOI may change this period according to the account's risk, under items 4.10 and 8.8.

7.4. Refunds of paid sales are requested from PAYZOI support. The refunded amount is debited from the user's balance, and the fee charged by PAYZOI on the sale is returned to the user.

Chargebacks

7.5. A chargeback is a dispute of a purchase filed by the cardholder with the issuing bank. Chargebacks follow the rules of the card networks and the acquirer, not PAYZOI's.

7.6. Upon receiving a chargeback, PAYZOI will notify the user and may immediately block the disputed amount. The user must submit a defense with evidence of the sale (proof of delivery or access, purchase terms, communications with the buyer) within 30 (thirty) days, so that it can be presented to the acquirer.

7.7. If the chargeback is upheld, the sale amount and the chargeback fee, equivalent in Brazilian reais to US$ 30.00, will be debited from the user's account, and items 4.11 to 4.14 apply.

7.8. Accounts with a chargeback rate above 1% of the number of card sales in a month may have cards disabled, the holding period extended or the account closed.

8. MED and defense of infractions

8.1. The Special Refund Mechanism (MED) is the Central Bank of Brazil procedure that allows the payer to request the return of a Pix payment in cases of suspected fraud, scam or operational failure.

8.2. When a buyer opens a MED against a sale received by the user, PAYZOI may place a precautionary block on the disputed amount in the user's balance. If the balance is insufficient, PAYZOI may block amounts credited later, partially or in full, until the disputed amount is reached or up to 90 (ninety) days from the original transaction.

8.3. If the return is mandatory and the balance is insufficient, the account will become negative. The holder will be notified and will have 24 (twenty-four) hours to settle the balance through new sales or a transfer to the account indicated by PAYZOI. After this deadline, items 4.13 and 4.14 apply.

8.4. The user must submit a formal defense for 100% of the infractions received, whatever their origin: MED, chargeback, Reclame Aqui, email, social media or any other official channel. The defense must be clear and complete, including a description of the product or service, the purchase terms accepted by the buyer and evidence showing the sale was legitimate.

8.5. The deadline to submit the defense is 24 (twenty-four) hours after the notice, unless a different deadline is stated in the notice itself. If no defense is submitted in time, PAYZOI may block the withdrawal function until the matter is settled and charge an administrative fee of R$ 100.00 (one hundred reais) to respond to the MED without a defense. Charging this fee does not release the user from submitting the defense.

8.6. Defenses will be reviewed by PAYZOI's legal and risk team, which may approve them, reject them stating the reason, or request additional information. Missing or inconsistent documentation may lead to rejection and to blocks being maintained.

8.7. After 3 (three) consecutive rejected defenses, PAYZOI may block the balance for up to 80 (eighty) days from the last infraction, until all cases are resolved.

8.8. Accounts with infractions above 1.5% of transaction volume may have their commercial terms revised, including higher fees, a longer holding period and lower limits. The user will be notified by email and in the dashboard, and the change may take effect immediately.

9. Withdrawals

9.1. Withdrawals are requested exclusively through the PAYZOI dashboard, with authenticator app validation, and are limited to the available balance. Pending balance and blocked amounts cannot be withdrawn.

9.2. Pix withdrawals may only be made to a key linked to the account holder's CPF or CNPJ. Requests to third-party keys will be automatically canceled.

9.3. USDT withdrawals are sent to a wallet provided and registered by the holder, on one of the networks available in the dashboard, at the user's choice. Conversion from reais to USDT uses the rate in effect at the time of processing, and conversion and network fees are shown before confirmation. The user is solely responsible for the accuracy of the address and the network chosen: transfers to a wrong address or network are irreversible. The user is also solely responsible for any tax obligations arising from USDT withdrawals. PAYZOI may change, suspend or discontinue USDT withdrawals at any time to comply with applicable laws and regulations on virtual assets.

9.4. Every withdrawal is reviewed before being processed. While under review, the amount is shown as "in withdrawal" and is already deducted from the available balance.

9.5. New accounts have a limit equivalent in Brazilian reais to US$ 10,000.00 per withdrawal and may make 1 (one) withdrawal every 14 (fourteen) days. The hours during which withdrawals may be requested are agreed between the holder and PAYZOI's financial team. These restrictions apply until the account completes 100 (one hundred) successful sales and may be reviewed upon request, under section 2.

9.6. The withdrawal fee, by Pix or USDT, is listed in the fee schedule and shown before confirmation.

10. Additional security measures

10.1. PAYZOI may preventively block accounts with suspicious transactions, signs of fraud or improper use, in accordance with applicable law. Whenever possible, the user will be notified and informed of the steps to resolve the situation.

10.2. A user who fails to meet requests for registration updates or additional documents within 48 (forty-eight) hours may have their account suspended or closed. The deadline may be adjusted in specific cases, by express notice.

10.3. If the account is closed due to irregularity, the remaining balance, after deducting debts, court-ordered blocks and amounts held to cover open disputes, will be transferred to a valid account or wallet of the holder, as set out in section 9.

11. Account closure

11.1. Account closure may be requested by the user or by PAYZOI at any time, with written notice by email, dashboard notification or another registered channel.

11.2. Closure terminates these Terms, deactivates the API keys and cancels pending charges. It does not release the user from financial, contractual or legal obligations arising before closure, including chargebacks and MEDs received afterwards.

11.3. The request will be processed within 30 (thirty) business days, provided there are no debts, held balances or judicial or administrative proceedings linked to the account. If there are pending matters, the user will be notified and the deadline will be suspended until they are resolved.

12. Fees and charges

12.1. PAYZOI charges fees for the use of its services, as set out in the fee schedule available in the dashboard. The fee for each sale is deducted at the time of payment and shown per charge in the dashboard and the API.

12.2. Fees not linked to a sale (withdrawal, chargeback, MED administrative fee) are debited from the balance. If the balance is insufficient, they will be charged as soon as funds become available.

12.3. PAYZOI may change its fees with at least 30 (thirty) days' prior notice, by email or in the dashboard, except for the risk-based revisions provided for in items 4.10, 7.8 and 8.8. A user who does not agree may close the account at no cost before the change takes effect.

12.4. Failure to meet financial obligations subjects the user to the charges in item 4.13.

13. Data protection and privacy

13.1. PAYZOI processes personal data in accordance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018), on the legal bases of contract performance, compliance with legal obligations, fraud prevention and, where necessary, consent.

13.2. Data of users and buyers (name, email, CPF/CNPJ and transaction data) is used only for the purposes of these Terms. It may be shared with partner institutions, acquirers, card networks and authorities, to the extent necessary. Full card data is neither stored by PAYZOI nor passed on to the user.

13.3. Data subjects may request access, correction, anonymization, blocking, deletion, portability, information on data sharing and withdrawal of consent by emailing [email protected].

13.4. PAYZOI may retain data needed to comply with legal and regulatory obligations and to defend its rights, even after the account is closed.

13.5. PAYZOI adopts technical and organizational measures to protect data against unauthorized access, loss or alteration.

14. Final provisions

14.1. PAYZOI uses its best efforts to keep the platform, the API and webhook delivery stable, but is not liable for failures caused by external factors, such as internet providers or the systems of financial institutions, acquirers or card networks. For failures directly attributable to PAYZOI, liability is limited to proven actual damages, where there is fault or willful misconduct (Brazilian Civil Code, art. 186), excluding lost profits and indirect damages.

14.2. PAYZOI is not liable for acts of God or force majeure, such as power outages, cyberattacks or natural disasters (Brazilian Civil Code, art. 393).

14.3. Amendments to these Terms will be communicated by email and in the dashboard at least 15 (fifteen) days in advance and will require new acceptance at the first access after they take effect. A user who does not agree may close the account at no cost.

14.4. PAYZOI's tolerance of a breach of any clause does not constitute a waiver of the right to enforce it. The invalidity of any clause does not affect the others.

14.5. These Terms are in force from January 2025 for a period of 5 (five) years, until January 2030.

15. Jurisdiction

15.1. The courts of the Capital District of the State of Rio de Janeiro, Brazil, are elected to settle disputes arising from these Terms, unless applicable law, including the Brazilian Consumer Protection Code, provides for a different venue.