Urbyx

Data Licensing Privacy Notice

Last updated: 13 August 2026

Leia esta página em português

This notice describes how Benedai Soluções Ltda ("Benedai", "we"), company number (CNPJ) 58.877.316/0001-46, registered in Joinville, Santa Catarina, Brazil, builds and licenses the datasets sold under the Urbyx brand — what they contain, what they exclude, where they come from, and how they sit under Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD") and, where relevant, the GDPR.

This page covers datasets licensed to business customers. Personal data processing for visitors and users of our website and platform is described in our Privacy Policy.

1. What the datasets contain

Our data products describe places, not people. A typical record is an address point with geographic coordinates, the census tract it belongs to, and attributes of that location: ground elevation, distance to the nearest watercourse, nearby schools and health facilities, and demographic and income indicators computed for the census tract — never for the individual household.

2. What the datasets exclude

Our data products contain no:

Address points originate from the Brazilian official address registry and are distributed with no occupant information attached.

3. Data sourcing

All content in our data products derives from Brazilian public-sector open data and open scientific datasets, obtained directly from the publishing bodies: IBGE (2022 Census, CNEFE address registry, PNAD Contínua household survey), INEP/MEC (education), CNES and ANVISA (health), ANA (national hydrography), S2ID (civil defence disaster records), and the ANADEM digital terrain model developed by the Federal University of Rio Grande do Sul with the Brazilian Water Agency.

We do not collect data from individuals to build these products, and we do not acquire third-party datasets containing personal data.

4. Aggregation and statistical disclosure control

Demographic and income indicators are published at census tract granularity — the smallest official geographic unit of the Brazilian Census, aggregating hundreds of households. No value is attributed to a specific dwelling.

Where we derive statistics for smaller cuts, we suppress cells with an insufficient number of observations, so that an aggregate value cannot be reversed to an individual case. This is the same statistical disclosure control practice applied by official statistical institutes.

5. Derived indicators

Some fields are computed by us from the primary sources — for example, census income uplifted to current values using state-level PNAD Contínua factors and an IPCA inflation bridge. These fields are flagged as derived in each product's documentation, and we also deliver the original official values so that customers can audit the difference.

6. Regulatory position

We consider that the datasets described here do not constitute personal data under Article 5(I) of the LGPD, nor under Article 4(1) of the GDPR, as they do not relate to an identified or identifiable natural person. We nonetheless apply the minimisation and aggregation practices described above as standard, and resolve any interpretive doubt in favour of protection.

7. Licensee obligations

Our licence agreements expressly prohibit the customer from:

The customer is the controller of any processing it carries out after delivery and is responsible for its own compliance.

8. Personal data we do process in this relationship

To negotiate and perform licence agreements we process business contact data of customer representatives — name, work email, job title and company. The lawful basis is performance of a contract and legitimate interest in conducting the commercial relationship (LGPD Article 7(V) and 7(IX); GDPR Article 6(1)(b) and 6(1)(f)). This data forms no part of any product and is shared only with the processors necessary for invoicing and communications.

9. International transfers

Data products may be delivered to customers outside Brazil. As they contain no personal data, such delivery does not constitute an international transfer of personal data. Business contact data referred to above may be processed in other countries where the customer is established abroad, under applicable contractual safeguards. Where a customer is subject to the GDPR, we enter into the corresponding data processing agreement.

10. Source attribution

Elevation fields and indicators derived from them are produced using the ANADEM terrain model (Laipelt et al., 2024 — UFRGS/ANA), built on the Copernicus WorldDEM-30. Every delivery carries the required source notice: "Produced using Copernicus WorldDEM-30 © DLR e.V. 2010–2014 and © Airbus Defence and Space GmbH 2014–2018 provided under COPERNICUS by the European Union and ESA; all rights reserved."

11. Contact

Data protection enquiries and data subject requests: [email protected]. Commercial and licensing enquiries: [email protected].

12. Changes

This notice may be updated. The current version will always be available on this page, with the date of last update.