What will we do with this information?
When you make a transaction with our store, as part of the buying and selling process, we collect the personal information you provide us such as: name, email, and address.
When you access our site, we also automatically receive your computer's internet protocol, IP address, in order to obtain information that helps us learn about your browser and operating system.
Email marketing will only be conducted if you allow it. In these emails, you may receive news about our store, new products, and other updates.
Consent
How do you obtain my consent?
When you provide personal information such as your name, phone number, and address to complete: a transaction, verify your credit card, place an order, arrange for delivery, or return a purchase. After performing these actions, we understand that you agree to the data collection to be used by our company.
If we ask for your personal information for a secondary reason, such as marketing, we will ask you directly for your consent, or provide you the opportunity to say no.
What if you want to withdraw your consent, how to proceed?
If after you provide us your data, you change your mind, you can withdraw your consent for us to contact you, for the ongoing data collection, use, or disclosure of your information, at any time by contacting us at [email protected] or by sending a correspondence to: Hcode Rua José Versolato, 101 - Centro, São Bernardo do Campo - SP, 09750-730
Disclosure
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
Third Party Services
In general, third-party suppliers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are obliged to provide to them about your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so that you can understand how your personal information will be used by these providers.
In particular, remember that certain providers may be located in or have facilities located in jurisdictions different from yours or ours. Therefore, if you want to continue with a transaction involving the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which the service provider or its facilities are located.
For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then the personal information you use to complete that transaction may be subject to disclosure under the laws of the United States, including the Patriot Act.
Once you leave our store's website or are redirected to a third-party application or website, you are no longer governed by this Privacy Policy or by our site's Terms of Service.
Links
When you click on links in our store, they may direct you outside our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Security
To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that they are not improperly lost, stolen, accessed, disclosed, altered, or destroyed.
If you provide us with your credit card information, that information is encrypted using "secure socket layer" (SSL) technology and stored with AES-256 encryption. While no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional standards generally accepted by the industry.
Data deletion
You can request the deletion of the data we receive from Meta and Google at any time, in two ways:
- In the platform: a brand administrator can disconnect the account under Social Media › Channels. The credential is erased immediately and, for YouTube, access is also revoked at Google.
- By email: send the request to [email protected] with the subject "Data deletion", stating the Page name, the Instagram username, the YouTube channel or the Business Profile. We also handle requests from people who commented on, reviewed or sent messages to a brand served by the platform.
We confirm receipt and complete the deletion within 30 days, replying to the same email.
These requests add to the rights granted by the Brazilian General Data Protection Law (LGPD, Law 13,709/2018): confirmation, access, correction, portability, deletion and withdrawal of consent. The data controller is HCODE CONSULTORIA E TECNOLOGIA LTDA, Rua José Versolato, 101 - Centro, São Bernardo do Campo - SP, 09750-730, Brazil.
Changes to this privacy policy
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately after their posting on the site. If we make material changes to this policy, we will notify you here that it has been updated, so you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we can continue selling products to you.
Social media integrations (Meta and Google)
Hcode's social media management platform lets brands connect Facebook Pages, Instagram professional accounts, YouTube channels and Google Business Profiles to publish content, follow metrics and reply to comments, reviews and messages. A connection only happens when the account administrator authorizes access on the Meta or Google login screen, and each connected account is used only by the brand that connected it.
Data we receive
How we use this data
We use this data only to provide the service the brand asked for: publish the content the team created and approved, confirm the publication, show the metrics, and let the team read and reply to comments, reviews and messages. The title, description and privacy of each video are set by the team itself. We do not sell this data, we do not use it for advertising, to build profiles of people or to train artificial intelligence models, and we do not share it with third parties other than the processors listed below.
When automatic inbox triage is enabled, the text of the comment, review or message and the author's name are sent to an artificial intelligence provider engaged by Hcode, only to classify the content and suggest a draft reply. A reply is only sent after a person on the brand's team reviews it.
Google and YouTube
Hcode's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The platform uses the YouTube API Services. By connecting a channel you agree to the YouTube Terms of Service, and the channel data is also handled under the Google Privacy Policy.
Storage and security
Access and refresh tokens are stored encrypted and are never shown in the interface or written to logs; Google's short-lived tokens exist only in memory. Media reach the networks through temporary signed links, and images have their metadata (including location) removed before upload. Data is hosted on DigitalOcean, LLC servers, with traffic protected by Cloudflare, Inc.
How long we keep it
We keep the data while the account is connected, and the account name, username and picture are refreshed daily during that time. On disconnection, the credential is erased immediately and, for YouTube, access is also revoked at Google. Connections started and not confirmed are discarded within 15 minutes. The history of posts, metrics and messages remains available to the brand until deletion is requested, as described in the next section.
You can also revoke access at any time in the Facebook settings (Settings & privacy › Business integrations), the Instagram settings (Settings › Apps and websites) or your Google Account, at myaccount.google.com/permissions.