Privacy Policy

1. Who the data controller is

HDSistemax, a software house based in Belo Horizonte (MG), Brazil, is the controller of the personal data processed on this website. For any privacy or data protection matter, contact contato@hdsistemax.com.br.

2. What data we collect

We only collect the data needed for each purpose:

• Contact form: name, email, phone, company, subject and the message you write.
• Hosting purchase and customer area: name, email, phone, Brazilian tax ID (CPF or CNPJ), person type, municipal registration (when applicable), address, the purchased domain and your password (stored encrypted).
• Payments: amount, plan, status and transaction ID. Card and PIX details are entered directly with Mercado Pago and are not stored on our servers.
• Technical browsing data: IP address, browser type, pages visited, date and time, logged by our servers and infrastructure providers for security and operation of the site.

3. How we use the data

• To answer messages sent through the contact form and handle quote requests.
• To create and manage your hosting account, provision the purchased service, send renewal notices and service emails.
• To process payments, issue charges and comply with legal and tax obligations.
• To protect the site against abuse, spam and automated attacks.
• To display ads and monitor how the site works.

4. Legal bases (LGPD)

We process personal data based on the performance of a contract and pre-contractual steps (hosting purchase and service), compliance with legal or regulatory obligations (tax and access records), legitimate interest (site security and handling contact requests) and consent, when required (for example, for personalized advertising cookies).

5. Who we share data with

We do not sell personal data. We only share what is necessary with providers that help us run the site and services:

• Mercado Pago: payment processing.
• Brevo: transactional emails (confirmations, renewal notices, replies).
• Cloudflare: content delivery network, attack protection and anti-bot verification (Turnstile) on forms.
• DigitalOcean: hosting of the servers where the site and data are stored.
• New Relic: application performance and error monitoring.
• Google (AdSense): ad serving, as described in the cookies section.
• Public authorities, when required by law or court order.

6. Cookies and Google ads

We use essential cookies to keep you signed in, remember your language and protect our forms. Without them, parts of the site do not work.

This site shows Google AdSense ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this and/or other sites on the Internet.

You can opt out of personalized advertising in Google's Ads Settings (https://adssettings.google.com) and learn more about how Google uses data at https://policies.google.com/technologies/ads. You can also block or delete cookies in your browser settings. Where required by law, we will ask for your consent before using non-essential cookies.

7. How long we keep data

Contact messages are kept for as long as needed to handle your request. Customer and payment data are kept while the service is active and afterwards for the period required by Brazilian tax law and the Brazilian Internet Civil Framework (Marco Civil da Internet). After that, they are deleted or anonymized.

8. How we protect data

We use HTTPS across the site, encrypted passwords, restricted access to administrative systems, audit logs of administrative actions and daily backups. No system is completely immune to failures; if an incident may create a relevant risk, we will notify affected data subjects and Brazil's National Data Protection Authority (ANPD), as required by the LGPD.

9. Your rights

Under the LGPD you may, at any time: confirm whether we process your data; access your data; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary data; request portability; know who we share it with; withdraw consent; and object to processing carried out without consent, where applicable.

To exercise these rights, write to contato@hdsistemax.com.br. Hosting customers can also update their data in the customer area.

10. Children and teenagers

This site and our hosting are intended for adults and businesses. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy to reflect changes to the site, our services or the law. The last-updated date is shown at the top of this page; relevant changes will be communicated to customers by email.