Privacy Policy
Version 2026.11b, updated on November 4, 2026
This policy explains how HubVLS (HUBVLS LTDA, CNPJ 69.745.668/0001-64), a VLSolutions group company, processes personal data on the hubvls.com.br website, in its contact channels and on the platforms it develops and maintains for its clients, in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018).
1. Website browsing
The website does not use advertising or tracking cookies. The hosting provider (Cloudflare) logs technical access data, such as IP address, date, time and browser, for the security and operation of the service.
To know how many people visit the website and where they come from, we count visits anonymously, without cookies: page viewed, referring site or search, device type, country, and clicks on the WhatsApp and email buttons. The IP address is not stored; we use only a code that changes every day and does not allow the visitor to be identified.
2. Build your system and contact requests
On the Build your systempage, anyone requesting the free trial provides name, email, WhatsApp, CNPJ or CPF, company legal name or full name, address, and the company's colors and logo. In the home page highlight, anyone requesting a demo provides name, WhatsApp and industry. We use this data to create the trial system, contact you about signing up and, if the client subscribes, for billing. It is kept in the HubVLS admin panel and is not sold or transferred to third parties. To limit automated submissions, we store only a code derived from the IP address that changes every day, never the IP itself.
2.1. Contact by email or WhatsApp
When you write to contato@hubvls.com.br or reach us on WhatsApp, we receive what you send: name, phone, email, company and the content of the conversation. We use this data only to reply, prepare proposals and maintain the business relationship. We do not sell or transfer this data for third-party marketing purposes.
3. Platforms delivered to clients
- In the systems HubVLS runs under contract, the data entered belongs to the client. The client is the controller and HubVLS acts as processor, handling the data only to provide the contracted service and according to the client's instructions.
- Each client has its own space, with access by user and password. The HubVLS team only accesses a client's data for support, bug fixes and maintenance.
- Sensitive data (such as health) and data about children and teenagers should only be entered by the client under its own legal basis; it receives the same security measures and has no other use.
- When the contract ends, the client may request a data export within 30 days; after that, the data is deleted and backups expire within 12 months.
4. System users
For system users, HubVLS processes name, email, access profile, access logs (date, time, IP address and browser) and the record of acceptance of the terms. HubVLS is the controller of this data, for security, support, billing, measuring system use and meeting legal obligations. Access logs are kept for 6 months (Law 12,965/2014, art. 15); the acceptance record, while the contract lasts and for the limitation period of its obligations.
5. Artificial intelligence
Artificial intelligence features (Consultant data checks, review of inspections and reports, prospecting search) only receive the data needed for the task, when the user asks. Providers do not use this data to train models. The result is a suggestion; the decision belongs to whoever uses the system.
6. Providers and international transfer
We use these providers to run the systems. Some process data outside Brazil; the transfer follows art. 33 of the LGPD and ANPD Resolution CD/ANPD 19/2024, through the standard contractual clauses approved by the ANPD or another mechanism it allows. A new provider is added to this list 15 days in advance.
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare | Hosting, database, files and artificial intelligence features | United States and global network |
| Anthropic | AI review of inspections and reports, when the client asks | United States |
| GitHub (Microsoft) | System code and encrypted backups | United States |
| Encrypted backups and, in Secretário, user sign-in and calendar | United States | |
| Resend | System emails (access, password, notices) | United States |
| Netlify | Bridge to the tax invoice services | United States |
| Asaas | Subscription billing (Pix, card and boleto) | Brazil |
| Better Stack | Uptime monitoring (receives no client data) | United States and European Union |
We also share data when the law or a competent authority requires it. We do not sell or hand over personal data for third-party marketing.
7. Retention period
We keep data for as long as needed for the purpose it was collected for, to meet legal obligations or to exercise rights, within the periods stated in this policy.
8. Security and incidents
We use encrypted connections (HTTPS), per-user access control, securely stored passwords, encrypted backups in different places, access logs and continuous monitoring. A security incident that may bring relevant risk or harm is reported to the client within 48 hours and, when HubVLS is the controller, to the ANPD and data subjects within the period set by ANPD Resolution CD/ANPD 15/2024.
9. Your rights and contact channel
You may ask us to confirm that we process your data, to access, correct, delete or port it and for information about sharing, and you may withdraw consent (LGPD, art. 18). The data subject contact channel is contato@hubvls.com.br. If your data was entered by a HubVLS client in that client's system, the request goes to that client, who is the controller; HubVLS supports the response. You may also contact Brazil's National Data Protection Authority (ANPD).
10. Terms of use and contract
Use of HubVLS systems is governed by the Terms of Use e o Subscription agreement.
11. Changes
This policy may be updated. The new version is shown in the systems at the next sign-in for new acceptance, and the date at the top shows the version in force.