Privacy Policy

This policy explains processing of personal data of visitors and people contacting ONHost. Responsibilities and instructions for customer-hosted data must be defined in the service contract.

1. Data received

Forms request name, email, phone, company if provided, message and project information. Subscription requests also include plan, server location, billing period, domain and notes. Do not submit passwords, card details or sensitive personal data.

Infrastructure may process IP addresses, technical request data, access logs and authentication information when needed. The addition check uses a temporary challenge and frequency controls to help reduce automated submissions.

2. Purposes and legal grounds

Contact data is used to respond and prepare the proposal or contract requested by the data subject. Depending on the situation, processing may rely on pre-contractual steps or contract performance, legal obligations, exercising rights, consent or legitimate interests after appropriate assessment. Form authorization is not a general advertising authorization.

3. Services involved

Operations use website infrastructure, communication services and, when activated, an email sending provider. contato@onhost.com.br uses Microsoft 365. API sending is prepared for Resend and requires service configuration to activate. The WhatsApp button opens an external service chosen by the visitor.

These providers may process information needed for their services and technical logs. WHOIS/RDAP sends the domain name to the relevant public registries, without sending contact form content.

4. Storage and retention

The current form does not maintain its own request database. Sent messages may remain in the mailbox and provider technical logs. Retention should last as needed for inquiries, contracts, applicable obligations and protecting rights. Deletion requests are assessed in light of these retention grounds.

5. Data outside Brazil

Infrastructure and communication providers may process data in other countries. Choosing hosting in Brazil does not mean every communication service processes data exclusively there. International transfers must comply with applicable LGPD and ANPD requirements and mechanisms.

6. Data subject rights

You may request confirmation of and access to processing, correction, sharing information, anonymization, blocking or deletion where legally applicable, regulated portability and withdrawal of consent. You may also challenge processing and petition the ANPD. Assessment considers the legal ground and retention duties; deletion is not automatic in every case.

7. How to submit a request

Send your request to contato@onhost.com.br with the subject “Privacy / LGPD”. Describe the request and provide a contact method. We may request proportionate information to verify identity before disclosing or changing data.

8. Updates

This policy must be reviewed when the website's operation or services change. The current version and its date are published on this page.

Reference: Brazilian General Data Protection Law — Law 13,709/2018.