Data Use and Protection Policy

This policy sets guidelines for information received through ONHost channels and supplements the Privacy Policy.

1. Purpose-limited use

Contact and project data must be used for inquiries, proposals, contracting, support and related obligations. A commercial inquiry does not automatically authorize inclusion in advertising campaigns or incompatible uses.

2. Necessity and access

Only data needed to handle the inquiry should be requested. Internal or provider access must be limited to their role and service requirements. Credentials and secrets must not be shared through forms or ordinary messages.

3. Data sharing

Sharing must be limited to providers needed for operations, inquiries and applicable requirements. This policy does not authorize selling contact lists or indiscriminate use of received messages.

4. Customer-hosted information

The customer must define processing purposes and permissions for data on its website or application. ONHost activities depend on the contracted service and documented instructions. Confidentiality, processor obligations and international transfers must be addressed in the contract.

5. Protection, backups and retention

Access controls, updates, backups and monitoring must be defined for the environment and contracted scope. An addition captcha helps reduce form abuse but does not prevent every attack. Retention and deletion must consider purposes, obligations and applicable rights.

6. Incident reporting

Suspected exposure, unauthorized access or misuse must be reported to contato@onhost.com.br with enough information for assessment, without disclosing secrets or expanding exposure. Measures and notifications must be evaluated according to the incident and applicable requirements.

Reference: Brazilian General Data Protection Law — Law 13,709/2018.