Privacy Policy

1. Who we are

A&B Hub (“A&B Hub”, “we”, “us”) is a web development agency operated from Belo Horizonte, MG, Brazil, serving small businesses in the United States. A&B Hub is the trading name of WOLF B3 Participações Ltda, a company registered in Brazil under CNPJ 40.044.657/0001-75, and that company is the controller of the personal information described in this policy.

This policy covers aebhub.com and the email correspondence that follows from it. It does not cover websites we build for clients — those are governed by each client's own policy.

Contact for any privacy matter: contact@aebhub.com.

2. What we collect

Information you give us

When you complete the scoping form, we receive:

• Your name and email address — required, so we can reply.
• Your phone number — optional. The form works without it.
• What you tell us about your project — the type of project, your timeline, the budget range you selected, and anything you write in the description field.

At the bottom of the home page there is a second, shorter form, provided by the customer relationship management (CRM) system we use to keep track of inquiries. It asks for your name, email address, phone number, and a message, and it asks you to confirm that you agree to be contacted. What you enter there is stored in that CRM rather than sent to our mailbox — the two forms have different destinations, and section 5 names both.

If you email us directly, we receive whatever you put in that email. Please do not send us passwords, payment card numbers, government identification numbers, health information, or anything else sensitive through the form or by email. We do not ask for any of it and we have no use for it.

Information collected automatically

Our server logs and analytics record ordinary technical data: IP address, browser and device type, pages viewed, referring page, and timestamps. We also record the IP address of form submissions for a short period to enforce a rate limit against automated abuse.

What we do not collect

We do not build advertising profiles, we do not buy personal information from data brokers, we do not use tracking pixels that follow you to other websites, and we do not knowingly collect anything from children.

3. Why we use it, and on what legal basis

To answer your inquiry

The whole point of the form. Legal basis: performance of a contract, or steps taken at your request before entering into one.

To provide services if you become a client

Legal basis: performance of a contract.

To keep the site working and free of abuse

Rate limiting, spam filtering, security logging. Legal basis: our legitimate interest in operating a functioning website.

To understand how the site is used

Analytics on pages read and on how far people get in the form, so we can fix what does not work. Detailed in section 7. Legal basis: legitimate interest, or your consent where consent is required.

To meet legal and accounting obligations

Legal basis: compliance with a legal obligation.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

4. Marketing email

We do not run a newsletter and we do not add form submissions to a marketing list. If we ever start sending marketing email, it will be to people who asked for it, every message will carry a working unsubscribe link and our physical address, and we will honor opt-outs promptly — as required by the CAN-SPAM Act.

Replies to your inquiry, project updates, and invoices are transactional, not marketing.

5. Who else sees your information

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not trade or rent it to anyone.

We do rely on a small number of service providers who process data on our behalf, under contract, and only for the purposes we specify:

Google (Google Workspace)

Hosts our email. Anything you send us, and our replies, sit in that mailbox. Google also provides the analytics described below.

Vercel

Hosts this website and processes the request logs that come with serving it.

Cloudflare

Provides the domain name service for aebhub.com. It resolves the address your browser asks for; it does not sit in the path of the pages themselves.

Livier CRM (crm.livierhub.com)

Runs the short form at the bottom of the home page and stores what you submit through it — your name, email address, phone number, and message — so that we can track the inquiry and follow it up. Submissions to that form go to the CRM; they do not pass through the mailbox described above.

Meta

Only if and when advertising measurement is enabled — see section 7. It is not enabled today.

We may also disclose information if the law requires it, to establish or defend a legal claim, or to protect the rights and safety of people. If our business is ever transferred, personal information would move with it, and we would say so here first.

6. International data transfer

Brazil has a comprehensive data protection law — the Lei Geral de Proteção de Dados (LGPD) — and we are subject to it. Where the GDPR applies to a transfer, we rely on the European Commission's adequacy framework for Brazil or on standard contractual clauses, as appropriate.

We are telling you this plainly because you deserve to know where your information goes before you type it, not after.

7. Cookies, analytics, and advertising

This site sets no advertising cookies and shows no third-party ads.

Analytics

We use Google Tag Manager and Google Analytics to understand how the site is used. This uses cookies or similar identifiers. It goes further than counting page views, so here is exactly what is recorded:

• Pages viewed, and the usual technical data described in section 2
• Which call-to-action button you used, and where on the page it was
• Which questions you opened in the FAQ
• How far you got in the scoping form, and which fields failed validation if any did
• When you complete the form: the type of project, timeline, and budget range you selected, so we can see what kind of work the site attracts
• An estimated commercial value we attach to the inquiry, derived from the budget range you picked. It is an internal planning figure, not a price
• For the shorter CRM form: only the fact that it was submitted, and whether the CRM accepted it. None of what you type into that form is sent to analytics, and no value is attached to it

Your name, email address, phone number, and the description you write are never sent to analytics. They go only to our mailbox, or — for the CRM form — only to the CRM. What analytics receives are the multiple-choice answers, which do not identify you.

Advertising measurement

We may enable the Meta Pixel to measure whether our own advertising works. If we do, that counts as “sharing” personal information for cross-context behavioral advertising under California law, and we will publish a “Do Not Sell or Share My Personal Information” control before switching it on, together with an updated version of this policy.

Your controls

You will not see a cookie banner here, and that is deliberate. United States privacy law asks us to tell you what we collect and to give you a way out — not to interrupt you for permission before the page loads. Instead of a dialog, the site reads the signals your browser already sends:

Global Privacy Control

If your browser sends the GPC signal, we treat it as a legal opt-out of sale and sharing: advertising storage and advertising identifiers are switched off before any tag loads, automatically, with nothing for you to click. Analytics stays on, because measuring our own site is neither a sale nor a share. You can check the signal at globalprivacycontrol.org.

If you are in the EEA, the United Kingdom, or Switzerland

We do not ask you for consent, so we do not assume it. Analytics and advertising storage are both denied for you by default, and no cookie is set for either. You are welcome on the site; you are simply not measured on it.

Your browser

Most browsers let you block or delete cookies outright. Blocking them will not stop this site from working.

You can also write to contact@aebhub.com and ask us to stop. Section 9 covers the rest of your rights.

8. How long we keep it

Inquiries that do not become projects

Up to 24 months, then deleted. Ask us and we will delete them sooner.

Inquiries stored in the CRM

The same 24 months, on the same terms. Ask us and we will delete them from the CRM too.

Client records

For the duration of the engagement and up to 5 years afterwards, to meet contractual, tax, and accounting obligations.

Rate-limiting records

Minutes. They exist only to stop automated abuse and are not stored durably.

Analytics

According to the retention period configured in the analytics tool, at most 14 months.

9. Your privacy rights

We extend the rights below to every resident of the United States, regardless of which state you live in and regardless of whether a particular state law applies to a company our size. We would rather give you the right than argue about thresholds.

• Know and access — what personal information we hold about you, where we got it, why we have it, and who we disclosed it to.
• Correct — fix information that is wrong.
• Delete — have us erase it, subject to narrow legal exceptions such as records we must keep for tax purposes.
• Portability — receive a copy in a usable, machine-readable format.
• Opt out — of sale, of sharing for cross-context behavioral advertising, and of profiling with legal or similarly significant effects. We do none of these today, so there is presently nothing to opt out of.
• Limit the use of sensitive personal information — we do not collect any, so this does not arise.
• Non-discrimination — exercising any right will never get you a worse price, a worse service, or a slower reply.
• Appeal — if we refuse a request, you may appeal by replying to our decision. We will respond to the appeal in writing within 45 days and explain our reasoning. Several state laws require this; we offer it to everyone.

If you are in the European Economic Area or the United Kingdom

You additionally have the right to object to processing based on legitimate interests, to request restriction of processing, to withdraw consent at any time without affecting processing already carried out, and to lodge a complaint with your supervisory authority.

If you are in Brazil

The LGPD gives you the rights above along with the right to confirm the existence of processing, to request anonymization or blocking of unnecessary data, and to information about the entities we share data with.

How to exercise them

Email contact@aebhub.com and tell us what you want. There is no form to fill in.

We will confirm receipt within 10 days and respond substantively within 45 days. If a request is genuinely complex we may take a further 45 days, and we will tell you why before the first period expires. Requests are free unless they are manifestly unfounded or repetitive.

We will need to verify that the request comes from you — usually by replying from the email address involved. An authorized agent may act on your behalf with written proof of authority. We only ask for the minimum needed to be confident we are not handing your data to a stranger.

10. Security

The site is served over HTTPS. Form submissions are validated and rate-limited. Access to the mailbox holding inquiries is restricted to the two of us and protected by two-factor authentication. Credentials are never stored in our source code.

No method of transmission over the internet is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

11. Children

This is a business-to-business site and it is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

12. Changes to this policy

If we change this policy we will update the date at the top. If the change is material — for example, if we begin advertising measurement, or start sending marketing email — we will say so prominently on this page before the change takes effect.

13. Contact

A&B Hub — WOLF B3 Participações Ltda
CNPJ 40.044.657/0001-75
Belo Horizonte, MG, Brazil
contact@aebhub.com

We do not publish our street address. If you need it in writing — to serve a legal notice, or for your own records — email us and we will send it.