Privacy Frameworks
Full compliance with Brazilian and international data protection regulations.
LGPD Compliance
CompliantFull compliance with Lei n. 13.709/2018 (Brazilian General Data Protection Law).
- ✓Data subject rights: Access, correction, deletion, portability
- ✓Legal basis documentation for all processing
- ✓Privacy contact: privacy@huglabs.ai (DPO appointment in progress)
- ✓Cookie preferences are controlled through your browser settings
GDPR Readiness
ReadyReady for EU customer data processing with comprehensive safeguards.
- ✓Standard Contractual Clauses (SCCs) — planned
- ✓Data Processing Addendum (DPA) — planned; contact us
- ✓Right to erasure — honored via privacy@huglabs.ai
- ✓Data portability — planned
SOC2 Roadmap
Our journey to SOC2 certification is underway.
Certification Status
In ProgressWe are actively working toward SOC2 certification to meet enterprise security requirements.
Trust Service Criteria
Timeline
SOC2 Type I Audit
Point-in-time assessment of our security controls and policies.
SOC2 Type II Certification
Full certification demonstrating operational effectiveness over time.
Data Processing Agreement
Comprehensive legal framework for enterprise data handling.
Purpose Limitation
Clear definitions of data processing purposes and restrictions on unauthorized use.
Security Measures
Technical and organizational measures to protect personal data at rest and in transit.
Sub-processor Management
Transparent sub-processor list with notification of changes.
Sub-processors
Third-party services that process data on our behalf.
| Provider | Service | Location |
|---|---|---|
| Formspree | Contact / lead form processing | USA |
Retention Policy
Clear guidelines on how long we retain different types of data.
User Data
Active + 30 daysRetained while account is active plus 30 days after deletion request.
Processed Data
Session OnlyUsed only to improve user experience during active sessions.
Operational Logs
90 daysSystem and application logs for operational monitoring.
Security Logs
1 yearSecurity event logs retained for compliance and forensics.
Complete Deletion
Upon request via privacy@huglabs.ai, we will delete the contact data you submitted through our forms (processed by our form provider) and confirm when done.
Questions About Compliance?
Our team is ready to discuss your specific regulatory requirements and how HugLabs can help you stay compliant.
Contact Compliance Team