# H3aven privacy

This privacy page describes how the public H3aven website at h3aven.com treats information. It is not a substitute for the data-processing terms of a contracted industrial deployment. Purpose, roles, access, and retention for product workloads are defined with the customer during technical diligence and in the signed contract, under applicable LGPD requirements.

## What this website processes

The public site is a brochure, a calendar link, and a read-only JSON/MCP surface for agents. Theme and language preferences may be stored in the browser (`localStorage` keys `h3-theme` and `h3-lang`). There is no self-serve account, no newsletter form, and no authenticated session on this hostname.

Scheduling a diagnosis happens on Cal.com. WhatsApp conversations happen on Meta's messaging service. Those providers process the data you type into their products under their own terms. H3aven uses those channels to arrange a 30-minute diagnosis; it does not run a hidden tracking pixel farm on this page to build advertising profiles.

## Product deployments

Contracted H3aven deployments run on enterprise cloud infrastructure with encryption in transit and at rest, logical tenant isolation, and an audit trail of actions in scope. Applicable controls are proven in the contracted scope, not asserted as a blanket public certification on this page.

## Requests

To ask about personal data collected through the public site or a diagnosis, use the same contact channels published at https://h3aven.com/contact: the diagnosis calendar or WhatsApp. Do not send contract files to the website API; it is read-only and does not accept uploads.