1. Who is responsible for your data
Hubber, a Grupo Cinnamon company, is the controller of the personal data processed on this site. That means Hubber decides what to collect and why, and Hubber is who you can hold to it.
For any matter in this policy, including access or deletion requests, write to privacidade@hubbermarketing.com.
2. What we collect
What you type into the forms
We only collect what you write. We do not buy lists and we do not look up your information elsewhere.
In the Hubber Connect form, for creators: name, Instagram or TikTok profile, content niche, follower range, destination city, travel dates, reason for the trip, the kinds of partnership that interest you, media kit link, email and WhatsApp.
In the Growth Diagnostic form, for companies: name, company, your role in it, website, industry, revenue range, team size, marketing budget, and the open answers about where the business stands, plus email and phone.
What the server records on its own
As on any website, the server hosting Hubber records technical access data: IP address, browser type, date and time and the pages visited. Those records exist to keep the site running and to defend it from abuse.
3. What we use it for, and on what legal basis
Brazil's General Data Protection Law requires a legal basis for each use. Ours are these:
- To assess your application and get in touch
- Legal basis: your consent, given in the box you check before sending the form. Without it, the form does not send.
- To present your profile to a company in the network, when there is a fit
- Legal basis: the same consent. It is the reason Hubber Connect exists, and it is stated in the form.
- To keep the site running and secure
- Legal basis: legitimate interest, to operate the service and contain abuse and fraud.
We do not use your data for advertising or to build behavioral profiles.
4. Who we share it with
Hubber does not sell personal data. Sharing is limited to these cases:
- Hubber client companies. When your trip and your profile match what a brand in the network is looking for, we present your profile to them. This only happens with the consent you gave when sending the form.
- CRM tool. Applications are stored in JSYNQ, the system where the team tracks each contact.
- Hosting. The site and the form handling run on Vercel, on servers outside Brazil. That means there is an international transfer of data, carried out with the safeguards the law requires.
- Google Fonts. The site's fonts are loaded from Google's servers. In that request your browser hands your IP address to Google, as on any site using the service.
- Authorities. Where there is a court order or a legal obligation.
5. Cookies and tracking
This site does not use cookies. It also does not use Google Analytics, social network pixels or any other audience measurement tool. Nothing is stored in your browser, which is why you do not see a cookie banner here.
6. How long we keep it
We keep your application while it is under review and, if it becomes a partnership, for as long as the relationship lasts and for the period the law requires afterwards.
If there is no fit, we keep the record so we do not assess the same profile twice from scratch, until you ask us to delete it. Just write to us.
7. Your rights
The law guarantees you, at any time and free of charge:
- Confirmation and access
- To know whether we process your data and to receive a copy of it.
- Correction
- To correct incomplete, outdated or incorrect data.
- Deletion
- To ask us to erase your data, except what the law requires us to keep.
- Portability
- To receive your data in a format you can take to another provider.
- Information about sharing
- To know which companies we have shared your data with.
- Withdrawal of consent
- To withdraw the permission you gave. From then on we stop using the data for that purpose, without undoing what was already done lawfully.
To exercise any of them, write to privacidade@hubbermarketing.com. We reply within 15 days. You may also complain to Brazil's National Data Protection Authority.
8. Security
The site runs over HTTPS. Access to the system where applications are stored is restricted to the team that needs it, and integration keys are kept on the server, never in the code your browser downloads.
No system is infallible. If an incident happens that could put you at risk, we notify you and the authority, as the law requires.
9. People under 18
The forms on this site are for people 18 and over. We do not knowingly collect data from children or teenagers. If it happens by mistake, write to us and we delete it.
10. Changes to this policy
When this policy changes, the date at the top changes with it. If the change matters to someone who has already applied, we notify them at the email address they left.