Privacy Policy

1. Introduction

HotBrains Tecnologia ("we", "us", or "our") operates Source Push, a cloud-based service for React Native app updates. This Privacy Policy describes how we collect, use, and safeguard your personal information when you visit our website, use our services, or interact with our APIs.

By using Source Push, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring the security of your personal data.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and company details when you create an account
• Application Data: App names, bundle identifiers, and JavaScript bundles uploaded for over-the-air updates
• Usage Data: API keys, authentication tokens, and OTA request logs
• Billing Information: Payment details and transaction history processed via Stripe
• Communication: Messages, support tickets, and feedback you send to us

Information We Collect Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Analytics: Pages visited, features used, and interaction patterns
• Performance Data: Response times, error rates, and system performance metrics
• Log Data: Server logs, access times, and technical information

Information from Third Parties

We may receive information from:

• Service Providers: AWS (hosting), AWS S3 (large file storage), Azure Storage (small object storage), GitHub (integrations), Stripe (payments)
• Analytics Providers: RockContent, MS Clarity, Hotjar, Amplitude, Google Tag, Google Analytics, Cloudflare Browser Insights, Wootric, reCAPTCHA
• Social Platforms: When you connect your social media accounts(GitHub Auth)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our Source Push services
• Account Management: To create and manage your account, process payments, and handle billing
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues
• Security: To detect and prevent fraud, abuse, and security threats
• Analytics: To analyze usage patterns, improve performance, and develop new features
• Communication: To send important updates, security notices, and marketing communications (with consent)
• Legal Compliance: To comply with legal obligations and enforce our terms of service

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our services:

• Microsoft Azure: Previously used for cloud hosting and infrastructure services
• AWS: Current cloud hosting and infrastructure services
• AWS S3: Storage for large files
• Azure Storage: Storage for small objects
• Stripe: Payment processing and billing services
• GitHub: Code repository and integration services
• Analytics Services: RockContent, MS Clarity, Hotjar, Amplitude, Google Tag, Google Analytics, Cloudflare Browser Insights, Wootric, reCAPTCHA

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. Data Security and Retention

Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security audits and vulnerability assessments
• Backup Systems: Regular backups with disaster recovery procedures

Data Retention

We retain your personal information only as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our rights

Account data is typically retained for 3 years after account deletion, while usage logs are retained for 12 months.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track activity for marketing and advertising purposes

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at [email protected].

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including Brazil where HotBrains Tecnologia is based. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions for certain countries
• Other appropriate safeguards as required by law

9. Children's Privacy

Source Push is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Provide at least 30 days' notice before the new policy takes effect
• Notify you via email or through our website
• Update the "Last updated" date at the top of this policy

Your continued use of Source Push after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: