Scope and contact
This policy covers visitors to hamatecsa.com. For access, correction, deletion or withdrawal of consent, contact info@hamatecsa.com. We verify identity before disclosing records. A contractual or legal obligation may require us to retain some information. We do not claim a certification or legal compliance status that has not been verified.
What we collect and why
The contact form collects your name, contact method, project type, message, language, privacy consent and submission date so we can understand and answer your enquiry. Project intake collects the company and contact names, phone number, branch and business details, project goals, systems, integrations and requirements you choose to provide, to assess the work. Do not submit passwords, trade secrets or other people’s personal data without authority.
AI conversations
The assistant sends your messages, current conversation context and language to the AI gateway to generate a response. The conversation remains in page memory; this application does not save it in a chat table. The gateway and model provider may retain records under their own terms; their retention periods have not been verified here. Do not send confidential or sensitive information. Responses are automated and may be wrong.
Processors and transfers
The site uses Lovable for hosting and services, and Lovable Cloud, which uses Supabase for request storage and authentication. Cloudflare delivers and protects the site. The Lovable AI gateway and, currently, a Google Gemini model process assistant messages. Models may change, and processing may take place outside your country under provider settings; exclusive local data residency is not asserted. If Turnstile is enabled, Cloudflare processes a verification token and technical data for abuse prevention. External links such as WhatsApp are subject to their providers’ policies.
Retention policy
Contact and intake requests have target retention periods of 180 and 180 days after the last interaction, unless the enquiry becomes a contract or a legal obligation requires a different period. The target for security logs we control is 30 days. We aim to review deletion requests within 30 days. These are operational targets for manual review and deletion, not a deployed automatic deletion process. They do not guarantee simultaneous removal of provider logs or backups.
Preferences and safeguards
Your browser stores a colour preference; language is determined by the URL. Internal sign-in uses necessary session storage. Hosting services may process connection details and technical logs for security and operation. The application does not sell enquiry data or automatically add it to a marketing list. Contact the address above for information about your records.