PTEN
AR menuShopTalk to us
Back to home

Privacy policy

Effective date: October 20, 2026

This policy explains how Dhuon collects, uses, shares and protects personal data. It applies to the dhuon.com website and to the contact channels listed on it. Section 6 covers data that passes through the systems we build for clients.

It does not apply to third-party websites and services linked from here, such as Instagram and LinkedIn, which have their own policies.

1. Who we are

Dhuon is the brand of MATZENBACHER SS LTDA, Brazilian company registration number (CNPJ) 67.319.096/0001-26, headquartered at SHIN CA 01, Lote A, Bloco A, Sala 344, Lago Norte, Brasília/DF, CEP 71503-501, founded by Júlio Matzenbacher and Artur Rodrigues. Under Brazil's General Data Protection Law (Law No. 13,709/2018, LGPD), we are the controller of the personal data processed on the website, in purchases made through the website and through our contact channels.

Our data protection officer is Júlio Matzenbacher. For any privacy question or request, write to dhuon.org@gmail.com.

2. Information we collect

2.1 Contact

The contact form on the website does not send anything to our servers. When you click send, it opens the email app on your device with a message already addressed to dhuon.org@gmail.com, and you decide whether to send it.

If you do, we receive whatever is in the message: your name, your business name, the description of what you want to solve, your email address and anything else you write or attach. The same applies to messages sent directly to our email or to our Instagram (@dhuon.ai).

2.2 The text box at the top of the page

What you type in the text box at the top of the page is stored only in your browser (sessionStorage), to pre-fill the contact form. It does not reach us unless you send the email, and it is deleted when the tab is closed.

2.3 Theme preference

If you choose the light or dark theme, the choice is stored in your browser (localStorage) so it applies on your next visit. It is not sent to us and does not identify you.

2.4 Hosting logs

The website is hosted by Vercel. To deliver the pages and protect the service against abuse, Vercel processes technical data from each visit, such as IP address, browser, operating system and requested page, under its own privacy policy.

2.5 Visit statistics

To know how many people visit the website and which pages are viewed most, we use Vercel Web Analytics. For each page view, it records data such as the page, the site you came from, your approximate location (country, region and city), device type, browser and operating system.

It does not use cookies and does not store anything in your browser. To count visitors without identifying them, Vercel generates a code from the request that is discarded every 24 hours; we cannot tell who you are or follow you across days or across websites. We only see aggregated numbers.

2.6 Purchases through the website

When you buy a plan through the website (checkout and activation pages), you give us:

  • restaurant and contact details: restaurant name, CNPJ (or CPF), name of the person in charge, email and WhatsApp number;
  • the address where the table devices will be shipped.

Along with the order, we record the date and time you accepted the terms, the version accepted, and the IP address and browser used. This record serves as proof of the purchase.

To fill in the address from the postal code (CEP), your browser queries the public ViaCEP service. Only the postal code is sent.

Payments are processed by Mercado Pago. Card details are entered in Mercado Pago's own fields and never pass through our website or our servers. We receive from Mercado Pago only the result of each payment: amount, payment method, number of installments, status and the payment ID. On the payment pages, Mercado Pago loads its own scripts, which may collect device data to prevent fraud, as described in its privacy policy. For payment data, Mercado Pago also acts as a controller.

When you register the card for the monthly fee, the subscription is held by Mercado Pago, which charges it every month. We see the status of the subscription and its charges, not the card details.

Purchase emails (payment confirmation, activation link and subscription notices) are sent through the Resend service, which receives your email address and the content of the message.

2.7 Shop orders

When you place an order in the shop (dhuon.com/en/marketplace), you give us:

  • your name, email, and city and state;
  • optionally: your WhatsApp number, company name, notes about the order and a reference image (logo, drawing or photo, up to 4 MB);
  • the pieces you chose, with quantity, colour and what to customise.

The order goes through our server, hosted by Vercel, and reaches the team by email, sent through the Resend service with your email as the reply-to address. We do not store the order in a database: the email is the record.

Pieces marked for payment on the site (currently, the infinity cube) are paid on the Mercado Pago page, by Pix or card. In that case the delivery address is required in the order, and Mercado Pago receives your name, e-mail, the pieces, the amount and the order details to process the payment; card details stay with Mercado Pago only. For other pieces, nothing is charged in the shop: if the order goes ahead, we agree on payment and delivery with you. For delivery, we ask for the full address and the name and phone number of the recipient, and this data goes to the carrier or Correios (the Brazilian postal service). Payment goes through the bank or payment provider agreed on, which receives the data needed to process it.

The cart is stored only in your browser (localStorage), until you send the order or clear the site's data. It does not reach us before you send the order.

2.8 What we don't collect

The website does not use cookies, advertising pixels or tools that follow you across websites. The website's fonts are served by the website itself. The exception is the purchase pages, which load Mercado Pago's scripts and query ViaCEP, as described in section 2.6.

3. How we use information

We use the personal data we receive to:

  • reply to your message and understand what your business needs;
  • prepare proposals and, if we reach an agreement, perform the contract;
  • process purchases made through the website: record the order, receive payments, send purchase emails, produce and ship the table devices and issue invoices;
  • handle shop orders: confirm the pieces, price and lead time, agree on payment, produce, deliver and issue invoices;
  • keep a record of conversations with people who contacted us;
  • protect the website and our channels against fraud and abuse;
  • comply with legal obligations.

We do not sell personal data and we do not use it for advertising.

4. Legal bases

We process personal data on the legal bases set out in Article 7 of the LGPD:

  • Pre-contractual steps and performance of a contract: to answer quote requests, prepare proposals, process purchases made through the website and shop orders, collect payments and provide the services contracted.
  • Legitimate interests: to keep a record of contacts, measure the website's audience in aggregate, protect the website and our channels and keep the record of acceptance of the terms as proof of purchase, always respecting your rights.
  • Legal obligation: when the law requires us to keep or disclose certain data, such as tax records of payments.

5. Sharing of information

We share personal data only with those we need in order to operate:

  • Google (Gmail), where we receive and store emails sent to dhuon.org@gmail.com.
  • Vercel, which hosts the website and processes the logs and visit statistics described in sections 2.4 and 2.5.
  • Meta (Instagram), when you talk to us there.
  • Mercado Pago, which processes payments and monthly fees and handles fraud prevention (section 2.6).
  • Resend, which sends purchase emails (section 2.6) and shop order emails (section 2.7).
  • Carriers and Correios, which receive the recipient's name, address and phone number, only to deliver shop orders.
  • The bank or payment provider agreed on for a shop order, with the data needed to process the payment.
  • ViaCEP, which receives only the postal code you type, to fill in the address.
  • Public authorities, when required by law or by a court order, and only to the extent required.

6. Data in the projects we build for clients

When we build or maintain a system for a client, such as a customer service AI agent, an augmented reality menu or a data analysis, we may have access to personal data that belongs to the client's operation, such as data about their customers, orders or conversations.

In these cases, the client is the controller and Dhuon is the processor under the LGPD. We process this data only to provide the contracted service, following the client's instructions and the contract. We do not use it for any other purpose and we do not share it with third parties, except with the providers needed to run the project, such as hosting or artificial intelligence services, which are disclosed to the client.

If your data passes through a system run by one of our clients, requests about it should be made to that client first. We help them respond.

7. International data transfers

Google, Vercel, Meta and Resend operate servers outside Brazil, including in the United States, and Mercado Pago may process data in other Latin American countries and in the United States. As a result, your data may be processed in other countries. These transfers follow Article 33 of the LGPD, based on the contractual mechanisms adopted by these providers.

8. Data retention

  • Contact messages: up to 2 years after the last contact, if the conversation does not lead to a contract.
  • Shop orders: up to 2 years after the last contact, if the order does not go ahead; if it does, for as long as the law requires, including tax periods and the time needed to defend ourselves in a possible dispute.
  • Shop cart: in your browser, until you send the order or clear the site's data.
  • Client data: for the duration of the contract and, after it ends, for as long as the law requires.
  • Data from purchases made through the website (order, record of acceptance and payment information): for the duration of the contract and, after it ends, for as long as the law requires, including tax periods and the period needed to defend ourselves in a possible dispute.
  • Text from the box at the top of the page: only in your browser tab, until it is closed.
  • Theme preference: in your browser, until you clear the site's data.
  • Hosting logs and visit statistics: for the period set by Vercel in its policy.

You can ask us to delete your data before these periods end, as explained in section 10.

9. Security

The website runs only over an encrypted connection (HTTPS). Access to the messages we receive is limited to those who need them to reply.

Card details stay with Mercado Pago only. Activation links sent by email are digitally signed and expire after 180 days.

No system is perfectly secure. If a security incident could cause you significant risk or harm, we will notify you and Brazil's National Data Protection Authority (ANPD), as required by the LGPD.

10. Your rights

Under Article 18 of the LGPD, you can request at any time:

  • confirmation that we process your data, and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
  • portability of your data to another provider;
  • deletion of data processed based on your consent;
  • information about who we share your data with;
  • withdrawal of consent, where consent is the basis for processing.

To exercise any of these rights, write to dhuon.org@gmail.com. We may ask for some information to confirm your identity first. We reply within 15 days.

You can also file a complaint with the ANPD. If possible, talk to us first: we want to fix it.

11. Children and teenagers

The website is intended for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe we have received data from a child or teenager, write to dhuon.org@gmail.com and we will delete it.

12. Automated decision-making

We do not make decisions about you based solely on automated processing of your data.

13. Changes to this policy

We may update this policy when the website or our services change. The date at the top of the page shows the version in effect. Significant changes will be highlighted on this page.

14. Contact

Dhuon Data protection officer: Júlio Matzenbacher dhuon.org@gmail.com