Privacy Policy
This is an English translation. If there is any conflict, the Portuguese version prevails.
This policy explains how AnticaHub processes personal data, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD). It applies to this website, to the seller portal and to the integrations we operate.
1. Who we are
AnticaHub is a product of VEROTECH SOLUTIONS - CONSULTORIA EM TECNOLOGIA LTDA, CNPJ 50.875.666/0001-61, headquartered at R. Aguapeí, 235 – Vila Santo Estêvão, São Paulo/SP, CEP 03325-000, Brazil ("AnticaHub", "we").
For the account data of the sellers who subscribe to the service we are the controller. For the order and buyer data of our customers' stores we act as a processor, on behalf of and under the instructions of the seller, who is the controller.
2. Data we process
- Seller account data: name, e-mail, company name, CNPJ and portal credentials (passwords are stored only as hashes).
- Marketplace authorizations: access tokens (OAuth) and identifiers of the stores the seller connects, such as Shopee and TikTok Shop.
- Order and buyer data: name, CPF or CNPJ (Brazilian tax id), shipping address, items, amounts and status of the orders received from the marketplaces.
- Catalogue data: products, stock and prices sent by the seller's ERP.
- Technical logs: access and operation logs (date, time, IP address) needed for security and for running the service.
This website uses no tracking cookies, has no forms and collects no personal data beyond the server's technical logs.
3. What we use the data for
- Synchronizing stock, prices and listings between the seller's ERP and the marketplaces the seller connected.
- Receiving orders from the marketplaces and delivering them to the seller's ERP.
- Sending the invoice (NF-e) issued by the seller to the marketplace and generating shipping labels.
- Authenticating users, preventing fraud and protecting the service.
- Complying with legal and regulatory obligations.
4. Data obtained through marketplace APIs
Data we receive through marketplace APIs — including TikTok Shop — is used solely to operate the store of the seller who authorized the access. This data is not sold, is not used for advertising or profiling, and is not shared with other sellers. The seller may revoke the authorization at any time, in the AnticaHub portal or in the marketplace itself.
5. Legal bases
We process data to perform the contract with the seller (LGPD art. 7, V), to comply with legal or regulatory obligations such as issuing tax documents (art. 7, II), and on legitimate interest for the security of the service (art. 7, IX).
6. Sharing
We share data only with:
- the seller's own marketplaces and ERP, because that is what the integration does;
- infrastructure providers (hosting and storage), bound by confidentiality and security obligations;
- public authorities, when required by law or court order.
7. Security
Credentials and buyer data are encrypted at rest (AES-256-GCM). Portal access is protected by password and, optionally, a second factor (2FA), and each customer can only access its own data. Connections use HTTPS.
8. Retention
- Account and integration data: for as long as the contract with the seller lasts.
- Integration logs (order and product events): 12 months.
- Tax documents and data required by law: for the applicable legal period.
When the contract ends, data is deleted or anonymized, unless the law requires it to be kept.
9. Your rights
Under LGPD art. 18, data subjects may request: confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing and withdrawal of consent. Buyers of our customers' stores may also contact the seller directly, as the controller of their data; we forward to the seller any requests we receive.
10. Data protection officer and contact
Requests about personal data and privacy: contato@anticahub.com.br.
11. Changes
We may update this policy. The effective date at the top shows the current version.