Security and privacy
What we do today
to protect your data.
We list only what exists. No badges, no claims of a size we do not have.
Protected forms
We validate everything on the server, limit attempts per IP and per email and use a hidden field against bots.
Consent required
The form only submits after the person accepts the privacy policy.
Security headers on the site
Mandatory HTTPS (HSTS), a content security policy (CSP) and protection against the site being embedded in third-party pages.
Restricted internal dashboard
The team area requires login. Every dashboard page checks permission on the server, and incoming contacts are visible only to administrators.
Audit and fixes
We audited the site and dashboard in October 2026. Fixes already applied include access control on dashboard pages, validation of the post-login redirect and a Next.js update.
What we do not have yet
We have no formal security certification, such as ISO 27001, and no third-party audit. We are a small operation and prefer to say so rather than imply otherwise.
Your personal data
We process personal data under Brazil's LGPD. The privacy policy explains what we collect, why and how to ask for deletion.
Read the privacy policyQuestions about data: contato@hikarihub.com.br
Ready for the next step?
Tell us about your project. We reply with clear scope, timeline, and investment.