Herbdelux Digital
EN
Back to site

Privacy Policy

Version 1.1, effective October 22, 2026.

This is a translation of the Portuguese version. If there is any discrepancy, the Portuguese version prevails.

1Who is responsible for your data

This website, imersaoherbdigital.online, is operated by HERBDELUX LLC, a limited liability company registered in the United States, doing business as Herbdelux Digital, with a business address at 28 W Flagler St, Ste 300B, Ofc 3209, Miami, FL 33130, United States.

Herbdelux Digital is the controller of the personal data processed here: we are the ones who decide why and how this data is used. As the company is based in the United States, this policy follows US law. For people in Brazil, Law No. 13,709/2018 (Brazilian General Data Protection Law, LGPD) also applies, since it covers any company that processes data of people in Brazil, and this policy was written to comply with it.

Contact for personal data matters, including as data protection officer for LGPD purposes: Herbdelux Digital, through the channels in section 13.

2What data we process

When you contact us

If you reach out to us on WhatsApp, by email or on social media, we receive whatever you choose to send, such as your name, phone number and the content of your message.

When you buy the immersion or another product

Payment takes place on payment and digital product delivery platforms, not on this website. We do not receive, see or store card numbers. The platform passes on to us the data needed to grant your access, provide support and meet tax obligations, usually your name, email, phone number, CPF (Brazilian taxpayer ID) and the product purchased.

When you buy Leavox, Vox AI or tokens

If you buy 1 year of access to Leavox, Vox AI or Vox AI tokens, your name and email are shared with Leavox to create and activate your access. Whatever you do inside the platform is governed by Leavox's own privacy policy.

Data collected automatically

  • IP address and approximate location by city
  • Device type, browser and operating system
  • Pages visited, time spent and where the visit came from, including which ad
  • Cookie and ad pixel identifiers (see section 5)

What we do not collect

We do not ask for sensitive data, such as information about health, religion, political opinion, racial or ethnic origin, trade union membership, sex life, genetic or biometric data. If any such data reaches us on your initiative, we delete it as soon as we notice.

3What we use it for

Assisting youReplying to messages, answering questions and providing support.
Delivering what you boughtGranting access to the immersion, the mind map, the skill and, when you buy them, Leavox, Vox AI and tokens, and providing support.
Meeting obligationsIssuing tax documents, keeping the records required by law and responding to requests from competent authorities.
Measuring and advertisingUnderstanding how the website is used, measuring ad results and showing ads to people who have already visited the website.
Notices and newsSending notices about what you bought and, if you allow it, news and offers. You can ask to unsubscribe at any time.

We do not sell, rent or give your data to anyone.

4Legal basis

For people in Brazil, all processing carried out here relies on one of the legal bases in articles 7 and 11 of the LGPD:

  • Consent: for advertising cookies and pixels and for sending news and offers.
  • Preliminary procedures and performance of a contract: when you contact us or buy the immersion, Leavox, Vox AI, tokens or another product.
  • Compliance with a legal obligation: for issuing tax documents and keeping access logs, as required by the Brazilian Internet Civil Framework (Marco Civil da Internet).
  • Legitimate interest: for measuring website performance and preventing fraud and abuse, in a proportionate way and without surprising you.
  • Regular exercise of rights: for defending ourselves in any judicial, administrative or arbitration proceedings.

5Cookies and pixels

Cookies are small files stored in your browser. Pixels are snippets of code from ad platforms that record visits and actions on the website, such as opening the payment page. This website may use three types:

NecessaryMake the website work and remember your preferences.
MeasurementTools such as Google Analytics show, in aggregate, which pages are visited and where visitors come from.
AdvertisingPixels from platforms such as Meta (Facebook and Instagram), Google and TikTok measure ad results and make it possible to show ads to people who have already visited the website.

You can block or delete cookies in your browser settings and adjust the ads you see in Meta's and Google's ad preferences. Blocking measurement and advertising cookies does not prevent you from using the website.

6Who we share it with

Payment and delivery platformsProcess payments, grant access to the products and receive your payment data directly, without it passing through us.
LeavoxName and email of people who buy Leavox, Vox AI or tokens, to create and activate their access.
MetaWhatsApp and Instagram, used for customer service, and the Meta ad pixel, when installed.
GoogleMeasurement, advertising and email tools.
HostingThe server where the website is hosted, which keeps access logs.
AccountingBilling data, for issuing tax documents and meeting tax obligations.
AuthoritiesOnly upon a court order or a substantiated legal request.

Each of these companies has its own privacy policy, which also applies to the use of their services.

7International transfer

Herbdelux Digital is based in the United States, and some of the providers listed above store data on servers outside Brazil. For this reason, the data of people in Brazil is transferred to the United States and, in some cases, to other countries. This transfer takes place based on the cases provided for in article 33 of the LGPD and on the contractual safeguards offered by the providers.

8How long we keep it

  • Contacts that did not result in a purchase: up to 12 months after the last conversation.
  • Customers: while you have access to the products and for 5 years afterwards, for tax purposes and for defense in any proceedings.
  • Website access logs: 6 months, as required by article 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014).
  • Cookies and pixels: for the period defined by each tool.

Once the period has passed, the data is deleted or anonymized.

9Security

The website runs over an encrypted connection (HTTPS), and the accounts used in the business have restricted access and two-step verification. Payment data stays with the payment platforms, which follow their own security standards.

No system is completely secure. If an incident occurs that may pose a relevant risk or harm to you, we will notify you and, where required by law, the competent authorities, such as the Brazilian National Data Protection Authority (ANPD) for people in Brazil, explaining what happened, which data was affected and what is being done.

10Your rights

We grant you, free of charge and wherever you live, the following rights over your data (for people in Brazil, they are provided for in the LGPD):

  • Confirmation and access: to know whether we process your data and to receive a copy.
  • Correction: to correct incomplete, outdated or inaccurate data.
  • Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law.
  • Portability: to receive your data so you can take it to another provider.
  • Deletion of data processed based on your consent.
  • Information about who your data has been shared with.
  • Withdrawal of consent, at any time.
  • Objection to processing based on legitimate interest.

To exercise any of them, use the channels in section 13. We reply within 15 days and may ask you to confirm your identity before handing over any data, to protect you.

If our reply does not resolve the issue and you are in Brazil, you can file a complaint with the ANPD at gov.br/anpd.

11Minors

This website and the products are intended for people over 18. We do not knowingly collect data from children or adolescents. If we find out that we have received data from a minor without the consent of a parent or legal guardian, we delete the record.

12Changes to this policy

If this policy changes, the date at the top changes with it. When a change is relevant, such as a new purpose of use or a new type of data collected, we notify customers through the channels we have for them before it takes effect.

13How to reach us

Mail: HERBDELUX LLC, 28 W Flagler St, Ste 300B, Ofc 3209, Miami, FL 33130, United States.

See also the Terms of Use.