# Privacy Policy

This page describes what the website **hecigo.com** collects, who receives it,
and how to have it removed. It covers this website only. Data processed inside a
client's own systems during an integration engagement is governed by the contract
for that engagement, not by this page.

**Data controller:** HECIGO TECHNOLOGY CO., LTD, CirCO Dien Bien Phu, 222 Dien
Bien Phu street, Vo Thi Sau ward, District 3, Ho Chi Minh City, Vietnam.
Contact for any privacy question or request: **hi@hecigo.com**.

**Last updated:** 23 August 2026.

## What we collect

### Information you send us deliberately

The enquiry form on this site collects exactly four fields: your **name**, your
**email address**, the **role** you select from the dropdown, and your **message**.
Nothing else is read from your browser and attached to it. Submitting the form
sends those four fields to our intake workflow at `workflow.thenexova.com`, which
is operated by THE NEXOVA on our behalf and delivers the enquiry to us.

If you email or call us directly, we hold whatever you chose to put in that
message for the same purpose and for the same period.

We use this information for one thing: replying to you and, if it becomes a
project, running that project. We do not sell it, rent it, or add it to a
marketing list you did not ask to join.

### Information collected automatically

- **Google Analytics 4** (measurement ID `G-DFZBPG12H8`) records page views,
  approximate location derived from IP address, referrer, device type, and
  browser. Google processes this as our processor. IP addresses are truncated by
  Google before storage.
- **Meta Pixel** (ID `905017395917127`) records page views and passes them to
  Meta so we can measure whether our posts bring anyone here. Meta acts as an
  independent controller for that data under its own terms.
- **Hosting and CDN logs.** The site is served by Netlify behind Cloudflare. Both
  keep short-lived request logs containing IP address, user agent, and requested
  path, for delivery and abuse prevention. We do not query these logs to identify
  visitors.

Fonts are compiled into the site at build time and served from our own domain, so
loading a page does not send a request to Google Fonts. There is no chat widget,
no session recorder, and no A/B testing tool on this site.

## Cookies

Google Analytics and the Meta Pixel set cookies in your browser. They are the
only cookies this site causes. Nothing on hecigo.com requires a cookie to
function. Blocking them in your browser, or using any tracker-blocking
extension, leaves the entire site working normally, including the enquiry form.

## Automated clients and AI agents

This site publishes machine-readable representations of its own public pages:
`/llms.txt`, `/sitemap.xml`, Markdown variants of each page, and
`/blog-index.json`. Requesting any of those is an ordinary anonymous page request
and is logged the same way as a browser visit. No additional data is collected
from automated clients, and none of these files contain personal data about
visitors.

## How long we keep it

**Enquiries have no fixed expiry.** We keep an enquiry, and the correspondence
that followed it, until you ask us to delete it. If it became a signed
engagement, that contract's retention terms apply instead. There is no
timer running in the background. Ask and it goes; see *Your rights* below.

**Analytics data is not attached to you, and cannot be deleted on request.**
Google Analytics and the Meta Pixel record page views, not identities. Nothing
this site sends them carries your name, your email, or any account of yours, so
there is no "your data" for us to look up and remove. The honest answer is that
we could not comply with such a request even if we wanted to. What that data does
instead is expire on the platform's own schedule: 14 months for Google Analytics,
and Meta's default for the Pixel. You can stop the collection at any time, without
asking us, with a tracker blocker.

## Who else sees it

Only the processors named above: Google (analytics), Meta (pixel), Netlify and
Cloudflare (hosting and delivery), and THE NEXOVA (enquiry intake workflow). We
do not share enquiry contents with anyone else, and we do not publish client
names or details without written permission.

## Your rights

These rights cover what we hold under your name or email address: your enquiry
and everything we exchanged after it. Write to **hi@hecigo.com** and you can ask
us to:

- tell you what we hold about you,
- send you a copy of it,
- correct anything that is wrong,
- delete it.

We act on these requests within 30 days and do not charge for them. You do not
need to give a reason, and you do not need to have been a client.

They do not extend to the analytics data described above, for the reason given
there: it is not linked to an identity, so there is nothing to retrieve or erase.
To stop that collection, use a tracker blocker or your browser's "do not track"
setting, or opt out through Google's and Meta's own controls, none of which
requires contacting us.

## International transfers

Google, Meta, Netlify, and Cloudflare process data on infrastructure outside
Vietnam. Enquiry contents themselves are held on infrastructure operated in and
for Vietnam and Singapore.

## Children

This site is aimed at businesses. We do not knowingly collect information from
anyone under 16. If you believe we have, write to hi@hecigo.com and we will
delete it.

## Changes

If this policy changes materially we will update the date at the top and note the
change here. The current version is always at
[hecigo.com/privacy](https://hecigo.com/privacy/), and a Markdown copy is at
[hecigo.com/privacy.md](https://hecigo.com/privacy.md).
