Privacy policy
How H0wZy Solutions handles personal data: first on this website, then in each project that handles data of its own.
Contact: contact@howzysolutions.com
Project policies: vvv
Who we are
H0wZy Solutions is a one-person company in Londrina, Brazil, run by Marcos "H0wZy" Junior. This website is its portfolio.
This website
This site sets no cookies of its own and uses no third-party fonts. Your language choice and scroll position are kept in your browser's own storage and never leave it.
The site is hosted on Cloudflare, which handles the technical data every request carries, such as IP address and browser, to deliver the pages and protect them from abuse. Cloudflare may set a strictly necessary security cookie when it has to check a request. We see only aggregate traffic figures, never individual visitors.
The site also uses Cloudflare Web Analytics to count visits in aggregate. It works through a small script that your browser loads from static.cloudflareinsights.com on each page, so that address receives a request when you open one. Cloudflare states that this counting uses no cookies or local storage and does not fingerprint individuals. Our legal basis is legitimate interest (LGPD art. 7, IX): knowing how many people visit the site. What Cloudflare keeps about these requests, and for how long, is decided by Cloudflare and described in its privacy policy (cloudflare.com/privacypolicy). What we see is only the aggregate figures. This was added to this policy on 30 September 2026.
This counting is handled by Cloudflare, which operates outside Brazil, so the visit counts of this website leave the country. The vvv live console is a separate service with its own privacy policy. Its data is stored on our own server in Brazil, but the nightly backup of that server covers it too, so an encrypted copy of it also goes to Google Drive, outside Brazil (see the vvv section below).
Your rights
Under Brazil's LGPD (Lei 13.709/2018) you may ask us to confirm, access, correct, provide or delete your data. Write to the address at the top of this page and we will answer within 15 days.
Security
Connections use HTTPS with TLS 1.2 or higher. Only the operator has personal access to the operator's computer and to our server; an automated deployment runner on the server has access of its own. The backup copy that leaves our server is encrypted before it leaves. The server's own disks are not encrypted, but the console encrypts some personal data inside its database (see its own policy).
Changes
We will update this page when our processing changes, and we will change its date when we do.
Project policies
vvv · TikTok Shop app
vvv (Viral Video Visualizer) is the tool H0wZy Solutions uses to publish product videos to a TikTok Shop creator account and to keep that account's showcase, the list of products the creator promotes, up to date. It runs on the operator's computer, has no website or sign-up of its own, and works only for creator accounts that have authorized it in TikTok Shop. It is not offered to the public.
The app is registered in TikTok Shop's Partner Center under its former name, viralvideogen.
What the app receives and why
When a creator authorizes the app, TikTok Shop gives us the three things below and nothing else. We do not receive or store buyer, order or payment data.
- The creator's account id, authorization tokens and granted scopes, so the app can act for that account.
- The creator's showcase products (ids and titles), so a video can be attached to the right product.
- The status TikTok reports for each upload and post, so the app can confirm a video was published.
Where it is stored and who processes it
- Storage: the data above, except the TikTok authorization tokens, is stored in a database on the operator's own server in Brazil and is not sold. The tokens are kept only on the operator's computer, and the app sends them only to TikTok. Because the AI assistants act with the operator's access, commands they run can also read the file where the tokens are kept on that computer.
- Backups: every night an encrypted copy of all the databases on the operator's own server, this app's and others', is sent to Google Drive, in the operator's own Google account. The copy is encrypted on our server before it leaves, file names included. Google Drive is operated outside Brazil, so the copy leaves the country.
- AI tools: the operator uses AI assistants to run the system, not only to see metadata. They run commands on the operator's computer and on our server, using the operator's own access, which includes administrator rights on the server, so they can reach whatever that access reaches, including the databases and files on the server. An AI tool can therefore read the data stored there, and what it reads is sent to the company that provides it, to be processed. No credential is handed to these companies to keep, but the commands the assistants run can use the credentials the computer already has. How long each company keeps what it receives is decided by that company. The companies that provide these tools are outside Brazil.
How long we keep it
A creator can withdraw the app's authorization at any time in TikTok Shop, which starts the deadlines below.
- Tokens: deleted as soon as the creator revokes access.
- Post records: kept for at most 12 months.
- Everything else: deleted from our active systems within 30 days of revocation, the end of the service, or a verified request.
- Backups: the deletion above covers our active systems. Encrypted backup copies are kept so the system can be restored, and no disposal period is set for them, so deleted data can remain in them. The copies are encrypted and kept in a folder that only the operator and the server can open.