Legal

Privacy Policy

Version 1.0 · Effective 19 October 2026

This policy explains how NoBuzz (“Horda”, “we”) handles personal data on www.horda.si and on the Horda platform at app.horda.si. The Portuguese text prevails for people established in Brazil. The English text prevails for everyone else. Nothing here waives a right that the LGPD, the GDPR, or the Brazilian Consumer Defense Code does not allow to be waived. Use of the platform is also governed by the Terms and Conditions.

1. Who is responsible

NoBuzz is the controller for personal data collected on this website, and for account data and usage data on the platform. When a customer submits other people’s personal data through the Service, the customer is the controller and Horda is the operator (processor). Questions and requests go to horda@nobuzz.io.

2. This website

www.horda.si does not use analytics or advertising cookies.

If you choose a language, that choice is stored in your browser under the name horda.locale so the same edition opens next time. We read the browser’s language list only to suggest an edition. That reading is not saved unless you choose a language.

The Start Pentest form does not send data to our servers. It opens your email app with a message addressed to horda@nobuzz.io. We receive your name, work email, company, target URL and chosen plan only if you send that message, and we use it to reply and to confirm scope and written authorization before any test.

Talk to Sales opens a scheduling page on cal.com. That service is separate from Horda, and what you enter there is handled by Cal.com.

The site is hosted by Vercel. Delivering and protecting the site involves the host processing connection data such as IP address, browser and the address of the page you request.

3. The platform

When a customer submits personal data through the Service, the customer is the controller under the LGPD and the GDPR, and Horda is the operator. Horda processes that data only to provide the Service, on the customer’s documented instructions, under the Terms and Conditions. Horda also processes account data and usage data (logs and telemetry) as an independent controller to run accounts, secure the Service, prevent abuse, bill, and comply with the law.

Signing in on app.horda.si stores a login token in the browser, in local storage and in a cookie named horda_token, for seven days, so the console can keep the session. Signing out removes it. The console also stores the language you pick (horda.locale, and a cookie named horda_locale, for one year) and interface preferences such as theme and sidebar state. Those values are used only to run the console.

Horda does not sell personal data. Do not submit sensitive data, payment-card data, or children’s personal data. The Service is not designed to store those categories.

International transfers follow Chapter V of the LGPD and, where the GDPR applies, a valid transfer mechanism. Horda keeps technical and organizational measures appropriate to the risk and tells the customer about a security incident that may cause relevant risk or harm within a reasonable time and, where the GDPR applies, without undue delay.

4. Sharing

We share personal data with providers that host or support the site and the Service, with Cal.com when you book a call, and when the law requires disclosure. We do not sell it.

5. How long we keep data

A language choice on this website stays in your browser until you clear it. Messages you email us are kept for as long as needed to handle the request and any engagement that follows. After a contract ends, customer data is deleted or returned within a reasonable time, except where the law requires retention or retention is needed to defend a claim. Account and usage data are kept for as long as the purposes above require. The console’s login token expires after seven days unless you sign out sooner.

6. Your rights

Under the LGPD you can ask for confirmation that we process your data, for access, correction, anonymization, blocking or deletion of unnecessary or excessive data, for portability, for information about sharing, and for revocation of consent. Where the GDPR applies, you can also restrict or object to processing and lodge a complaint with a supervisory authority. A person in Brazil may also petition the Autoridade Nacional de Proteção de Dados (ANPD). Write to horda@nobuzz.io. We may ask for enough information to confirm the request is yours, and we answer within the time the applicable law requires.

7. Changes

We may update this policy by publishing a new version on this page. The date at the top is when that version takes effect.