Privacy Policy

Effective date: January 07, 2026 · Last updated: April 12, 2026

This Privacy Policy explains how Heizen Tecnologia Ltda. (“Heizen”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use our websites, products, and services (collectively, the “Services”). Heizen operates multiple brands including Fapptory(fapptory.me — courses, memberships, and digital products) and Onnie(onnie.ai — AI workspace platform). This Policy applies to all Services across all Heizen brands.

If you have questions, contact us at hq@fapptory.me.

1) Who we are

Fapptory provides online courses, community memberships, digital products, and educational content. All Services are operated by Heizen Tecnologia Ltda.

2) Scope

This Policy applies to:

This Policy does not cover third-party websites or services you may access through links in our Services.

3) Information we collect

We collect information in three main ways: (a) provided by you, (b) collected automatically, and (c) from third parties.

3.1 Information you provide

3.2 Information collected automatically

3.3 Information from third parties

4) How we use information

We use information to:

Where required, we rely on appropriate legal bases (see Section 5).

5) Legal bases (EEA/UK and similar jurisdictions)

Where applicable, we process personal data under one or more of the following legal bases:

6) How we share information

We may share information:

6.1 With service providers (processors)

We use trusted vendors for hosting, databases, monitoring, email delivery, video streaming, analytics, customer support, and security. They may process personal data on our behalf under contractual obligations and confidentiality terms.

6.2 For legal and safety reasons

We may disclose information if we believe in good faith it is necessary to:

6.3 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

7) Cookies and similar technologies

We use cookies and similar technologies (e.g., local storage, pixels) for:

You can control cookies through your browser settings. If we offer a cookie banner, you can manage preferences there as well. Disabling certain cookies may affect functionality.

8) Data retention

We keep personal data only as long as necessary to:

Retention periods vary depending on data type. Account holders may request deletion of their account and associated data. Some logs may be retained for security and auditing purposes.

9) Security

We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) International transfers

We may process and store information in countries different from where you live. When transferring personal data internationally, we use appropriate safeguards such as contractual protections and, where applicable, standard contractual clauses.

11) Your rights and choices

Depending on your location, you may have rights to:

11.1 How to exercise your rights

Email us at legal@heizen.io. We may verify your identity and request additional information to process your request.

12) U.S. state privacy disclosures (CCPA/CPRA and similar)

If you are a resident of certain U.S. states, you may have additional rights, including the right to know, delete, correct, and opt out of certain processing.

To submit a request, contact legal@heizen.io.

13) Children's privacy

Our Services are not directed to children, and we do not knowingly collect personal information from children under the age required by applicable law (e.g., under 13 in the U.S.). If you believe a child has provided personal data, contact us to request deletion.

14) Email and communications

We may send:

To unsubscribe from marketing or the newsletter, use the link in the message or contact legal@heizen.io. You may still receive essential service communications.

15) Third-party links and integrations

The Services may include links to third-party websites or integrations. Your use of third-party services is governed by their own privacy policies. We are not responsible for third-party practices.

16) Changes to this Privacy Policy

We may update this Policy from time to time. If changes are material, we will provide notice as required (e.g., by posting the updated Policy and updating the “Last updated” date, or by sending a notification).

17) Contact us