Privacy Policy

This Privacy Policy describes how DigitosAI collects, uses and protects the personal data you share with us through the website digitosai.com. It is aligned with the EU General Data Protection Regulation (GDPR) and applicable Portuguese law.

1. Data controller

DigitosAI [legal entity to be confirmed], headquartered in Portugal. For any question regarding your personal data, please reach out via the contact form on the website.

2. Data we collect

We only collect the data you voluntarily share with us:

• Name and work email, when you fill in the demo request form;
• Company name, number of employees and an optional message;
• Page language (PT/EN) and source page, for context.

If — and only if — you accept analytics in the cookies notice, Google Analytics also collects usage data about your visit (pages viewed, approximate location derived from a truncated IP address, device and browser type, referring site). We never use advertising cookies. If you decline, or simply ignore the notice, nothing is measured (see section 6).

3. Purposes of processing

• Respond to your demo request or general enquiry;
• Maintain a contact history for sales follow-up;
• Comply with legal obligations where applicable.

4. Legal basis

The processing of your data is based on the consent you give when submitting the form, and on our legitimate interest in responding to enquiries about our services.

5. Retention

Form submissions are kept for as long as needed for sales follow-up, up to a maximum of 24 months, after which they are deleted or anonymised unless an active contractual relationship exists.

6. Cookies

Strictly necessary cookies and local storage keep the website working (for example, remembering your answer to the cookies notice so we stop asking). These need no consent.

Analytics cookies (Google Analytics 4) are set only after you press Accept in the cookies notice. Until then — and forever, if you press Decline — the tag is loaded in denied mode: it stores nothing on your device and sends no identifiers. You can change your mind at any time by clearing this site's data in your browser, which brings the notice back. No advertising or social cookies are used.

7. Sub-processors

Data is hosted on our own infrastructure, located in Portugal / the European Union. We do not share your data with third parties for marketing purposes.

The one exception is Google Ireland Limited, which processes analytics data on our behalf when you accept analytics cookies, and may transfer it to the United States under the EU–US Data Privacy Framework. Decline the cookies notice and no data reaches Google at all.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can exercise these rights by contacting us through the website. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.

9. Changes to this policy

This policy may be updated. The date of the last update is shown at the top. We recommend reviewing it periodically.

Notice: this policy is a conservative starting template. Before going to production, it must be reviewed by a lawyer to confirm adequacy to the specific business, including controller details, DPO designation if applicable, and tax-specific clauses.