Privacy Policy.

1. Who we are

Portial, Inteligência Artificial, Lda is the data controller for personal data processed via this website.

• Address: Av. da Boavista 3211, 4100-135 Porto, Portugal
• VAT: 517 695 588
• Contact: geral@portial.pt

2. What data we collect

Contact form

When you submit the form on our website, we collect:

• Name
• Work email address
• Company name (optional)
• The message you write us

Analytics

We use Plausible Analytics, a privacy-first service that runs in the EU (Germany). Plausible does not use cookies and does not collect any personal data. It records anonymous, aggregated metrics: page views, referrers, country, device type. We cannot identify individual visitors.

Server logs

Our hosting provider (Vercel) keeps standard server logs (IP address, user-agent, timestamp) for security and debugging. Logs are retained for a maximum of 30 days.

3. Why we collect it (legal basis)

• Contact form: to respond to your inquiry (legitimate interest under GDPR Art. 6(1)(f) and consent when you submit the form).
• Analytics: to understand aggregate website usage and improve the site (legitimate interest). No personal data is processed.
• Server logs: to keep the site secure and operational (legitimate interest).

4. How long we keep it

• Contact form submissions: up to 24 months after the last interaction, unless you explicitly ask us to delete earlier.
• Analytics: aggregated data retained indefinitely (no personal data involved).
• Server logs: 30 days.

5. Who we share it with

We use the following sub-processors to operate the website and form:

• Vercel Inc. (hosting, USA, SCCs in place) — serves the website.
• FormSubmit (form relay, USA, SCCs in place) — delivers form submissions to our inbox.
• Plausible Insights OÜ (analytics, EU) — aggregated anonymous metrics.

We do not sell personal data. We do not use it to train AI models for other clients.

6. International transfers

Where data is transferred outside the EU/EEA (Vercel, FormSubmit), we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer mechanism.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction or erasure
• Restrict or object to processing
• Receive a copy in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Portuguese Data Protection Authority (CNPD)

To exercise any of these rights, email us at geral@portial.pt. We reply within 30 days.

8. Cookies

This website does not set any cookies. We do not use tracking pixels, advertising tags or behavioural profiling.

9. Security

All traffic is served over HTTPS. Form submissions are transmitted over TLS. Access to inbox data is limited to authorised Portial personnel. We review our security posture regularly.

10. Changes to this policy

When we update this policy, we change the date at the top. If changes are material (for example, a new sub-processor or a new purpose), we will notify anyone who has given us an email address.