Privacy Policy

1. Data controller

The data controller is Grupo Átila, Rua Mq de Oliveira 6, 2605-152 Queluz, Portugal. For any question about personal data you can reach us at [email protected] or +351 962 066 005.

2. What data we collect

We collect only the data needed to provide each service. Depending on the application, this may include:

• Account data: name, e-mail address, profile picture and login credentials, when you create an account or sign in.
• Google account data: when you authorise one of our apps to connect to your Google account, we access only the data covered by the permissions you approve on Google's consent screen (for example your e-mail and profile name, or, where the app requires it, calendar, files or messages). You can revoke that access at any time at myaccount.google.com/permissions.
• Data you enter into the service: content, messages, documents, contacts or other information you upload or create while using the app.
• Usage and technical data: IP address, device type, operating system, device identifiers, language, pages visited, actions taken, access dates and times, and error logs.
• Communication data: the content of messages you send us by e-mail, forms, WhatsApp or other support channels.
• Billing data: when you purchase a paid service, the data needed to issue an invoice and process payment. Card details are handled by the payment provider and are never stored by us.

3. Why we use your data

• To provide the service you purchased or the feature you enabled, including creating and managing your account.
• To connect the app to third-party services you have authorised, such as your Google account.
• To provide customer support and answer your requests.
• To keep the service secure, prevent fraud and abuse, and detect and fix errors.
• To improve our products, based on aggregated usage data.
• To comply with legal, tax and accounting obligations.
• To send service communications (changes, security notices, billing). We only send marketing communications with your consent, which you can withdraw at any time.

4. Legal basis

We process your data under the General Data Protection Regulation (GDPR) and Portuguese Law 58/2019 on the following bases: performance of a contract or pre-contractual steps (providing the service); consent (linking third-party accounts, marketing communications, non-essential cookies); legitimate interest (security, fraud prevention, product improvement); and compliance with legal obligations.

5. Google user data and Limited Use

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we only use data obtained from Google APIs to provide or improve user-facing features of the application; we do not transfer it to third parties except as necessary to provide those features, to comply with the law, or with your explicit consent; we do not use it for advertising; and no human reads that data except with your consent, for security purposes, to comply with the law, or when the data is aggregated and anonymised for internal operations.

6. Who we share data with

We do not sell personal data. We share data only with:

• Grupo Átila companies, when a service is provided jointly or for support and billing.
• Processors that provide us with hosting, databases, e-mail delivery, error monitoring, payments and customer support, bound by contract to process data only on our instructions.
• Artificial intelligence providers, when the feature you use relies on third-party language models. In those cases we send only the content needed to process your request, and those providers may not use your data to train models.
• Public authorities, where required by law.

7. International transfers

Some of our processors are located outside the European Economic Area. In those cases we rely on the safeguards provided by the GDPR, such as European Commission adequacy decisions or standard contractual clauses.

8. How long we keep data

• Account data: while the account is active and up to 30 days after a deletion request.
• Google account data: only while the connection is authorised. When you revoke authorisation or delete your account, we delete data obtained from Google APIs within 30 days, unless the law requires otherwise.
• Usage data and technical logs: up to 12 months.
• Billing data: 10 years, as required by tax law.
• Support communications: up to 24 months after the request is closed.

9. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration, including encryption in transit (TLS) and at rest, role-based access control, strong authentication on internal accounts, backups and access logging. No system is completely secure; if a data breach occurs that poses a risk to you, we will inform you and notify the competent authority as required by law.

10. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict or object to its processing, to receive it in a structured format (portability) and to withdraw consent at any time, without affecting the lawfulness of prior processing. To exercise these rights, write to [email protected]. We reply within 30 days.

You can also delete your account and associated data from the app settings, where that option exists, or by asking us by e-mail.

If you believe the processing breaches the law, you may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

11. Cookies and similar technologies

Our websites use cookies that are strictly necessary for operation. Analytics or marketing cookies are only used with your consent, which you can manage in your browser or in the cookie notice, where one exists.

12. Children

Our services are intended for people aged 16 or over. We do not knowingly collect data from children. If you become aware that a child has provided us with data, contact us so that we can delete it.

13. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date of the last update is shown at the top of this page. For material changes, we will notify you through the app or by e-mail.