Privacy policy

1. Data controller

The controller of the personal data collected on this website is Steevanz. For any privacy question, email us at rcabaco@steevanz.com.

2. What data we collect

We only collect the data needed to handle your request:

• Demo and information requests: name, email, phone, business name, sector, product of interest, message, chosen date and time and the website language.
• Direct contact: any data you send us by email, phone or WhatsApp.
• Technical data: IP address (used transiently for security and abuse prevention) and aggregated, anonymous website usage metrics, without tracking cookies.

3. Purposes and legal bases

We process your data for the following purposes:

• Scheduling and running the demo you requested and sending you a proposal — pre-contractual steps at your request (Article 6(1)(b) GDPR).
• Answering information requests — consent given in the form (Article 6(1)(a)), which you can withdraw at any time.
• Keeping the website secure and preventing abusive submissions — legitimate interest (Article 6(1)(f)).
• Complying with legal obligations, namely tax obligations, if you become a client — legal obligation (Article 6(1)(c)).

4. Retention

Demo and information request data is kept for as long as needed to follow up and for no more than 24 months after the last contact if no business relationship is established. Client data is kept for the duration of the contract and the applicable legal periods, namely 10 years for tax-relevant documents.

5. Who we share data with

We never sell or hand over your data for marketing. We use service providers that process data on our behalf under data processing agreements:

• Vercel Inc. — website hosting and anonymous usage metrics.
• Supabase Inc. — database where requests are stored, hosted in the European Union.
• Resend — delivery of notification and confirmation emails.

6. International transfers

Some of these providers are based in the United States. Whenever data is transferred outside the European Economic Area, this relies on an adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

7. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy;
• rectify inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to processing;
• data portability for data you provided;
• withdraw consent at any time, without affecting the lawfulness of prior processing.

8. How to exercise your rights

Email rcabaco@steevanz.com stating the right you wish to exercise. We reply within one month. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.

9. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access restricted to authorised staff and logging of access to the management area.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update is always shown at the top of this page.