Privacy policy

The data controller is Shiftworks, based in Paços de Ferreira, Portugal, reachable at geral@shiftworks.pt. IVIA is a Shiftworks service.

Account data: name, email address and an encrypted password. Billing data: company name, address, tax identification number and the result of its VIES validation.

Usage data: the clients you register, the domains you submit for measurement, and the measurement results. Those results include AI engine responses, which may contain company names publicly referenced in them.

If you use the contact form: the name, email, company and message you write.

We collect no special categories of data, carry out no profiling, and make no automated decisions producing legal effects concerning you.

Performance of the contract, for everything necessary to deliver the service you subscribed to. Compliance with a legal obligation, for invoicing and tax retention. Legitimate interest, for service security and abuse prevention. Consent, only where we explicitly ask for it.

Data is stored on servers within the European Union (Germany). Access is limited to those operating the service.

Processors: the AI engines running the measurements — OpenAI, Google and Perplexity — receive only the text of the questions, which contains no personal data of yours; the email provider, for messages we send you; and the payment provider, where applicable, which handles card data without it ever reaching us.

Account data and measurements: for as long as the subscription is active. After cancellation, deleted at your request; absent a request, kept only as long as legal obligations require.

Invoicing documents: for the statutory retention period applicable in Portugal.

Contact form messages: up to one year, unless they lead to a contractual relationship.

You may request access, rectification, erasure, restriction, portability and objection by writing to geral@shiftworks.pt. We respond within the statutory deadline.

If you believe the processing does not comply with the law, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD).