Privacy Policy

1. Data controller

Dinastia Diligente Unipessoal LDA, tax no. (NIPC) 515 009 970, registered office at Rua António França Borges 16, 1.º Esq., 2625-187 Póvoa de Santa Iria, Portugal. For any question about your data or to exercise your rights: contacto@apoiosimples.com. The company is not required to appoint a Data Protection Officer and has not done so to date.

2. Data we collect

Site forms (contact form and simulator lead capture): name, email, phone, company/entity data (sector, size, region and entity type) and your message. We also record the date and time you give consent.

Paid services (Growth Diagnosis and AI Act compliance package): in addition to the above, the questionnaire collects your company name, tax number (NIF/NIPC), municipality, size, approximate turnover, website and the objective you describe. The tax number is collected to identify the company in our analysis and for invoicing.

Payments: payment is processed by Stripe. Card details are entered directly with Stripe and NEVER pass through our systems; we receive only the payment confirmation and transaction reference, which we link to your request.

Technical records: so that a paid request is never lost, if the database is unavailable at the time of submission the form content is written to the hosting logs, accessible only to us and for a short period, until it is recovered.

3. Purposes

(a) to respond to your requests and prepare the digitalisation grants diagnosis; and (b) to make commercial contact about our services. We will not use your data for other purposes without informing you first.

4. Legal basis

Information requests and commercial contact: processing is based on your consent (Article 6(1)(a) GDPR), given when you submit the form. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before then.

Paid services: when you purchase a service, processing of the data needed to deliver it is based on performance of the contract (Article 6(1)(b)). Consent does not apply here — without this data we cannot provide the service.

Invoicing and accounting: retention of tax documents is based on compliance with a legal obligation (Article 6(1)(c)), for the applicable statutory periods.

5. Retention

We keep your data for a maximum of 24 months from the last contact, or until you withdraw consent, whichever occurs first. Data linked to a contractual relationship is kept for the applicable legal periods (notably tax retention periods). After that, data is deleted or anonymised.

6. Recipients and processors

We use providers acting on our behalf under data-processing agreements: Supabase (database), Vercel (site hosting and its technical logs) and Stripe Payments Europe (payment processing).

Stripe acts as an independent controller for the payment data it collects directly from you (name, email and card details), under Stripe's own privacy policy. We receive only the payment confirmation and reference.

We do not sell or share your data with third parties for marketing.

7. International transfers

Some processors may process data outside the EEA (in particular Vercel). Such transfers rely on appropriate safeguards under the GDPR — in particular the European Commission's Standard Contractual Clauses (Art. 46) or an adequacy decision. You can request information about these safeguards via contacto@apoiosimples.com.

Additionally, if you accept marketing cookies, the Meta Pixel (Meta Platforms, Inc., USA) may involve a transfer of data to the USA, under the EU-US Data Privacy Framework (Adequacy Decision (EU) 2023/1795) and the Standard Contractual Clauses (Decision (EU) 2021/914). See the Cookie Policy.

8. Your rights

You have the right to access, rectify, erase, port, restrict or object to the processing of your data, and to withdraw consent at any time. To exercise any of these, contact us at contacto@apoiosimples.com. We respond within the legal time limit.

9. Automated decisions

The grants simulator shows purely indicative results and does not make automated decisions producing legal or similarly significant effects. Grant analysis is always validated by human intervention.

10. Supervisory authority

You may lodge a complaint with the CNPD — Portuguese Data Protection Authority (www.cnpd.pt).