Privacy Policy

AIO Studio ("we", "us", "our") operates the website aiostudio.xyz. This page explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Portuguese law.

What data do we collect?

When you submit the contact form on our website, we collect:

• Your name
• Your email address
• Your company name (optional)
• The message you write to us

We also use Vercel Analytics - an anonymous traffic measurement service provided by Vercel, Inc. Vercel Analytics does not use cookies and does not collect personally identifiable information. Data collected (such as page views and country of origin) is fully anonymous and used only to understand overall website traffic.

We do not use any other tracking scripts, advertising pixels, or cookies of any kind.

How do we collect your data?

We only collect data that you provide directly by submitting the contact form on this website. We do not collect data from any indirect sources, third-party data brokers, or social platforms.

How will we use your data?

We use your data solely to respond to your enquiry. Your message is delivered to our team via email and is used only for the purpose of replying to you. The legal basis for this processing is Article 6(1)(b) of the GDPR, as processing is necessary for the performance of pre-contractual steps taken at your request. Where no contractual relationship is contemplated, we rely on our legitimate interest in responding to communications addressed to us, pursuant to Article 6(1)(f) of the GDPR.

We will never sell, share, or pass your data to third parties. We will never use your data for marketing or send you unsolicited communications.

How do we store your data?

Your data is not stored in any database. When you submit the contact form, your message is transmitted directly to our team's email inbox via an encrypted SMTP connection. It is stored only within our email account, subject to that provider's own security practices.

We retain your message and any related correspondence for as long as reasonably necessary to respond to your enquiry and, where applicable, to manage any resulting business relationship. As a general rule, correspondence is reviewed and deleted within 24 months of the last interaction, unless a longer retention period is required by applicable law.

If you would like us to delete your message and any record of our correspondence before that period, you may contact us at any time and we will do so promptly.

Cookies

This website does not use cookies. We do not use session cookies, analytics cookies, advertising cookies, or any other form of local storage tracking. Vercel Analytics, which we use to measure website traffic, does not rely on cookies - it operates on fully anonymous data. No cookie banner is shown because none are needed.

International transfers

Our website is hosted by Vercel, Inc., a company incorporated in the United States. Vercel Analytics processes only anonymous and aggregated data and does not involve the transfer of personal data. Enquiries submitted through our contact form are received and stored in our team's email account, which is operated through Google Workspace, a service provided by Google LLC, also incorporated in the United States. Google LLC acts as a data processor in relation to data held within Google Workspace, and the processing of personal data is governed by Google's Cloud Data Processing Addendum, which incorporates the Standard Contractual Clauses approved by the European Commission pursuant to Article 46(2)(c) of the GDPR, as the lawful mechanism for transfers of personal data from the European Economic Area to the United States. Further information about Google's data transfer framework is available at policies.google.com/privacy/frameworks.

Automated decision-making

We do not carry out any automated decision-making or profiling within the meaning of Article 22 of the GDPR. No decision producing legal or similarly significant effects on you is made solely by automated means.

Your data protection rights

Under GDPR, you are entitled to the following rights regarding any personal data we hold about you:

To exercise any of these rights, contact us at geral@aiostudio.xyz. We will respond within one month.

Links to other websites

Our website contains links to the websites of our clients and partners. This privacy policy applies only to aiostudio.xyz. If you follow a link to another website, please read their own privacy policy.

Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised "last updated" date.

How to contact us

For any questions about this policy or your personal data:

How to contact the supervisory authority

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Portuguese data protection authority: