Privacy policy

The data controller is Shiftworks Unipessoal, Lda, tax number 519245970, based in Paços de Ferreira, Portugal, reachable at geral@shiftworks.pt. IVIA is a Shiftworks Unipessoal, Lda service.

IVIA is sold to agencies, and an agency measures brands belonging to its own clients. For that part, it is the agency that decides what gets measured: the agency is the data controller, and Shiftworks acts as a processor — handling that data solely to deliver the service and following the instructions the agency gives through the application.

What an agency enters about a client is the brand name, the domain, the services and the competitors: company information, not personal information. Should it choose to write personal data into the free-text fields, it is the agency that answers for having grounds to do so.

That data is not used for any other purpose, is not shared with other agencies and is not sold. Each agency sees only its own portfolio. Where a processing agreement under Article 28 of the General Data Protection Regulation is required, it is entered into on request, by writing to geral@shiftworks.pt.

As for the agency's own data — name, email address, billing — the controller remains Shiftworks Unipessoal, Lda, as described throughout the rest of this page.

Account data: name, email address and an encrypted password. Billing data: company name, address, tax identification number and the result of its VIES validation.

Usage data: the clients you register, the domains you submit for measurement, and the measurement results. Those results include AI engine responses, which may contain company names publicly referenced in them.

If you use the contact form: the name, email, company and message you write.

We collect no special categories of data, carry out no profiling, and make no automated decisions producing legal effects concerning you.

Performance of the contract, for everything necessary to deliver the service you subscribed to. Compliance with a legal obligation, for invoicing and tax retention. Legitimate interest, for service security and abuse prevention. Consent, only where we explicitly ask for it.

Data is stored on servers within the European Union (Germany). Access is limited to those operating the service.

Processors: the AI engines running the measurements — OpenAI, Google and Perplexity — receive only the text of the questions, which contains no personal data of yours; the provider that collects Google AI Overview responses, which likewise receives only the question text; the email provider, for messages we send you; and the payment provider, where applicable, which handles card data without it ever reaching us.

OpenAI and Perplexity are based outside the European Union. What reaches them is the text of the measurement questions, written about brands, services and markets — not about you.

Account data and measurements: for as long as the subscription is active. After cancellation, deleted at your request; absent a request, kept only as long as legal obligations require.

Invoicing documents: for the statutory retention period applicable in Portugal.

Contact form messages: up to one year, unless they lead to a contractual relationship.

You may request access, rectification, erasure, restriction, portability and objection by writing to geral@shiftworks.pt. We respond within the statutory deadline.

If you believe the processing does not comply with the law, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD).