How we contact businesses
Last updated 29 August 2026
This page explains what happens when we write to you at work and you never gave us your address. It is the information required by Article 14 of the GDPR.
Who is writing
IVIA is a product of Shiftworks (Shiftworks Unipessoal, Lda), based in Paços de Ferreira, Portugal. Shiftworks is the controller of the data described here.
Contact: hello@getivia.io · geral@shiftworks.pt
What we hold
Your name, your role, your work email address, and your employer's name, domain and sector. Nothing else. No phone numbers, no personal profiles, no special categories of data.
Where we got it
One of three, and the email itself tells you which one applies to you: Apollo.io, a business contact database; your company's public website, where the address was published to be written to; or public sources, collected by us.
Why we are writing
To introduce IVIA — a measurement of whether AI answers name a brand — to marketing agencies whose clients that measurement is about, and to propose a demonstration.
The legal basis
Legitimate interest, Article 6(1)(f) GDPR: presenting a professional tool to businesses whose work it is made for. We weighed that interest against your rights before writing to anyone, and you can ask us for that assessment.
Two limits we set ourselves, in writing:
We write only to addresses whose subscriber is a legal person. Personal mailboxes are refused by the system, not by policy.
We consult the list of legal persons who have objected, kept by the Portuguese Directorate-General for Consumers, every month. Our system will not send a single email if that consultation is more than 31 days old.
Who else sees it
Our hosting and database provider, our email sending provider, our workflow service, and the contact database named above. All act on our instructions. The current list of providers is available on request.
International transfers: Apollo.io is based in the United States. The transfer is covered by Apollo.io's certification under the EU-U.S. Data Privacy Framework, complemented by the European Commission's Standard Contractual Clauses.
How long we keep it
If you never reply: 12 months from the last message, then we delete your data. Where a record of the message must be kept, your personal data is removed from it instead.
Messages we sent and the evidence behind them: 24 months, so that what we claimed can be checked later.
If you ask us to stop: we keep your address or your domain on a suppression list indefinitely. That record is the only way to guarantee we never write to you again.
Your rights
Access, rectification, erasure, restriction, portability and objection. For direct marketing, the right to object is unconditional and immediate — no reason required, no follow-up asking you to reconsider.
Three ways, all of them final: the removal link at the bottom of every email — it never expires; reply with the word "remove"; or write to hello@getivia.io.
You may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority.
No automated decisions
Every message we send is read and approved by a person before it leaves. Nothing about you is decided automatically.