GDPR & your data rights

We are committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law. This statement explains what we process and the rights you have.

Data controller

What we process and why

• Document text you choose to analyze — when you run an analysis, the text of the Terms of Service or Privacy Policy page is sent to our secure backend and to Google Gemini to generate the summary and risk ratings. It is processed to provide the service and is not used for advertising.
• Anonymous device identifier & credit balance — to operate the free-credit system without requiring an account.
• Payment records — when you buy credits, payments are handled by Stripe; we keep a record of the transaction (amount, date, reference) for accounting and support.
• Website analytics — anonymous, aggregated usage and install events.

Legal bases

• Performance of a contract — providing analyses and managing credits/purchases.
• Legitimate interests — security, fraud prevention and improving the product (aggregated analytics).
• Consent — where required, e.g. optional analytics; you can withdraw it at any time.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. The extension also lets you export or delete your data directly from its settings. To exercise any right, email lm@atlasinvencivel.pt.

Retention

We keep personal data only as long as necessary for the purposes above. Analyzed document text is not retained beyond what is needed to return your result (with short-lived caching). Payment records are kept as required by law.

International transfers

Some providers (Google, Stripe, Vercel) process data outside the EU. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Complaints

If you believe your data has been mishandled, you may contact us first, and you have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados).