This Client Portal (portal.ividi.dev) is operated by David Arsénio Martins ("Vidi"), who is the controller of your personal data. This page explains, plainly, what data we collect, why, and what rights you have.
What data we collect
- Account data: name, email, username, company, phone number and preferred language.
- Billing data (optional, only if you fill it in): tax ID (NIF), address, postal code, city and country.
- Service data: the projects, milestones, invoices and files linked to your account, and the messages exchanged in chat with our team.
- Conversation history with the AI assistant (Agente Vidi), if you use it.
- If you enable push notifications in the mobile app: a technical device identifier (token), used only to deliver those notifications.
Why we use your data
- To give you access to the Portal and manage your projects, invoices and files - the legal basis is performance of the service contract between us.
- To communicate with you about your project (chat, notifications).
- For invoicing and compliance with tax obligations - the legal basis is compliance with legal obligations.
- We never use your data for advertising, and we never sell it or share it with third parties for marketing purposes.
The AI assistant (Agente Vidi)
- When you use Agente Vidi, your question and the data it looks up on your behalf (for example, a project's status or an invoice's amount) are sent to Google's Gemini API to generate the reply. Its data access permissions are exactly the same as your own in the Portal - the assistant never sees other clients' data.
- Conversations are saved to your account so you can pick up where you left off. You can request deletion of this history at any time (see "Your rights" below).
Who we share your data with
- Supabase - our database, authentication and file storage provider.
- Vercel - where the Portal is hosted.
- Google (Gemini API) - only when you use Agente Vidi, as explained above.
- Firebase (Google) - only to deliver push notifications in the mobile app, if you enable them.
- We do not work with any of these providers for advertising or marketing profiling - they exist solely to make the Portal work.
Cookies
- The Portal only uses session cookies, strictly necessary to keep you logged in. We do not use analytics, advertising, or cross-site tracking cookies.
How long we keep your data
- For as long as your account is active. Invoices and other records with tax relevance are kept for the period required by Portuguese law, even after the account is closed.
- If you request account deletion, we remove the remaining data as soon as reasonably possible, except what we are legally required to retain.
How we protect your data
- Access to your data is restricted by database-level security rules (Row Level Security) - only you and the admin can see your projects, invoices and files. All communication with the Portal is encrypted over HTTPS.
Your rights
- Under GDPR, you have the right to access, correct, delete or export your data, and to object to certain processing. To exercise any of these rights, contact us at the email below.
- You also have the right to lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), the data protection authority in Portugal.
Changes to this policy
- We may update this policy as the Portal evolves. Material changes will be announced in the app.
Contact
- For any question about this policy or your data: ividi.dev@gmail.com