Privacy

Who we are

xval.ai is operated by Validação Cruzada, Lda. (NIPC 516 373 366), Portugal, which is the controller of the personal data described here. Contact: hello@xval.ai.

Website analytics

We use Umami Cloud (Umami Software, Inc., USA) to see how the site is used. It sets no cookies. For each page view it receives the page address, the referring page, your browser, operating system, device type, screen size and language; your IP address is used, without being stored, to derive country, region and city and a visit identifier. We also record clicks on the booking, email, form and founder profile links, and each successful form submission, not what you type. Umami keeps this data for 6 months and processes it for us under its data processing agreement; its servers are in the EU and the US, and transfers to the US are covered by Standard Contractual Clauses. Legal basis: our legitimate interest in knowing which pages are used (Art. 6(1)(f) GDPR); you can object at any time by emailing us.

Booking a call

Booking uses Google Calendar appointment scheduling. The details you enter are processed by Google under its terms and stored in our calendar to run the call.

Enquiry form

The form collects your name, organisation, what you need and by when, who signs, a budget range and your work email. We use them to reply to your enquiry and prepare a call, on the basis of our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). Every field is needed for a useful reply; if you prefer, email us instead.

The form is processed for us by Web3Forms (Web3Creative, India) under its data processing agreement. Web3Forms emails your answers to us and keeps a copy for up to three years on Amazon Web Services, Cloudflare and Hetzner infrastructure; your IP and email address are checked by the spam filters CleanTalk and Akismet (USA). Transfers outside the EEA are covered by the European Commission's Standard Contractual Clauses included in that agreement. Details in the Web3Forms privacy policy. We keep the email we receive like any other, for as long as needed to respond and to run any resulting engagement.

Email

If you email us, we keep the correspondence for as long as needed to respond and to run any resulting engagement.

Project data

Data shared for a project is governed by the written agreement for that project, including a data processing agreement where required.

Hosting

The site is hosted on GitHub Pages (GitHub, Inc., USA), which logs visitors’ IP addresses for security purposes under the GitHub Privacy Statement.

Your rights

You can ask us for access to your personal data, its correction or deletion, restriction of its use, or a copy in a portable format, at hello@xval.ai. Where we rely on our legitimate interest (analytics, enquiries, booking), you can object at any time. You can also complain to the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.