Privacy policy

Last updated: 22 October 2026

Who is responsible

Inseyo is operated by Valter Matos, an individual based in Portugal. I am the data controller for the personal information described in this notice. You can contact me about privacy or your information at [email protected].

This notice covers inseyo.ai, enquiries sent to me and bookings for an Inseyo workflow review. If we agree on a project involving additional personal information, I will explain any additional processing before it starts.

Information used and why

Enquiries and proposals. When you email me, I receive your email address, name if provided, message and any attachments. You may also share your business name, website and details of a task you want to improve. I use this information to respond, understand your request and prepare a proposal. Where you are considering a contract with me personally, the legal basis is taking steps at your request before entering a contract. Where you contact me on behalf of a business, or make a general enquiry, the basis is my legitimate interest in responding to business enquiries and discussing my services.

Bookings and calls. The booking page collects your name, email address, appointment details and answers to the booking questions, including the task you want to improve and an optional website. I use Google Calendar to manage appointments and Google Meet for calls. I use these details to arrange the review, send appointment information and discuss your request, on the same legal bases described above.

Website delivery and security. Hosting and technical service providers may process information such as your IP address, browser details and request times to deliver and protect the website. My legal basis for processing needed to operate the site is my legitimate interest in providing a functioning, secure website.

Providing information is voluntary, but I need an email address to reply and the required booking details to arrange a call. Please do not send passwords, sensitive personal information or identifiable customer records as part of an initial enquiry.

Services that handle information

I use Carrd to host this website and Google services for email, appointment scheduling and video calls. These providers process information necessary to deliver their services. Their own privacy notices describe processing they carry out for their own purposes:

• Carrd privacy policy
• Google privacy policy

I may also disclose information where required by law or where necessary to establish, exercise or defend legal claims. I do not sell your personal information.

These providers operate internationally, so information may be processed outside the European Economic Area. Where a transfer is subject to GDPR, it must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses. You can contact me for information about the transfer arrangements and safeguards applicable to your information. See also Google's information on international data transfers.

Cookies and tracking

I have not added visitor analytics, advertising pixels or marketing tracking tools to this website. Technical providers may still process information needed to deliver and secure the site; this statement does not mean that no technical information is processed.

The booking buttons take you to a separate Google Calendar page. Google’s privacy and cookie practices apply when you use that service. If I introduce optional tracking on this website, I will update this notice and obtain consent where required before activating it.

How long information is kept

I keep enquiry correspondence, booking details and related notes for as long as reasonably needed to respond to your request, complete relevant follow-up and manage any resulting proposal or working relationship. Retention depends on whether the enquiry is still active, whether a project follows, and whether records are needed to meet a legal obligation or deal with a dispute. Information that is no longer needed should be deleted or anonymised. You can ask about the retention of your particular records or request deletion using the contact address above.

Your rights

Subject to the conditions in data protection law, you can request access to your personal information, correction of inaccurate information, deletion, restriction of processing and transfer of information in a portable format where that right applies.

You can object to processing based on legitimate interests on grounds relating to your particular situation. If any processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.

Email [email protected] to make a request. I may need information to verify your identity. I will normally respond within one month; if a legally permitted extension is needed, I will explain it within that period.

You can complain to Portugal's Comissão Nacional de Proteção de Dados (CNPD) or to the relevant supervisory authority where you live, work or believe an infringement occurred. You do not have to contact me first.

I do not use your enquiry or booking information for solely automated decisions that produce legal or similarly significant effects on you.

Changes

I will update this notice if the way Inseyo handles personal information changes. The date at the top identifies the latest version.