Last updated: 2 October 2026

Protecting your personal data matters to us. This policy explains which personal data Nevora collects through this website, for what purposes, on what legal basis, for how long it is kept, with whom it is shared and how you can exercise your rights, under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Portuguese Law no. 58/2019.

1. Data controller

The data controller is Nevora, based in Porto, Portugal. For any question about personal data, contact us at hello@nevora.pt.

2. What data we collect

Contact and meeting request form: name, email, phone (optional), company name and size, how you heard about us, your message and, if you pick a time in the calendar, the requested date and time.
Website chat: the messages you write to the assistant and any data you choose to share in the conversation.
Technical data: IP address, browser type and the date and time of requests, logged by our servers for security, abuse prevention (for example, automated form submissions) and to keep the website running.

We do not ask for special categories of data (such as health data). Please do not include them in your messages.

3. Why we use the data and on what basis

Replying to you, scheduling and preparing meetings and sending proposals — pre-contractual steps at your request (Article 6(1)(b) GDPR).
Providing the services you contract — performance of a contract (Article 6(1)(b)).
Keeping the website secure and preventing fraud and spam — legitimate interest (Article 6(1)(f)).
Complying with legal obligations, including tax and accounting — legal obligation (Article 6(1)(c)).

We do not use your data for automated decisions with legal effects on you, and we do not sell it to third parties.

4. How long we keep the data

Contact details and messages are kept for as long as needed to answer your request and to follow up any resulting business relationship. If no business relationship follows, they are deleted once they are no longer needed for that purpose. Data linked to contracts and invoicing is kept for the periods required by law. Server logs are kept for a limited period, for security purposes only.

5. Who we share the data with

Data is processed by the Nevora team and, where needed, by service providers acting on our behalf and under our instructions (processors), such as hosting, content delivery and website protection (Cloudflare), email delivery and the artificial intelligence technology used in the chat. These providers must process the data only for the stated purposes and with appropriate security measures.

Our servers are located in the European Union. If a provider processes data outside the European Economic Area, the transfer relies on the safeguards provided for in the GDPR, such as European Commission adequacy decisions or standard contractual clauses.

6. Cookies

This website only uses technical cookies that are strictly necessary for it to work:

cookie-consent (browser local storage) — stores your cookie choice so we do not ask again (duration: 6 months);
nevora-session — keeps your browsing session (duration: 2 hours);
XSRF-TOKEN — protects forms against forged requests (duration: 2 hours).

These cookies are not used for advertising or to track you across other websites, so they do not require consent. Our website protection provider (Cloudflare) may also set technical security cookies. You can delete or block cookies in your browser settings; if you block technical cookies, the forms may stop working.

You can review or change your preferences at any time in Cookie settings (also available in the footer of every page). If we start using analytics or marketing cookies in the future, they will only be enabled after you accept them in the cookie notice, and you can withdraw that consent the same way.

7. Your rights

Under the GDPR you may at any time request access to your data, its rectification or erasure, restriction of processing and data portability, and object to processing based on legitimate interest. To exercise these rights, email hello@nevora.pt. We reply within one month.

You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS), access control and audit logging.

9. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown at the top of this page.

Privacy Policy