This Privacy Policy explains how Indelible Cloud — Unipessoal LDA ("Indelible Cloud", "we", "us", "our"), a company established in Lisbon, Portugal, collects, uses, and protects personal data in connection with our website indelible-cloud.com (the "Site").
It covers the company Site only. Our products process data under their own policies on their own domains — for example, Anxiety Kit is governed by its policy at anxietykit.app/privacy-policy. There are no user accounts on the Site.
Who is responsible
The data controller is Indelible Cloud — Unipessoal LDA, Lisbon, Portugal. For any privacy matter, contact privacy@indelible-cloud.com.
Information we collect
Information you provide
When you contact us through the Site's contact form or by email, we collect the name, email address, optional subject, and message you submit, plus anything else you choose to include. That is the only personal data you actively give us on the Site.
Information collected automatically
Our hosting and CDN provider (Cloudflare) processes standard technical data needed to deliver the Site securely — including IP address, browser and device type, referring page, and timestamps — and to mitigate automated abuse. If you accept analytics, Google Analytics 4 collects aggregated, IP-anonymized usage data (pages viewed, approximate region, device category).
Cookies and local storage
The Site uses a minimal set of cookies and browser local storage. No analytics or non-essential cookies are set until you consent. Full details, names, and durations are in our Cookie Policy.
How we use your information
- To read and respond to your enquiries and requests.
- To operate, secure, and maintain the Site and prevent abuse.
- With your consent, to measure aggregate usage so we can improve the Site.
- To comply with legal obligations.
Legal bases (GDPR)
If you are in the EEA or UK, we rely on the following legal bases under the GDPR:
| Purpose | Legal basis |
|---|---|
| Handling your enquiry | Legitimate interests, and steps taken at your request prior to any agreement |
| Operating and securing the Site (logs, anti-abuse) | Legitimate interests in a secure, available service |
| Analytics | Consent (withdrawable at any time) |
| Meeting legal and accounting obligations | Legal obligation |
How we share information
We do not sell personal data and do not use it for advertising or to train AI models. We share data only with processors that help us run the Site, under data-processing agreements and appropriate safeguards:
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare | Hosting, CDN, and bot mitigation (incl. the contact form's anti-spam check) | IP address, request metadata |
| Google (Analytics 4) | Consent-based, IP-anonymized usage analytics | Aggregated usage and device data |
| Our email / form-processing provider | Delivering and storing your enquiry so we can reply | Name, email, message |
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transfer (you would be notified before any change of controller).
International transfers
Some providers may process data outside the EEA. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision (including the EU-US Data Privacy Framework where applicable).
Retention
We keep enquiry correspondence only as long as needed to handle your request and for a reasonable period afterwards, then delete it. Technical logs are short-lived and used for security and debugging. Analytics data is retained according to our Google Analytics configuration.
Security
The Site is served over HTTPS with HSTS and a strict content security policy. We apply appropriate technical and organizational measures, but no method of transmission or storage is completely secure. Report a vulnerability to security@indelible-cloud.com — see our security.txt.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time (which does not affect prior lawful processing). To exercise any of these, email privacy@indelible-cloud.com; we respond within 30 days. You may also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or your local authority.
California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You may still contact us to exercise applicable rights.
Children
The Site is intended for a general business audience and is not directed at children, and we do not knowingly collect their data.
Third-party links
The Site links to third-party services (such as the Apple App Store, Google Play, and our product sites). Their privacy practices are governed by their own policies.
Changes
We may update this policy. Material changes are reflected by the "Last updated" date above.
Contact
Indelible Cloud — Unipessoal LDA, Lisbon, Portugal · privacy@indelible-cloud.com