Privacy Policy

Last updated: 07/08/2025

1. Introduction

Cottonhat Software Unipessoal LDA ("we," "our," or "us") operates opsmatic.io ("the Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller Information

  • Company: Cottonhat Software Unipessoal LDA
  • Email: [email protected]
  • Address: Avenida D João II Edifício Infante 35 Piso 11A - 1990-083 Lisboa
  • Phone: +351 927 344 725
  • Data Protection Officer: José Jacinto

3. Information We Collect

3.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include:

  • Email address
  • First name and last name
  • Company name and job title
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Usage data and analytics

3.2 Usage Data

We may collect information on how the Service is accessed and used. This may include:

  • Your computer's IP address
  • Browser type and version
  • Pages visited and time spent
  • Device identifiers
  • Operating system
  • Referral sources

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can configure your browser to refuse all cookies or to indicate when a cookie is being sent.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for processing for specific purposes
  • Contract: Processing necessary for the performance of a contract with you
  • Legal obligation: Processing necessary for compliance with legal obligations
  • Legitimate interests: For our legitimate business interests, provided your rights are not overridden

5. How We Use Your Information

We use the collected data for various purposes:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To provide customer support
  • To monitor usage and improve our Service
  • To detect, prevent and address technical issues
  • To fulfill legal obligations
  • For marketing communications (with your consent)

6. Data Sharing and Disclosure

We may share your personal information in the following situations:

  • Service Providers: With third-party companies to facilitate our Service
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • With Your Consent: For any other purpose with your explicit consent

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. We will retain and use your data to comply with legal obligations, resolve disputes, and enforce our agreements.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside your jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR requirements.

10. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Request limitation of processing
  • Right to data portability: Request transfer of your data
  • Right to object: Object to processing of your personal data
  • Right to withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us at [DATA PROTECTION EMAIL REQUIRED].

11. Children's Privacy

Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. Third-Party Services

Our Service may contain links to third-party websites or services. Key third-party processors include:

  • Clerk: Authentication and user management
  • Supabase: Database and backend services
  • Stripe: Payment processing
  • Vercel: Hosting and deployment

These third parties have their own privacy policies, and we encourage you to review them.

13. Cookies Policy

We use cookies for:

  • Essential functionality of the website
  • Analytics to understand how our Service is used
  • Marketing and advertising (with your consent)
  • Personalization of content and experiences

You can manage cookie preferences through your browser settings.

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

15. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

16. Updates to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Company: Cottonhat Software Unipessoal LDA
  • Email: [email protected]
  • Address: Avenida D João II Edifício Infante 35 Piso 11A - 1990-083 Lisboa
  • Phone: +351 927 344 725
  • Data Protection Officer: José Jacinto