Proveta privacy notice

Who controls the data

GoStack Software Technologies, operating Proveta, is the data controller. For privacy questions or requests, email hi@gostack.dev.

What we collect and why

For the template request, we collect your email address, the “template” request source, and the request time. We use this data to fulfill the download and prevent misuse. The work-email field is required, so we cannot provide the download without it.

If you select the optional marketing checkbox on that form, we also keep a separate signup record with your email address, the “template” signup source, the notice version, and signup time. We use it to send Proveta product and launch emails, and to understand which channels lead to signups.

We do not use either record for automated decision-making. A template request is never treated as marketing permission unless you select the separate optional checkbox.

Legal bases

Our legal basis for the required template-request record is our legitimate interest in fulfilling the download you requested and preventing misuse. We limit this record to the email address, request source, and time, and we keep it separate from marketing.

Our legal basis for product and launch emails is your consent. The marketing checkbox is unchecked by default. If you opt in, we store the notice version you accepted and the database timestamp for the signup.

Retention and withdrawal

We keep the template-request record for up to 12 months from the request. We keep the marketing signup record for up to 12 months from signup, or until you withdraw consent, whichever happens first. Email hi@gostack.dev to withdraw marketing consent or ask for deletion. Withdrawal does not affect processing that was lawful before your request.

Service providers and transfers

Vercel hosts the website, API, and aggregated Web Analytics. Neon stores the template requests and marketing signups in Postgres. The current database is hosted on AWS in US East, and Vercel also uses processing facilities in the United States and other locations used by its subprocessors.

These providers state that they use safeguards for international transfers, including Standard Contractual Clauses where required. Read the Vercel data terms and Neon data terms.

Your rights

You can ask for access, correction, deletion, restriction, or a portable copy of your data. You can object to processing based on legitimate interests and withdraw marketing consent at any time by using the contact address above.

Complaints

You can complain to Portugal’s Comissão Nacional de Proteção de Dados. The CNPD provides a written complaint form on its public contact page.