Privacy Policy

How we collect, use, and protect your information

Last updated: January 2025

1. Introduction

Pro Boost ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered document generation service.

Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Data Controller

Service Provider: Miguel Moreira Areias
Email: info@pro-boost.pt
NIF: 267363869
Address: Rua Santa Luzia, 825, 4250-420 Porto, Portugal

For data protection inquiries, contact us at the email above with the subject line "Data Protection Request".

3. Data We Collect

3.1 Information You Provide

  • Personal details: Name, email address, phone number (optional)
  • Professional information: Job title, company, work experience, education, skills
  • Document content: Resume text, business card details, email signature information
  • Payment information: Payment processed securely through Stripe (we never see your card details)

3.2 Automatically Collected Information

  • Device information: Browser type, operating system, device type
  • Usage data: Pages visited, features used, time spent (for service improvement)
  • Technical data: IP address (anonymized when possible), browser identifiers

No Behavioral Tracking

We do not use Google Analytics, Facebook Pixel, or similar tracking services. We do not track your behavior across websites for advertising purposes.
4. How We Use Your Data
PurposeLegal Basis (GDPR)
Generate AI-powered documents (resumes, business cards, email signatures)Art. 6(1)(b) Contract performance
Process payments via StripeArt. 6(1)(b) Contract performance
Improve service quality and fix technical issuesArt. 6(1)(f) Legitimate interest
Respond to inquiries and provide supportArt. 6(1)(f) Legitimate interest
Comply with legal obligations (tax, accounting)Art. 6(1)(c) Legal obligation
5. AI Processing (Google Gemini)

Your document content is sent to Google's Gemini AI API to generate the requested output. We implement the following safeguards:

  • Data is transmitted securely via HTTPS
  • Google does not use your data to train their models for your specific request
  • Data is retained by Google according to their data usage policy

Important: Do not submit sensitive personal data (health, religious beliefs, political opinions, criminal records, biometric data) unless absolutely necessary for your document.

6. Data Sharing and Third Parties

6.1 Stripe (Payment Processing)

Payments are processed by Stripe, Inc. Stripe is a PCI DSS compliant payment processor. Your card details never touch our servers. Stripe's privacy policy applies to payment data.

6.2 Google AI (Document Generation)

We use Google's Gemini API for AI-powered document generation. Your document content is sent to Google servers for processing. This may involve data transfer outside the EEA.

6.3 Hosting Provider

Our website is hosted by Railway, which may have access to server logs for technical support purposes.

6.4 No Sale of Data

We do not sell, rent, or trade your personal information with third parties for their marketing purposes.

7. International Data Transfers

Some services we use (Google AI) may process data outside the European Economic Area (EEA). When data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Compliance with the GDPR adequacy decisions where applicable
  • Contracts with third-party processors requiring GDPR-level data protection
8. Data Retention

8.1 Client-Side Data

Generated documents are downloaded to your device and not stored on our servers unless you create an account (coming soon).

8.2 Form Data

Form inputs are temporarily stored in your browser's localStorage for convenience during your session. This data is not transmitted to our servers.

8.3 Payment Records

Payment records are retained by Stripe according to their data retention policy and Portuguese tax law (typically 10 years for accounting purposes).

8.4 Cookie Consent

Your cookie consent preference is stored for 180 days. See our Cookie Policy for details.

9. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request a copy of your personal data
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete data
  • Right to Erasure (Art. 17): Request deletion of your personal data
  • Right to Restriction (Art. 18): Limit how we use your data
  • Right to Portability (Art. 20): Receive your data in a structured format
  • Right to Object (Art. 21): Object to processing based on legitimate interest
  • Right to Withdraw Consent: Withdraw consent at any time (future effect only)

How to Exercise Your Rights

Email us at info@pro-boost.pt with the subject line "Data Rights Request". We will respond within 30 days.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): https://www.cnpd.pt

10. Cookies and Tracking

We use only essential cookies required for the site to function. We do not use analytics or marketing cookies. For detailed information, see our Cookie Policy.

11. Security Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: HTTPS/TLS for all data transmission
  • Payment security: Stripe PCI DSS Level 1 certification
  • Access controls: Limited access to user data
  • No server storage: Document content is not permanently stored on our servers

Despite our efforts, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Posting the new policy on this page with an updated "Last updated" date
  • Sending you an email if you have an account with us

Your continued use of the service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

For questions, concerns, or requests regarding this privacy policy or your personal data:

Email: info@pro-boost.pt

Address:
Miguel Moreira Areias
Rua Santa Luzia, 825
4250-420 Porto

LEGAL NOTICE

This privacy policy is a template and must be reviewed by a qualified lawyer specializing in Portuguese and EU data protection law before production launch. Ensure all TODO items are filled with your actual information.