Privacy
Last updated: 2026-09-25
1. Data controller
Inovaweb, Lda. (VAT no. 518503291). Address and other details: Legal notice. Privacy contact: [email protected].
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email, name, products bought, amount, country | Process your order, deliver the files, send your access link and support | Performance of contract |
| Billing and transaction data | Invoicing and tax obligations (including EU VAT OSS) | Legal obligation |
| IP address, browser, time of consent and downloads | Proof of consent, fraud prevention, dispute handling and copyright protection (copies are personalised with name and email) | Legal obligation and legitimate interest |
| Visit source (e.g. campaign, referring site) | Aggregate statistics on which channels work (first-party cookies pv_vid and pv_src) | Legitimate interest |
| Third-party measurement cookies (Meta, Google) | Measure and optimise ads | Consent (only enabled if you accept) |
We never receive or store your card details: payment happens directly on Link/Stripe, which acts as reseller and is responsible for the payment and billing data it collects (see Link's privacy policy at link.com/privacy).
3. Who we share it with
Link/Stripe (payments and invoicing), our hosting and network provider (Cloudflare), our email delivery provider and — only with your consent — Meta and Google (ad measurement). Some of these providers may process data outside the European Economic Area under adequacy decisions (EU-US Data Privacy Framework) or standard contractual clauses.
4. How long we keep it
Order and billing data: 10 years (tax obligation). Technical logs (IP, downloads): up to 24 months after purchase, or longer if needed for an ongoing dispute. First-party statistics cookies: up to 12 months.
5. Your rights
You can request access, rectification, erasure, restriction, portability or object to processing by writing to the email above. You can withdraw cookie consent at any time by clearing this site's data in your browser. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the CNPD (www.cnpd.pt), or the authority in your country.
6. Cookies
- pv_sess — technical checkout session (essential, ends when you close the browser).
- pv_lang — chosen language (essential).
- pv_vid, pv_src — first-party statistics and visit source (12 months / 30 days).
- Meta Pixel, Google Analytics/Ads — only if you accept the cookie notice.