Privacy notice
Who we are, what we store, what we never store, and how your conversations and reports are protected.
Who we are
Marta Almeida Unipessoal Lda, trading as Entretom, provides this service and is the data controller for the personal data described in this notice.
You can reach us at suporte@entretom.app for any privacy question or request.
What you share with us
When you run an analysis you may send us conversation text, a description of a situation, and optional labels for who is who. Screenshots are processed to extract text and are not stored as image files.
Conversation content never appears in a URL and is never used to build a public page.
Categories of personal data and why we use them
Account data (email address, display name, password credentials handled by our authentication provider) — to create and secure your account. Legal basis: performance of our contract with you.
Analysis content (the text you submit, the generated preview and report, analysis type, timestamp) — to produce and store your reports. Legal basis: performance of our contract with you.
Credit and purchase records (package purchased, amount, status, payment reference) — to keep your balance correct and to meet accounting obligations. Legal basis: contract and legal obligation.
Technical data (IP address, device and browser information, aggregate usage events) — for security, fraud and abuse prevention, and product improvement. Legal basis: our legitimate interests.
Support messages — to answer you. Legal basis: our legitimate interests.
Who can see your reports
Only you. Reports are private, excluded from search engines, and never shown to other users. Access is enforced server-side, not just hidden in the interface.
AI processing
Analysis is generated by a third-party AI model provider, called server-side. Your text is sent to that provider only to produce your report.
Who we share data with
Service providers acting on our instructions: hosting and database infrastructure, the AI model provider, email delivery, and product analytics.
Paddle.com Market Ltd, our Merchant of Record, for the sale of credits, payment processing, tax compliance, invoicing and buyer support. Paddle acts as an independent controller for the payment data it collects.
Professional advisers (legal, accounting) and public authorities, where we are legally required to disclose.
We do not sell your personal data and we do not use your conversation content for advertising.
International transfers
Some of our providers process data outside the EEA, the UK or Brazil. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.
Retention
Analyses and account data are kept until you delete them or close your account. Purchase and accounting records are kept for the period required by tax law, typically up to ten years. Technical logs are kept for a short period and then deleted or anonymised.
Deleting your data
You can delete any single analysis from your account page, or delete your whole account, which removes your analyses, credit history and profile. Records we must keep for accounting are retained in a minimised form.
Your rights
You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time.
Write to suporte@entretom.app and we will respond within one month. You also have the right to complain to your local data protection authority (in Brazil, the ANPD).
Security
We use encryption in transit, access controls, row-level authorisation in the database, and server-side enforcement of report ownership. No system is perfectly secure, but we treat conversation content as sensitive by default.
Cookies
We use essential storage for your session and an anonymous analysis token, plus aggregate analytics. See the cookie policy for details and how to clear them.