Privacy Policy

1. Who is responsible for your data

This policy explains how personal data is processed when you use this website, send an enquiry or work with us. It is written under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Portuguese Law 58/2019.

The data controller is Goatzilla Creative Solutions, Unipessoal Lda, trading as DreamJuiceAI, NIF / VAT 517976641, Rua da Alegria, Nº 53, 5000-773 Agarez, Vila Real, Portugal. Responsible person: Flávio Narciso. Contact: info@dreamjuiceai.com.

2. Project enquiries (the /apply form)

When you complete the project form we collect: first and last name, email address, phone number, website or project link, project purpose, timeline, industry and budget range.

Purpose: to assess your request, contact you about it and prepare a proposal.

Legal basis: steps taken at your request before entering into a contract (art. 6(1)(b) GDPR) and our legitimate interest in managing and organising enquiries (art. 6(1)(f) GDPR).

3. Email correspondence

If you write to info@dreamjuiceai.com, we process your email address, name and the content of your message to reply and, where relevant, to handle your project. Legal basis: pre-contractual steps or contract performance (art. 6(1)(b)) and legitimate interest in answering messages (art. 6(1)(f)).

4. Booking a call

After you submit the form, you are redirected to Cal.com to book a call, with your name, email and project notes pre-filled. Cal.com processes the data you provide there under its own privacy policy (cal.com/privacy). We receive the booking details to hold the call.

5. Admin accounts

The sign-in area is for authorised staff only. For these accounts we process email address, password (stored in hashed form) and session data to authenticate users and keep the admin area secure (art. 6(1)(b) and (f)).

6. Technical data

When you visit the site, our hosting providers process technical data such as IP address, browser type, requested pages and timestamps in server logs. This is needed to deliver the site and protect it against abuse (legitimate interest, art. 6(1)(f)). Lovable also provides us with aggregated visitor statistics (pages viewed, referring site, device type, approximate country based on the browser's time zone, and visit duration). They measure overall traffic, not individual people. Legal basis: our legitimate interest in understanding how the site is used (art. 6(1)(f) GDPR). We don't use advertising cookies. See the Cookie Policy.

7. Processors and recipients

We share data only with service providers that help us run the site and our business, under data processing agreements:

• Lovable (Lovable Labs Incorporated): website hosting, delivery, visitor statistics and backend services (Lovable Cloud).
• Supabase, through Lovable Cloud: database, authentication and file storage, including the videos shown on the site.
• Cal.com: call scheduling.
• Hostinger: email hosting for info@dreamjuiceai.com.
• Embedded video providers (YouTube or Vimeo): only if we embed one of their videos and you consent.

We may also disclose data where required by law or to public authorities. We do not sell personal data and do not use it for unrelated marketing.

8. Automated decisions

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. Enquiries may be flagged as priority based on the budget range you select, but every enquiry is reviewed by a person.

9. International transfers

Some providers are located, or process data, outside the European Economic Area. In these cases transfers rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or on Standard Contractual Clauses approved by the Commission, together with additional safeguards where needed.

10. How long we keep data

• Enquiries that do not become projects: deleted after 24 months.
• Client data: kept for the duration of the relationship and afterwards as required by Portuguese tax and accounting law (10 years for invoicing records).
• Server logs: kept according to our hosting providers' default retention periods.
• Admin accounts: kept while the account is active.

11. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and, where processing is based on consent, to withdraw consent at any time without affecting prior processing.

To exercise your rights, email info@dreamjuiceai.com. We will answer within one month, which may be extended by two further months for complex requests, in which case we will tell you.

12. Right to complain

You may lodge a complaint with the Portuguese supervisory authority, CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt), or with the authority of your EU country of residence.

13. Is providing data required?

Providing the data requested in the form is necessary for us to process your enquiry. Without it we cannot assess your project or contact you. Our services are not directed at people under 18, and we do not knowingly collect their data.

14. Security

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls limited to authorised staff, role-based permissions and reputable providers, to protect personal data against loss, misuse and unauthorised access.

15. Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page with its "Last updated" date. For significant changes we will inform affected clients by email where appropriate.