Privacy policy
Last updated:
Who we are
Aviteca is a brand of Órbita Tangente, Lda, NIF , . Órbita Tangente, Lda is the controller of the personal data described in this policy, except where stated otherwise. Contact: .
This website
This website uses no analytics, advertising trackers or cookies. The hosting server records technical data needed to deliver pages and protect the service, such as IP address, browser type and requested address. Legal basis: our legitimate interest in running a secure site (Article 6(1)(f) GDPR). These logs are kept in a file on our server, accessible only to the administrator.
Requests and trials
If you email us or request a trial, we process your message, your email and your organisation's name and type to answer you, create a demo account and send you access details. Without these data we cannot process the request. Legal basis: steps taken before a contract and our legitimate interest in answering requests (Article 6(1)(b) and (f) GDPR).
The applications
Under a subscription, your organisation decides what data it enters and is its controller. Órbita Tangente, Lda acts as processor on its behalf and on its instructions, under the subscription agreement (Article 28 GDPR). We process account data such as name, work email and profile to authenticate users, manage access and perform the contract. If you use an application through your organisation, please also refer to its privacy notice.
Who receives the data
We use service providers acting on our behalf: hosting, email and backup storage. The applications and their databases run on a virtual server in Portugal from dominios.pt (team.blue), which also hosts our email. Backups are encrypted and also stored with Cloudflare in an EU region, without access to the content. AI-assisted search in AeroKB uses Anthropic.
Artificial intelligence in AeroKB
Questions submitted to AI-assisted search in AeroKB are sent to the Anthropic API to generate the answer. Do not include personal data or confidential information in them. AI answers are guidance and must be checked against the official text.
Transfers outside the EEA
Anthropic may process data outside the European Economic Area, including in the United States. Cloudflare, Inc. is a United States company, although the encrypted backups are kept in an EU region. Where data is transferred, we rely on an adequacy decision or standard contractual clauses under Chapter V GDPR. You can request information on these safeguards at .
Retention
Server logs of this website: 90 days. Requests with no follow-up: 12 months after the last contact. Trial accounts and data: 30 days after the trial ends. Customer data in the applications: 30 days after the contract ends for export, then deleted within a further 30 days. Encrypted backups of the applications and databases: kept for up to 6 months and then deleted; if a backup is restored, deletions already made are repeated. Invoices and tax records: 10 years. Other account and contract data: for the term of the contract and any period required by law.
Automated decisions
We do not take decisions producing legal or similarly significant effects on you solely by automated means in the handling of this website, requests or accounts.
Your rights
Under the GDPR (Regulation (EU) 2016/679) you may request access, rectification or erasure of your data, restriction of processing and portability, and you may object to processing. Write to . For data your organisation controls, we will pass the request on to it. You may also complain to the Portuguese supervisory authority, the CNPD (www.cnpd.pt).