Privacy Policy
Last updated:
This Privacy Policy explains how ARISE AI & Consulting (“ARISE”, “we”) collects, uses and protects personal data when you use ariseaic.com.
Data controller
ARISE AI & Consulting is the data controller. For any privacy question, contact us at ariseaiconsulting@gmail.com.
What data we collect
- Forms (demo, contact, proposal): name, email and, depending on the form, phone, hotel name, number of rooms, city, modules of interest, preferred language and message.
- Assistant (chat): the messages you write and, if you choose to leave your contact, your name, email and phone, plus a summary of the conversation.
- Visit source: the page where you submitted the form and any campaign (UTM) parameters in the address, kept only for the browser session.
- Visit statistics: only if you accept, through Cloudflare Web Analytics (aggregated data, no personal identification).
- IP address: processed transiently to limit abuse (rate limiting) and protect forms from spam.
Why we collect it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to contact, demo or proposal requests | Consent (Art. 6(1)(a)) and pre-contractual steps (Art. 6(1)(b)) |
| Replying in the assistant | Legitimate interest in answering people who contact us (Art. 6(1)(f)) |
| Visit statistics | Consent (Art. 6(1)(a)) |
| Security and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for advertising or sell it to third parties.
Who processes data on our behalf
We use the following processors, with the safeguards required by the GDPR:
- Cloudflare — website hosting, spam protection (Turnstile) and statistics (Web Analytics).
- Make.com — receives form and assistant requests and routes them.
- Airtable — record of received requests.
- Email service — internal notification of new requests.
- Cal.com — demo scheduling, only when you pick a date.
- Assistant AI provider — Google (Gemini) or Anthropic (Claude), depending on configuration, to generate chat replies.
Some of these providers may process data outside the European Economic Area. In those cases, transfers rely on standard contractual clauses approved by the European Commission or another appropriate safeguard.
How long we keep it
We keep requests for as long as needed to respond and for a reasonable sales follow-up period, up to a maximum of 24 months without contact, after which we delete them. Assistant conversations that do not result in a contact are not stored by ARISE.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time without affecting processing already carried out. To exercise these rights, write to ariseaiconsulting@gmail.com. You may also lodge a complaint with the Portuguese data protection authority (CNPD).
Cookies
See our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The “Last updated” date always shows the current version.