Last updated: September 18, 2026
ServiSync respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese law, in particular Law No. 58/2019 of 8 August. This policy explains who we are, what data we process, for what purposes, with whom we share it and what your rights are.
You may contact us at any time to ask questions or exercise your data protection rights.
This policy applies to two distinct contexts:
a) Website (servisync.com) — when you visit our website, fill in the contact form or contact us by e-mail, phone or WhatsApp, ServiSync acts as the controller of your data.
b) ServiSync platform — when your company uses our platform (web and mobile app), the data you enter (customers, employees, services, location, photos) is processed on your company’s instructions, with your company acting as controller and ServiSync as processor. With regard to that data, your company must inform the data subjects (customers and employees) as required by the GDPR.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, e-mail, phone and company (contact form) | Responding to enquiries, scheduling demos and managing commercial requests | Pre-contractual steps (Art. 6(1)(b) GDPR) |
| Browsing data and cookies (see Cookie Policy) | Website operation, security and usage analytics | Consent (Art. 6(1)(a)) and legitimate interest in website security (Art. 6(1)(f)) |
| Messages exchanged by e-mail, WhatsApp or support chat | Customer support and commercial relationship management | Performance of a contract or pre-contractual steps (Art. 6(1)(b)) |
| E-mail (newsletter, if you subscribe) | Sending content and news, only with consent | Consent (Art. 6(1)(a)) — you may withdraw consent at any time with one click on the unsubscribe link |
Commercial contact: if you fill in the contact form, we use your data to respond and, if there is interest, to develop the commercial proposal. We do not automatically add your e-mail to marketing lists. You will only receive marketing communications if you consent expressly.
When your company uses the platform, we process on its instruction:
AI features (Google Gemini): the platform may transcribe voice notes, generate summaries of interventions and suggest e-mails. This processing is done on your company’s instruction (basis: contract performance) and is subject to human review. Do not enter sensitive data (health, religion, judicial data, etc.) into free-text fields or voice notes — we recommend handling such data outside the platform.
We do not sell personal data. We only share data with service providers (processors) acting on our instruction, under contractual confidentiality and security guarantees, and with entities when required by law (for example, tax authorities).
| Provider | Purpose | Data |
|---|---|---|
| CookieYes (WebToffee) | Website cookie consent management | Consent preferences, IP |
| Cloudflare | CDN, protection and site analytics | Technical access data (anonymized IP; no cookies) |
| Google (Tag Manager, Analytics 4, reCAPTCHA, Fonts, Maps, Gemini, Firebase) | Traffic analytics (after consent), form protection, maps/routes, AI, push notifications | Usage data, location (with permission), processed content |
| MailerLite | Marketing e-mails (only with consent) and transactional e-mails | E-mail, name |
| Stripe | Online payments | Payment data (Stripe is the controller of card data) |
| Moloni / Moloni ON / InvoiceExpress / Jasmin | Invoicing | Billing data (tax ID, name, amounts) |
| Twilio / Vonage / BulkGate | SMS sending | Phone number, message content |
| Tawk.to | Support chat | Messages and contact data |
| Hosting provider | Website and platform hosting | Data stored in databases |
The processor list may be updated; any relevant change will be reflected in this policy.
Your data may be stored and processed within the European Union and, in some cases, outside it (notably in the United States, by providers such as Google, Cloudflare, Stripe, MailerLite or Tawk.to). Whenever this happens, we ensure the transfer mechanisms required by the GDPR, in particular:
You may obtain information about the mechanisms in place by contacting us.
| Data | Retention |
|---|---|
| Contact data and commercial leads | For the duration of the commercial relationship and up to 24 months after last contact (or until you request deletion) |
| Platform account data | During the subscription; after termination, deleted within 90 days |
| Cookie consent records | 12 months after last interaction |
| Invoicing and accounting data | 10 years (legal obligation) |
| Backups | Up to 6 months after deletion of the original data |
Under the GDPR, you have the right, at any time and free of charge, to:
To exercise these rights, contact us by e-mail ([email protected]). We respond within one month after confirming your identity.
You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) — Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt — or with the supervisory authority of your country.
Our website and services are not directed at children under 18 and we do not knowingly collect personal data from children. The platform is intended for companies and the processing of data of employees of legal working age. If you become aware that data from children has been provided to us, please contact us so we can delete it.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction: encryption in transit (HTTPS) and at rest, access control based on least privilege, authentication, access logging and regular backups.
We may update this Privacy Policy when necessary. Significant changes will be announced on the website and, where applicable, notified by e-mail. The date of the last update appears at the top of this page.
For any question regarding the processing of your personal data or the exercise of your rights: [email protected].