This policy explains how Saphio handles the personal data you share through this website. Saphio is based in Portugal and works with companies and professionals across Europe. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection legislation, including Law No. 58/2019. Where applicable, we also take into account relevant national data protection provisions in other countries in which we operate.
Who is responsible
The data controller is Paula Nogueira, operating as Saphio, based in Lisbon, Portugal. For any question about your data, contact us at hello@saphio.eu.
What we collect
On the waitlist contact page: your name, email address, whether you are a company, talent or other, your optional message and your privacy consent. These details are sent to hello@saphio.eu by email and are not saved in a database.
When you send your CV to the talent pool: your name, email address, area of expertise, optional LinkedIn link, your CV file (PDF) and the date of your consent. The file is kept in private storage and the other details in a private database, neither of them public and both accessible only to Saphio. A copy of the CV is also emailed to hello@saphio.eu. A CV can contain more than we ask for, so please include only what you are comfortable sharing and leave out sensitive details, such as health, religion or political opinions.
Emails you send us, and the copies of form submissions sent to hello@saphio.eu, are kept in that mailbox.
Why, and on what legal basis
We use waitlist contact messages only to reply about Saphio, based on your consent (Art. 6(1)(a) GDPR).
We use talent pool CVs only to contact you about roles that match your profile, based on your consent (Art. 6(1)(a) GDPR). We never share your CV with a company without asking you first.
If you ask to join the waitlist, to tell you about our launch and services. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the contact form.
Giving us your data is voluntary: without the details marked as required, we cannot reply to you or consider your CV. We do not use automated decision-making or profiling.
Providers we use
Our website, and the private database and file storage for talent pool CVs, are hosted on Lovable Cloud. Emails from the website forms are sent through Resend, connected via Lovable's email connector, so the content of those emails also passes through Lovable's systems. Our domain registration, DNS and the hello@saphio.eu mailbox are provided by Dynadot.
Resend processes the content of website form emails in the United States, and states that it transfers data under the European Commission's Standard Contractual Clauses. Where any other provider processes data outside the European Economic Area, the transfer must rely on a mechanism the GDPR allows. You can ask us at hello@saphio.eu for details.
We never sell your data, and we never share your CV or details with a company, employer or candidate without asking you first.
Cookies
This website does not set cookies and does not use analytics or visitor tracking tools. Your language choice is saved only in your own browser (local storage), so the site can remember it.
How long we keep it
We keep your data only as long as we need it for the purpose you gave it for, and until you ask us to delete it or withdraw your consent. We also set a review date 24 months after you submit a CV or a message. For CVs this date is stored with the record.
Deletion is done by hand, not automatically. We check stored data at least every six months and delete records that have passed their review date or that you asked us to delete, including the stored CV file and the copy in our mailbox. This means data can stay up to about six months past its review date.
Messages sent through the contact page, including waitlist requests, stay in our mailbox for as long as we need them to reply and follow up, and we review the mailbox on the same schedule.
To withdraw your consent or ask for deletion, email hello@saphio.eu.
Emails we send you
We use your email address only to reply to you and, if you asked to join the waitlist, to tell you about our launch and services. We do not currently send a newsletter, and we do not send marketing emails to people who have not agreed. You can ask us to stop writing to you at any time by emailing hello@saphio.eu.
Your rights
You can ask to access, correct, delete, restrict or port your data, object to its processing, and withdraw your consent at any time: just email hello@saphio.eu. Withdrawing consent does not affect processing that happened before.
You have the right to lodge a complaint with a competent data protection supervisory authority under Article 77 of the GDPR.
Changes
If we change this policy, we will update the date at the top of this page.