Privacy Policy

1. Who we are

Super Cool Devs is an independent software project operated by an individual developer based in Lisbon, Portugal. We build and maintain free, AI-powered productivity tools for small businesses and entrepreneurs.

Website: www.supercooldevs.pt
Contact: support@supercooldevs.com

As we are based in Portugal and operating within the European Union, this policy is written in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

2. What information we collect

We only collect information that is necessary for the tools you use.

2.1 Information you provide directly

• Name and email address when you submit a tool request or contact us
• Business type and description of your pain point when using the tool request form
• Any client or business data you manually enter into our tools (such as client names, appointment details, service records, or financial figures)

2.2 Information collected automatically

• Basic usage data such as which pages you visit and which tools you use (collected anonymously where possible)
• Technical data such as your browser type and approximate location (country/city level), used only for error diagnosis and service improvement

2.3 Social media data (when you connect an account)

Some of our tools allow you to connect your social media accounts to display analytics. When you do this:

3. How we use your information

We use the information we collect exclusively for the following purposes:

• To operate and deliver the tools you use
• To display your social media analytics within the dashboard you have connected
• To send appointment reminders or notifications that you have configured within our tools
• To respond to your tool requests or support enquiries
• To improve our tools based on aggregated, anonymised usage patterns
• To comply with legal obligations that apply to us

We do not use your data for advertising, profiling, or any automated decision-making that produces legal or similarly significant effects on you.

4. Legal basis for processing (GDPR)

Under the GDPR, we process your personal data on the following legal bases:

• Performance of a contract: Processing necessary to deliver the tools and services you have requested
• Consent: When you authorise us to access your social media accounts; you may withdraw this consent at any time
• Legitimate interests: For basic analytics to improve our tools, where this does not override your rights and freedoms
• Legal obligation: Where we are required to retain or disclose data by applicable law

5. Data we do not collect

We want to be explicit about what we do not do:

• We do not sell, rent, or trade your personal data to any third party
• We do not use your data for advertising purposes, our own or anyone else's
• We do not access the private messages of any connected social media account
• We do not collect payment card information (our tools are free)
• We do not collect sensitive personal data (health, religion, political views, etc.) unless you voluntarily enter it into a tool's free-text fields
• We do not track you across other websites

6. How we share your information

We do not sell your data. We may share limited data only in the following circumstances:

• Service providers: We use third-party infrastructure to host and operate our tools (including Vercel for hosting and Supabase for database services). These providers process data on our behalf under contractual obligations consistent with this policy.
• Legal requirements: We may disclose data if required by law, court order, or applicable regulation.
• Business transfer: In the unlikely event that the project is acquired or transferred, users will be notified before their data is subject to a different privacy policy.

7. Data storage and retention

Your data is stored on servers located within the European Economic Area (EEA) or in countries that the European Commission has recognised as providing adequate data protection.

We retain your data for as long as necessary to provide the services you use, or as required by applicable law. Specifically:

• Social media tokens and cached analytics data: retained while your account is active, deleted within 30 days of disconnecting your account
• Tool request submissions and contact enquiries: retained for up to 12 months
• Data you enter into our tools (client records, appointments, etc.): retained while your account is active; you may delete this data at any time from within the tool

8. Your rights under GDPR

As a resident of the European Union or European Economic Area, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request that we correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”): You may request deletion of your personal data, subject to legal retention requirements
• Right to restriction: You may request that we limit how we process your data in certain circumstances
• Right to data portability: You may request your data in a structured, machine-readable format
• Right to object: You may object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at support@supercooldevs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Cookies and tracking

Our main website uses minimal cookies necessary for the site to function (session management and preference storage). We do not use advertising cookies or third-party tracking pixels.

Some of our tools may use cookies to maintain your login session. These are strictly necessary cookies and do not require your consent under applicable law.

Where we use any optional analytics (to understand how tools are used), we will request your consent and provide a clear opt-out mechanism.

10. Children's privacy

Our tools are designed for business owners and entrepreneurs and are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Third-party links

Our website and tools may contain links to third-party services (such as Meta and Google for social account connection). Once you leave our platform, this privacy policy no longer applies. We encourage you to review the privacy policies of any third-party service you use.

12. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure credential storage, and access controls.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

13. Changes to this policy

We may update this privacy policy from time to time as our tools evolve. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or via an in-tool notice.

We encourage you to review this page periodically. Your continued use of our tools after changes are posted constitutes your acceptance of the revised policy.