Privacy

Controller

Vesperium Labs, Lda (NIPC 519597400), based in Sintra, Portugal, is the controller of the data described on this page. Privacy questions can be sent to hello@vesperiumlabs.com.

Contacts and meetings

When someone writes to us or books a conversation, we process their name, email address, company and whatever they choose to share. We use this data to reply and to prepare the conversation, on the basis of steps taken at their request before a contract or of our legitimate interest in answering people who contact us.

Clients

We process the data needed to deliver contracted work, on the basis of the contract. Each project's contract governs confidentiality and, where applicable, any processing we carry out on the client's behalf.

Business prospecting

We identify companies from public sources: the companies' own websites, published registers and rankings, public open data such as dados.gov.pt, job advertisements, and professional profiles consulted by hand. For the companies we decide to contact, we process the name, role and professional contact details of the person responsible for the area concerned.

The legal basis is our legitimate interest in presenting our services to companies for which they may be relevant. We contact these companies by individually written LinkedIn message, by letter, by telephone to the reception, or through the company's general email address. We do not buy contact lists, do not collect data automatically, and do not use automated sending tools.

Anyone may object to this processing at any time by replying to our message or writing to hello@vesperiumlabs.com. Once we receive an objection, we stop contacting them and keep only the minimum information needed never to contact that person or company again.

Recipients and international transfers

Data is processed by service providers acting on our behalf: email and calendar (Google), website hosting (Vercel), our client-management system (Convex, with sign-in by Clerk), and artificial-intelligence providers used for internal analysis of company information (Anthropic). Some of these providers are based in the United States; those transfers rely on appropriate safeguards, namely standard contractual clauses or the EU-US Data Privacy Framework. We do not sell personal data.

Retention

We keep prospecting data until the person objects or, at most, for 24 months after the last contact, and contact and meeting data for 24 months after the last contact. Client data is kept for the duration of the contract and for the applicable legal periods, namely ten years for invoicing records.

Your rights

You have the right to access, rectify or erase your data, to restrict or object to its processing, and to request its portability. Objections to business prospecting are always honoured. Requests can be sent to hello@vesperiumlabs.com. You may also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

This website

This website does not use analytics or advertising cookies. Our hosting provider keeps technical logs, such as IP addresses, for security purposes.