Privacy policy

Personal data collected through webtogo.studio is processed by:

• WebtoGO, operated by Hugo Alberto Soares Curto
• Tax ID: PT266909213
• Address: R. Conselheiro Luís de Magalhães 31B, 3800-137 Aveiro, Portugal
• Email: ola@webtogo.studio

We only collect data you voluntarily submit through the contact form:

• Name
• Email and/or phone
• Project type
• Approximate budget
• Project description

We also collect aggregated technical data through analytics and marketing cookies, subject to your consent. See Cookie Policy for details.

• To respond to your enquiry and prepare a potential proposal. Legal basis: pre-contractual steps (Article 6(1)(b) GDPR).
• To send the form submission by email to ola@webtogo.studio. Same legal basis.
• To measure and optimise site and campaign performance. Legal basis: consent (Article 6(1)(a) GDPR), managed through the cookie banner.

We do not use your data for newsletters, commercial profiling, or third-party marketing.

• Contact form messages: up to 24 months after last contact, or until you request deletion.
• Data related to contracted projects: for the duration of the contract and for statutory tax retention periods (10 years under Portuguese law).
• Cookie-related data: as detailed in the Cookie Policy.

We only use processors strictly necessary to run the site:

Some of these entities may transfer data outside the European Economic Area. Transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

In Webtogo Studio is our clients' private portal, at in.webtogo.studio. If you have a Google Business Profile, you can connect your Google account there to read your reviews and reply to them without leaving the portal. This connection is optional, always starts with an action of yours, and the portal works without it.

When you connect the account, In Webtogo Studio accesses the following data from your Google account:

• The email address of the Google account that authorises the connection. It is used to show you, in settings, which account is connected.
• The locations of your Google Business Profile that this account manages, and only those you pick on the selection screen: location name, address, and the location identifiers on Google.
• The reviews of those locations: star rating, review text, dates, the reviewer's name and photo as published by Google, and any reply that already exists.

Authorisation is requested with three access scopes, as Google calls them: openid and email, so we can identify the connected account, and business.manage, to read locations and reviews and to publish replies. We do not request and do not have access to Gmail, Drive, contacts, calendar, or any other service of your Google account.

We use this data for one purpose only: to run the reviews area inside the private portal, at your request.

Legal basis: performance of the service contract (Article 6(1)(b) GDPR).

• To show you the reviews of the locations you selected, with the rating, the text and the date.
• To publish, edit and delete replies to reviews on your Google Business Profile. Every reply is written by you and published by an action of yours, never automatically.

We use this data for nothing else. We do not use it for advertising or ad targeting. We do not sell it. We do not share it with third parties, except the hosting processors listed in the previous section, which store it on our behalf and cannot use it for their own purposes. We do not use it, and do not pass it to anyone, to train artificial intelligence models.

When you authorise the connection, Google gives us a refresh token, a credential that lets the portal keep talking to Google on your behalf without asking for your authorisation again on every use.

• The refresh token is stored encrypted, with the AES-256-GCM algorithm, in the portal database. It never reaches your browser, it is never written to our system logs, and it is not visible in our administration area.
• Locations and reviews are stored in a cache, meaning a copy of the Google data on our side, so the portal can show them quickly without repeating calls to Google on every visit. They sit in the portal database, on Supabase, and the portal is served by Vercel.
• The copy is refreshed when you open the reviews area and through periodic synchronisations. A review deleted on Google is deleted from our copy on the next complete synchronisation.

We keep this data for as long as the Google account stays connected to the portal. It stops existing on our side when you remove a location or disconnect the account, as described in the next section, and when your organisation stops having access to the portal, at which point we delete the connected account and the synchronised reviews.

You can withdraw access at any time, through three independent routes.

• In the In Webtogo Studio settings, in the connected accounts section. Removing a location deletes the reviews we synchronised for that location and keeps the others. Removing the account first revokes the authorisation with Google and only then deletes, on our side, the connected account, the locations and all synchronised reviews.
• In your Google account, at myaccount.google.com/permissions, where you can withdraw the access granted to In Webtogo Studio. Done this way, we immediately stop being able to talk to Google on your behalf.
• By email to ola@webtogo.studio, requesting deletion. We delete the connected account, the locations and the synchronised reviews, and confirm the deletion to you in writing.

Withdrawing access deletes nothing on your Google Business Profile. Reviews and replies already published continue to exist on Google, which is where they live.

In Webtogo Studio's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Google's policy is at developers.google.com/terms/api-services-user-data-policy, and the Limited Use section at developers.google.com/terms/api-services-user-data-policy#limited-use.

Under the GDPR, you have the right to:

• Access your data
• Rectify incorrect or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time, without affecting the lawfulness of previous processing

To exercise any of these rights, email ola@webtogo.studio. We respond within 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at cnpd.pt, or with your local supervisory authority.

We use HTTPS across the site, access control on email inboxes, and cloud infrastructure with ISO 27001 and SOC 2 certifications. That said, no internet transmission or storage system is 100% secure.

The site is not intended for users under 16, and we do not knowingly collect data from minors. If you believe a minor has submitted data, let us know so we can delete it.

Material changes are posted on this page with an updated date at the top. If changes affect data already collected, we provide reasonable prior notice.

For any question about this policy or how we handle your data, write to ola@webtogo.studio.