Privacy Policy

This policy explains what personal data betomoresca.com (the "site") collects, why, and what you can do about it. The short version: I collect only what I need to reply to you and to hold calls you book, I don't use tracking or advertising cookies, and I never sell your data.

Who is responsible

The site is run by Beto Moresca through Studio 1310 LLC, a Wyoming limited liability company ("I", "me"). Studio 1310 LLC is the controller of the personal data described here. For anything about this policy or your data, email hello@betomoresca.com.

What I collect and why

• Booking a call. Your name, email address, the time you pick, your time zone and anything you write in the notes. I use them to schedule the call, send you the calendar invitation with the video link, and prepare for our conversation. Legal basis: taking steps at your request before a possible contract (GDPR Art. 6(1)(b)).
• Emails you send me. Whatever you choose to include, used to reply to you. Legal basis: my legitimate interest in answering messages (Art. 6(1)(f)).
• Event invitations. If you RSVP on an event page I sent you, your name, the names of any guests and your note, used to organise the event. Legal basis: your request (Art. 6(1)(b)).
• Technical data. My hosting provider automatically processes your IP address, browser type and the pages requested, to deliver the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f)).

The site uses no analytics, advertising or tracking cookies. It stores two small preferences in your browser's local storage: your light/dark theme choice, and whether you have unlocked an event page. They never leave your device.

Google user data

The site connects to my own Google account, through the Google Calendar API, for one purpose: to create a calendar event that generates the Google Meet link for each call booked on the site. It does not ask you to sign in with Google and never accesses your Google account.

The data it handles in my Google Calendar is limited to the event it creates for your call: the call's title, time and your name and email in its description. That data is used only to provide the video link for your call. It is not sold, not used for advertising, not used to train AI models, and not shared with anyone except as needed to host the call. The site's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes your data for me

I use a small number of service providers, each bound to protect your data:

• Vercel, which hosts the site.
• Fastmail, for email and my calendar, where your booking and the invitation live.
• Google, to generate the Google Meet link and host the video call.
• Supabase, to store event RSVPs.

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.

How long I keep it

• Bookings and emails: up to 2 years after our last contact, unless we start working together.
• If we work together, project records are kept for as long as the law requires for business and tax records, usually up to 7 years.
• Event RSVPs: deleted within 3 months after the event.
• Hosting logs: kept by Vercel for a short period, typically days.

Your rights

You can ask me to access, correct, delete or export your personal data, to restrict or object to how I use it, or to withdraw consent where I rely on it. Email hello@betomoresca.com and I'll respond within 30 days.

If you're in the EU and unhappy with how I handle your data, you can complain to your local data protection authority. In Portugal, that is the Comissão Nacional de Proteção de Dados (cnpd.pt).

Security

Data is sent over encrypted connections, access to my accounts is protected by strong passwords and two-factor authentication, and I keep only what I need.

Changes

If this policy changes, the new version will be posted here with a new date. Significant changes that affect how your existing data is used will be communicated by email where I have it.