Last updated: July 28, 2026

Privacy Policy

1. Who we are

Xtrustify is a brand of Ciberai Unipessoal Lda, Portuguese tax ID (NIF) 517433060, registered address Rua Professor Rui Luís Gomes, 29, Portugal. Depending on your location, this processing may be subject to the EU General Data Protection Regulation (GDPR) and/or the UAE Personal Data Protection Law (PDPL). Contact: ruiprates@xtrustify.com

2. What data we collect

• Data you voluntarily provide in the free assessment (risk exposure questionnaire answers).

• Contact details you provide when requesting a meeting: name, company name, email, and phone number.

• Technical browsing data collected anonymously or pseudonymously (see Section 6 — Cookies).

3. How we use your data

• To calculate and present your risk exposure assessment result.

• To respond to your meeting or contact request.

• To prepare commercial proposals, when requested.

• To improve site performance (aggregated, anonymous data only).

We do not sell or share your data with third parties for marketing purposes.

4. Legal basis for processing

Processing is based on your consent (by completing the assessment or contact form) and, where applicable, on the necessity to take pre-contractual steps at your request.

5. How long we keep your data

Lead data that does not progress into a business relationship is kept for a maximum of 24 months, after which it is deleted or anonymized. Data linked to active clients is kept for the period legally required for accounting and tax purposes.

6. Cookies

This site uses strictly necessary cookies for its operation and, with your consent, analytics cookies to understand site usage. You can manage your preferences at any time via the "Cookie preferences" button in the footer. We do not use advertising or third-party tracking cookies.

7. Sharing data with third parties

We use the following service providers to operate the site, who process data on our behalf under appropriate contractual safeguards:

• Supabase (form and assessment data storage)

• Resend (automated email delivery)

None of these providers is authorized to use your data for their own purposes.

8. Your rights

Depending on applicable law, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise any of these rights, contact ruiprates@xtrustify.com. EU residents also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

9. Security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including encryption in transit and access control.

10. Changes to this policy

This policy may be updated periodically. The last update date is shown at the top of this page.

11. Contact

For any question about this policy or your data, contact: ruiprates@xtrustify.com