Privacy Policy

1. Controller

The controller for customers' account and billing data is N.0 Tecnologia, Lda., a private limited company with registered office at Rua de Fundões, n.º 151, 3700-121 São João da Madeira, Portugal, registered at the Commercial Registry under the single registration and tax number 518149684, share capital €500.00. Privacy contact: estabulo@n0.pt. No data protection officer has been appointed as the legal thresholds are not met.

For customers in Brazil, the controller is N0 Tecnologia Ltda., CNPJ 36.757.176/0001-30, with registered office at Av. Antônio Lira, 182, sala 102, Tambaú, João Pessoa – PB, CEP 58039-050, Brazil, and the same contact serves as the channel of the officer required by the LGPD.

2. Two roles: controller and processor

For the data each stable enters into the platform (owners, staff, students, horses, care, payments), the stable is the controller and N.0 is the processor: it handles that data only on the stable's instructions and to provide the service. The processing obligations of Article 28 GDPR and Article 39 LGPD are set out in the data processing agreement, which forms part of these terms.

3. What data we process and why

Account data (name, e-mail, phone, language): to provide the service, on the basis of the contract. Billing data: to charge and meet tax obligations, on the basis of the contract and the law. Operational data entered by the stable: on the stable's behalf, as processor. Technical data (access logs, IP address, device): for security and audit, on the basis of legitimate interest. Audio, text and photos sent to the assistant: to carry out the request, deleted after processing and never used to train models. We do not sell data or build advertising profiles.

4. Where and with whom

Data is hosted in the European Union. We use only strictly necessary processors: EU hosting; e-mail delivery (Microsoft 365, EU); payment processing (Stripe); Telegram messaging (Telegram Bot API, when the stable enables it); and, for the assistant, a European AI model provider (Mistral AI, France), with on-premises AI available on request. The current list is available on request. We do not transfer data outside the EU without adequate safeguards; for Brazilian customers, data is hosted in the EU under Article 33 LGPD.

5. For how long

For the duration of the subscription and 30 days after cancellation, for export. Then deleted, except billing records (10 years in Portugal, 5 years in Brazil) and security logs (12 months). Assistant audio is deleted after transcription.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and to withdraw consent where processing relies on it. The app includes data export and deletion. To exercise your rights write to estabulo@n0.pt; we answer within 30 days. You may complain to the Portuguese Data Protection Authority (www.cnpd.pt) or, in Brazil, to the National Data Protection Authority (www.gov.br/anpd). Owners and staff of a stable should first contact the stable, which is the controller of their data.

7. Security and incidents

Encryption in transit, per-customer isolation at database level, optional two-factor authentication, audit log and daily backups. In the event of a personal data breach we notify the affected stable without undue delay and the supervisory authority within 72 hours where the law requires.

8. Cookies

We use only strictly necessary cookies (session and preferences). No advertising or third-party tracking cookies, so no consent banner is required.