Privacy policy

Last updated: 2026-10-11. This is a translation. The Portuguese text prevails.

1. Who we are

Repete, Lda., Lisbon, Portugal. NIPC and VAT PT518 751 570. This policy covers www.repete.pt, the AI assistant on this site and the reuse app at app.repete.pt. For blueforestcore.com, the BlueForestCore policy applies. Privacy contact, info@repete.pt.

2. What we collect and why

• Contact form (your email and, if you wish, your name, the topic and your message): to reply to you. Legal basis: steps you ask for before a contract, or our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
• The conversation with the assistant (what you write, the answers and your IP address): to answer you and to measure how the assistant is used. Legal basis: our legitimate interest (Art. 6(1)(f)).
• A contact request made in the assistant (a summary of your request and the contact details you choose to give us): emailed to our team, only after you agree, so that we can reply. Same basis as the contact form.
• The reuse app (your username, your email, the boxes you borrow and return, your points and, where there is one, the deposit): to lend and receive boxes, send return reminders and award points. Legal basis: performance of the app contract (Art. 6(1)(b)). Payments for boxes not returned are processed by Stripe.
• Abuse protection (your IP address or a one-way hash of it, and request counters): to keep the service safe. Legitimate interest (Art. 6(1)(f)).

We do not sell your data or use it for advertising.

3. Artificial intelligence

In this site's assistant you are talking to an AI assistant, not a person (Article 50 of the EU AI Act, Regulation (EU) 2024/1689). Its answers can be wrong. No decision about you is made by automated means alone, and your conversations are not used to train AI models.

4. Who processes it for us

• Amazon Web Services, in the EU (Frankfurt), hosting, storage, the reuse app's emails and the AI models, which run only in EU regions.
• Google Workspace, email. Google may process email data outside the EU under the EU standard contractual clauses.
• Stripe, payments in the reuse app. Stripe may process data outside the EU under the EU standard contractual clauses.

5. How long we keep it

• The conversation with the assistant, with your IP address, 90 days after the last message. A monthly job deletes it, so about 4 months at most.
• Contact messages and our emails with you, up to 24 months after our last contact.
• Reuse app data, while your account is active and, after that, only as long as the law requires.
• Security counters, 2 days.
• Backups, deleted data can stay in them for up to 35 days more.
• Technical logs, no longer than needed for security, at most 12 months. Conversations with the assistant appear in the logs only as character counts, never the text.

6. Storage on your device

This site uses no cookies. Your browser keeps only what the page needs to work, such as your conversation session with the assistant. There is no advertising or tracking. That is why we do not ask for consent.

7. Your rights

You can ask for access to your data, its correction, deletion, restriction or portability, and you can object to its use. Write to info@repete.pt. We answer within one month. You can also complain to the CNPD (www.cnpd.pt) or to the data protection authority of your own country.