Privacy notice
1. Who we are
Repete, Lda., Rua Marquesa de Alorna 38, 3.º Esq., 1700-304 Lisboa, Portugal. NIPC and VAT PT518 751 570, registered at the Commercial Registry Office (Conservatória do Registo Comercial) under the single registration and legal person number 518 751 570. BlueForestCore is a brand of Repete, Lda.
This notice covers blueforestcore.com, the Agentic Commerce by BlueForestCore and Agentic Onboarding by BlueForestCore pages and the demo links we send. Privacy contact: info@repete.pt.
2. What we collect and why
- Demo request (your email, your website, what you want the assistant to do and, if you wish, your phone): to prepare and send your demo. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR).
- The visit to your site: our automated browser opens the public page you named, without logging in, to design your demo. Same basis.
- Contact form (your email and, if you wish, your name and a note; on the Agentic Onboarding page, also your company, who you onboard, what new people ask most and, if you wish, your phone): to reply to you. Same basis.
- The chat on the pages (what you write, the answers and your IP address): to answer you and to measure how the assistant is used. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
- What you tell the assistant about your business (on the Agentic Commerce and Agentic Onboarding pages, such as your type of business or what you need, typed or picked): to show you examples that fit and, if you send us your email and website, to brief our team (a copy stays in our notes). It is deleted with the chat. Never your email or phone. Legitimate interest (Art. 6(1)(f)).
- The analysis of your website (after you send us a request): an AI model in the EU reads the public pages of the website you give us, our screenshots of it, what you told the assistant and the text (never the file) of any PDF you attach, and searches the web (Google) about your business, never about you, to prepare a first draft for you and brief our team (a copy stays in our notes). The first-draft email goes out automatically, only after you confirm your address. We keep the analysis and that text for 31 days. Legitimate interest (Art. 6(1)(f)).
- Abuse protection (your IP address or a one-way hash of it, and request counters): to keep the service safe. Legitimate interest (Art. 6(1)(f)).
- Follow-up by our team (a lead record with your contact details, our notes, and our emails with you): to follow up your request. Legitimate interest (Art. 6(1)(f)).
Giving us your data is up to you, but without your email and your website we cannot prepare a demo. We do not sell your data or use it for advertising.
3. Artificial intelligence
On the Agentic Commerce and Agentic Onboarding pages and on demo links you are talking to an AI assistant, not a person (Article 50 of the EU AI Act, Regulation (EU) 2024/1689). Its answers can be wrong. No decision about you is made by automated means alone, and your conversations are not used to train AI models. Apart from the automatic confirmation of your demo request and the first-draft email, a person reviews every email before we send it to you.
4. Who processes it for us
- Amazon Web Services, in the EU (Frankfurt): hosting, storage and the AI models, which run only in EU regions.
- Google Workspace: email. Google may process email data outside the EU under the EU standard contractual clauses.
- Google Custom Search: the web searches about the business (never about the person) our AI agent runs. Google may process this data outside the EU under the EU standard contractual clauses.
- Telegram: our team's internal alerts. Telegram may process data outside the EU. Our automatic alerts carry only operational details, such as your website address and the demo name, and your email in masked form (for example a•••@example.com); never your full email, your name, your phone or what you wrote. When our team looks up your request in its internal tools, the answer can show your details in Telegram.
5. How long we keep it
- Your demo request, your demo and its link: 30 days after your last request.
- Screenshots of your page: 31 days.
- The chat, with your IP address: 90 days after the last message; a monthly job deletes it, so about 4 months at most.
- Your lead record, our notes and our emails with you: up to 24 months after our last contact.
- Our internal alerts: until our team deletes them, and always when you ask us to erase your data.
- Security counters: 2 days.
- Backups: deleted data can stay in them for up to 35 days more.
- Technical logs: no longer than needed for security, at most 12 months.
6. Storage on your device
We use no cookies. Your browser keeps only what the page needs to work, such as your language, your chat session, the demo company you chose, the demo bag and, on your own site, your preview code. There is no advertising or tracking, and visits are counted without cookies or identifiers. That is why we do not ask for consent.
7. Your rights
You can ask for access to your data, its correction, deletion, restriction or portability, and you can object to its use. Write to info@repete.pt; we answer within one month. You can also complain to the CNPD (www.cnpd.pt) or to the data protection authority of your own country.
8. Stop
Reply "stop" to any of our emails and we will not write to you again. The email that brings your demo, and our follow-ups on it, end with this line: "Reply stop and we will not write again."
Repete, Lda. · NIPC 518 751 570 · VAT PT518751570 · Rua Marquesa de Alorna 38, 3.º Esq., 1700-304 Lisboa · info@repete.pt · +351 93 110 8888 (WhatsApp) · BlueForestCore is a brand of Repete, Lda.