Nikufra Legal
Privacy Notice
How Nikufra.ai collects, uses, shares, protects, and retains personal data across the website and business services.
Last updated: August 25, 2026
1. Controller and contact
For the public website, commercial communications, demo requests, business administration, and our own operational records, Pleasant Gadget, Lda is the controller of personal data. For customer production or operational data processed under a customer agreement, Nikufra may act as a processor on behalf of the customer.
| Item | Information |
|---|---|
| Controller | Pleasant Gadget, Lda |
| Brand | Nikufra.ai |
| Address | Rua João de Deus, N.º 629, 3º, Esq.º, 4100-462 Porto, Portugal |
| General contact | hello@nikufra.ai |
| Privacy contact | hello@nikufra.ai |
| Supervisory authority | Comissão Nacional de Proteção de Dados (CNPD), Portugal |
2. Personal data we collect
We collect limited personal data depending on how you interact with us. We try to keep this data business-relevant and proportionate.
| Category | Examples |
|---|---|
| Business contact data | Name, business email, phone number, company, role, country, and communication preferences. |
| Commercial communications | Messages, demo requests, meeting notes, questions, proposal context, and correspondence. |
| Website technical data | IP-derived technical signals, browser, device type, operating system, referrer, pages visited, timestamps, and security logs. |
| Analytics and performance data | Aggregated Vercel Web Analytics events and anonymous Speed Insights data, such as page views, routes, referrers, approximate country, browser, device, network speed, and Core Web Vitals. |
| Scheduling data | If you use our embedded scheduling page or a scheduling link, Calendly may process your name, email, meeting details, time zone, device information, and scheduling metadata according to its own notices. |
| Customer service data | Business contacts, support requests, access records, configuration notes, logs, and data needed to deliver or support contracted services. |
| Operational or system data | Where authorized by a customer, factory or system data may include operator IDs, shifts, order references, approval logs, maintenance records, quality records, or similar data that can sometimes relate to individuals. |
3. Sources of personal data
- You, when you contact us, request a demo, send an email, or attend a meeting.
- Your company or employer, when they include you in a project, contract, support request, or implementation.
- Website and hosting systems, when you browse the site or interact with its pages.
- Service providers, such as email, hosting, analytics, and scheduling providers.
- Customer systems, only where a customer authorizes Nikufra to access data for a contracted service.
4. How we use personal data
- To respond to enquiries, demo requests, and business communications.
- To evaluate whether Nikufra can help with a manufacturing or data problem.
- To prepare proposals, contracts, statements of work, invoices, and customer records.
- To deliver, maintain, secure, and support contracted services.
- To operate, troubleshoot, secure, and improve the website.
- To understand aggregate website usage through privacy-friendly analytics.
- To schedule meetings when you choose to use our embedded scheduling page or a scheduling link.
- To comply with legal, tax, accounting, security, and compliance obligations.
5. Legal bases
| Purpose | Legal basis |
|---|---|
| Responding to demo requests and pre-contractual discussions | Pre-contractual steps and legitimate interests in B2B communication. |
| Providing contracted services | Performance of a contract or legitimate interests, depending on the relationship and data involved. |
| Website security and technical logs | Legitimate interests in protecting the website, infrastructure, and users. |
| Privacy-friendly website analytics | Legitimate interests in understanding aggregate site performance, unless consent is required by applicable law or future tooling. |
| Meeting scheduling | Pre-contractual steps, legitimate interests, or your consent where required. |
| Optional Calendly cookies | Consent managed through Calendly's controls within the embedded scheduling page. |
| Legal, accounting, and tax records | Legal obligation. |
| Optional marketing communications | Consent or legitimate interests where permitted. We do not currently operate a newsletter. |
6. Vercel Web Analytics and Speed Insights
We use Vercel Web Analytics to understand aggregate use of the website. Vercel states that Web Analytics does not use third-party cookies and that visitors are identified by a hash created from the incoming request, with the visitor session discarded after 24 hours.
Data points may include event timestamp, URL, dynamic path, referrer, filtered query parameters, approximate geolocation, device operating system and version, browser and version, device type, and analytics script version. We do not use Vercel Web Analytics to identify individual visitors or track them across unrelated websites.
We also use Vercel Speed Insights to measure real-world website performance. Vercel states that these data points are anonymous and are not tied to an individual visitor or IP address. They may include route, URL, network speed, browser, device type, operating system, country, Web Vital value and attribution, SDK version, and event time.
8. International transfers
Some providers may process data outside Portugal or the European Economic Area. Where required, we rely on appropriate transfer mechanisms such as adequacy decisions, Standard Contractual Clauses, or other lawful safeguards under applicable data protection law.
9. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Notice, unless a longer period is required by law, contract, tax, accounting, security, or dispute-resolution needs.
| Data | Indicative retention |
|---|---|
| Demo and enquiry records | Up to 24 months after the last meaningful business interaction. |
| Customer contract and billing records | For the legal, accounting, and tax retention periods that apply. |
| Website security logs | Usually short-term, unless needed for security investigation. |
| Vercel Analytics and Speed Insights data | Handled according to Vercel's retention and aggregation models for those services. |
| Calendly scheduling data | Handled according to Calendly's retention settings and applicable legal requirements. |
| Support and project records | For the customer relationship and a reasonable period afterwards. |
10. Your rights
Depending on the circumstances and applicable law, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, and lodge a complaint with a supervisory authority.
To exercise rights, contact us at hello@nikufra.ai. If we process your data on behalf of a customer, we may need to refer your request to that customer as the controller.
11. Automated decision-making
We do not use website data to make decisions that produce legal or similarly significant effects about individuals through solely automated processing. Nikufra's industrial AI tools are designed to support human review and governed decision-making in customer environments.
12. Children
The website and services are intended for business users and are not directed to children.
13. Changes to this Notice
We may update this Privacy Notice from time to time. The latest version will be published on this page with an updated date.