Privacy Policy
Version 1.1 – Effective 19 March 2026
1. Data Controller
Imigrei, based in Portugal, is the data controller responsible for the processing of personal data within the Prep A.I. M.A. (AI Migration Assistant) platform. For any privacy-related inquiries, users may contact: marcelo@imigrei.pt.
2. Personal Data Collected
We may collect and process the following categories of personal data: identity documents (such as passport or residence permit), uploaded files and extracted text, email address, payment-related metadata, and technical logs including IP address, device type, and timestamps.
3. Legal Basis for Processing
Personal data is processed based on explicit user consent under Article 6(1)(a) of the GDPR. Where sensitive personal data is involved, processing is based on Article 9(2)(a) – explicit consent for special categories of personal data.
4. Purpose of Processing
Personal data is processed solely to analyze uploaded documents, generate summaries and digital bundles, provide the requested services, ensure system security, and prevent fraud or misuse.
5. Data Retention
Users may select a data retention period (48 hours or 7 days). After the selected period expires, uploaded documents, generated bundles, and associated temporary data are permanently deleted from our systems. No long-term archival of documents is maintained. Important: if you download the PDF pass or PDF summary we provide, your uploaded documents, generated materials stored on our side, and related client data are permanently deleted at that point as part of the service workflow—this happens when the download completes and does not wait for the chosen retention period to end (unless the law requires us to retain certain records).
6. Data Storage and Security
Personal data is stored in secure cloud infrastructure with appropriate technical and organizational security measures. Where possible, processing is performed within the European Union. Automated AI systems may be used to analyze documents.
7. Third-Party Processors
We may use trusted third-party service providers, including cloud storage providers, payment processors, and AI processing services. All third parties are contractually bound to comply with applicable data protection laws.
8. User Rights
Under the GDPR, users have the right to access their personal data, request correction or deletion, withdraw consent at any time, and lodge a complaint with the Portuguese Data Protection Authority (CNPD).
9. Data Deletion Requests
Users may request immediate deletion of their data before the selected retention period expires. Upon verification, all associated documents and generated outputs will be permanently removed from our systems.
10. Payments and refunds (personal data context)
Payment processing is handled by our payment providers; we may receive limited metadata (e.g. transaction status) as described above. All fees for the service are non-refundable once paid, as set out in our Terms and Conditions—this does not limit your statutory rights where applicable law requires a different outcome.
11. Erasure after PDF download
Downloading the PDF pass or PDF summary triggers permanent deletion of your uploaded documents, generated outputs we hold, and associated personal data tied to that session, as soon as the download is completed on our systems. You should keep your own copy of the PDF if you need it later; we cannot recover data after this erasure.