Privacy Policy

1. Who is responsible for your data

Luisa Baltazar Unipessoal Lda, a company registered in Portugal with tax identification number 514433523, decides how your personal data is used in the Get S#it Done Generator. For anything about your data, write to hi@luisabaltazar.com.

2. What we collect

• Account details: your email address, an encrypted form of your password, and the dates you signed up and last signed in.
• Your challenge content: the name you give your challenge, every answer you type, the ratings and selections you make, the text produced for you, and the finished Vision Board wording.
• Voice recordings: if you answer by speaking, the audio of that answer, for as long as it takes to turn it into text.
• Payment records: the fact and date of your payment, the amount, and a reference from our payment provider. Your card number never reaches us.
• Technical data: basic information your browser sends, and error reports, needed to keep the service working and secure.

3. Why we use it and on what basis

• To give you the service you paid for: your account, your saved progress, your results and your Vision Board. Basis: performance of our contract with you.
• To take payment and keep the records tax law requires. Basis: contract and legal obligation.
• To keep the service secure and reliable, fix faults and prevent abuse. Basis: our legitimate interest.
• To answer your messages and handle refund requests. Basis: contract.

We do not sell your data, we do not use it for advertising, and we do not use your answers to train anybody's models.

4. Voice and automatically generated text

When you answer by voice, your recording is sent to a speech to text provider through the Lovable AI gateway and comes back as written text. Only the text is stored with your answers. When your reflections, canvas summaries and Vision Board wording are produced, the relevant answers are sent through the same gateway to a text generation provider. These providers process the content in order to return a result for you.

5. Who else handles your data

We use a small number of trusted providers, each only for what it is needed for: our hosting and backend platform (accounts, database and file storage), our payment provider (checkout and payment records), our email sender (password resets and service emails), and the AI gateway described above (speech to text and text generation). They act on our instructions under contract, and we do not give them your data for their own purposes.

6. Transfers outside the European Union

Some of these providers, in particular the payment and AI providers, may process data in countries outside the European Economic Area, including the United States. Where that happens, the transfer relies on safeguards approved under the GDPR, such as the European Commission's standard contractual clauses. You can ask us for details.

7. How long we keep it

Your account, your challenge answers and your results are kept while your account exists, so you can come back and pick up where you left off. Voice recordings are not stored after transcription. If you ask us to delete your account, we remove it and your challenge content, and payment records are kept as long as tax and accounting law requires. Basic error and security logs are kept for a short period only.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it on to someone else. Write to hi@luisabaltazar.com and we will reply within one month. If you are unhappy with how we handled it, you can complain to the Portuguese data protection authority, the Comissao Nacional de Proteccao de Dados (CNPD), or to the authority where you live.

9. Cookies and similar technology

We only use what the site needs to work: a cookie that keeps you signed in and local storage that holds your session and your unsaved answers. There is no advertising or tracking cookie, and no third party analytics, so no cookie banner is required. If we ever add analytics, we will update this page and ask for your consent first.

10. Children

The Generator is for adults aged 18 or over, and we do not knowingly collect data from children.

11. Security

Your data is held on managed infrastructure with access rules that keep each account's content private to that account, passwords stored in encrypted form, and traffic protected in transit. Only the site administrator can see account level records, and only where needed to run the service.

12. Changes

If we change this policy we will update the date above and, for significant changes, tell you by email. See also our Terms & Conditions.