Privacy Policy

Intoma is a self-knowledge platform designed to help you understand the emotional and behavioural patterns behind your physical symptoms and daily experiences.

The data controller responsible for your personal data is:
Luís Nabeiro — Intoma
Contact: geral@intoma.app

When you use Intoma's services — including Intoma Root, Intoma Journal and Intoma Purpose — or submit a partnership application, we may collect:

• Your name and email address
• Your country
• Optional phone number (only if provided by you)
• Your language preference
• Responses submitted through our questionnaires and forms (via Tally)
• Links to profiles, channels, newsletters, communities or websites that you choose to provide
• Information you provide about your content, audience and interest in Intoma when applying for a partnership
• Payment information (processed securely by Stripe — we do not store card data)
• Marketing consent preference, if you choose to provide it

Your information may be used to:

• Provide the Intoma experience or report you request
• Deliver your report or related service communications by email or WhatsApp
• Process your payment securely via Stripe
• Review partnership applications and assess whether there may be a suitable fit
• Contact partnership applicants about their application or a potential collaboration
• Set up and manage an agreed partnership, including personalised codes, commissions and related communications
• Send marketing communications only where you have separately consented to receive them

If you apply to partner with Intoma, the information you submit is used to review your application, understand what you create and who you reach, and decide whether there may be a suitable basis for working together.

Where you provide links to public profiles, channels, newsletters, communities or websites, we may review those sources as part of the application assessment. If both sides choose to proceed, we may then use the relevant information to set up and manage the partnership.

Submitting an application does not guarantee acceptance. Partnership applications are reviewed manually. We do not add partnership applicants to marketing lists unless they separately choose to opt in to marketing communications.

We process your personal data on the following legal grounds under the GDPR:

• Contract performance — to deliver a service you have purchased or requested
• Steps at your request before entering into a contract — to review a partnership application and, where relevant, take steps towards a possible partnership
• Legitimate interest — to operate, protect and improve the platform and ensure service quality, where those interests are not overridden by your rights and freedoms
• Consent — for marketing communications, only where you have explicitly opted in

We retain personal data only for as long as necessary for the purposes described in this policy and to comply with legal obligations.

For partnership applications, we keep the information for as long as needed to assess the application and handle relevant follow-up. If a partnership is established, relevant information may be retained for the duration of the partnership and afterwards where required for legal, accounting or administrative purposes.

If you request deletion of your data, we will act without undue delay and, where applicable, within the time limits required by law, subject to any legal retention obligations.

We work with a limited number of trusted third-party services to operate Intoma:

• Tally — questionnaire and form platform (data submitted through our forms)
• Stripe — secure payment processing
• Google / Gmail — email delivery
• Netlify — website hosting

These providers process data only as needed to provide their services to Intoma and are subject to their own privacy terms and applicable data protection arrangements. We do not authorise them to use your personal data for unrelated purposes.

Under the GDPR, depending on the circumstances, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request restriction of processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent for marketing at any time, without affecting processing carried out before withdrawal
• Lodge a complaint with the competent data protection authority

To exercise any of these rights, contact us at geral@intoma.app.

Our website uses minimal cookies — only those strictly necessary for the site to function. We do not use tracking, advertising, or analytics cookies at this time.

We take the security of your data seriously. All data is transmitted over encrypted connections (HTTPS). Payment data is handled exclusively by Stripe and never stored on our systems.

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised date. We encourage you to review it periodically.