Privacy Policy

Last Updated: September 2026

At Sachii ("we", "our", "us"), we handle your property with care, and we treat your personal data the exact same way. We operate in full compliance with the EU General Data Protection Regulation (GDPR) (EU 2016/679).

This Privacy Policy explains how we handle your personal information when you visit our website (sachiilisbon.com), book an intro call, or hire us to look after your home in Lisbon.

1. Who Responsible for Your Data (Data Controller)

Sachii
Lisbon, Portugal
Direct Contact: [email protected]

2. What Data We Collect & Why

We only collect data that is strictly necessary to schedule calls and care for your home. We do not run advertising scripts, tracking cookies, or automated profiling.

A. Introductory Calls (Cal.com)

When you schedule an intro call through our website, we collect:

Your Name
Your Email Address
Meeting Notes: Any details you voluntarily share regarding your property care needs.
Why we need it: To confirm, schedule, and host your 15-minute intro call.
Legal Basis: GDPR Article 6(1)(b) - Taking steps at your request prior to entering a contract.

B. Active Home Watch & Property Oversight

When you become a client, we store the operational details needed to manage your home securely:

Access Credentials: Key mapping IDs, alarm codes, gate PINs, and utility meter locations.
Property Records: Service agreements, walkthrough photo reports, relative humidity logs, and mail summaries.
Why we need it: To perform physical home inspections, prevent moisture damage, manage emergencies, and keep your home secure.
Legal Basis: GDPR Article 6(1)(b) - Execution of a home watch service agreement.

3. Third-Party Data Processors & Technical Security

We do not host your access codes, contracts, or inspection reports on our public web server. To maintain end-to-end security and GDPR compliance, we rely on the following third-party data processors operating under strict security standards:

Service Provider	Role & Data Held	Technical Security & Location
Cal.com, Inc.	Calendar Booking (Name & Email)	HTTPS/TLS in-transit encryption. Data hosted in EU / US under Standard Contractual Clauses.
Proton AG	Service Contracts & Reports	End-to-end encrypted (E2EE) storage in Switzerland under Swiss Federal Data Protection Act.
Bitwarden, Inc.	Property Access Credentials	Zero-knowledge AES-256 local vault encryption. Hosted in EU / US.
Cloudflare, Inc.	Website Delivery (Static Assets)	Global CDN delivering site files without tracking cookies or personal data logging.

4. Cookies & Tracking

Our website is built using static code. We do not use tracking cookies, local storage tracking, or third-party web analytics (like Google Analytics).

All images, fonts, and scripts are served directly from our own domain to ensure third-party networks cannot log your IP address when you browse our site.

5. How Long We Keep Your Data

We store your personal data strictly for as long as necessary to provide our services and satisfy our legal obligations:

Inquiries & Booking Requests: Meeting details and notes from prospective clients who do not onboard are permanently deleted after 90 days.
Physical Access Credentials: Alarm PINs, digital door codes, and access notes stored in our zero-knowledge vault are permanently destroyed immediately upon contract termination.
Property Inspection Logs & Photos: Walkthrough reports, humidity records, and property condition photos are retained for 3 years following contract termination (aligned with the Portuguese Civil Code statute of limitations for property liability claims).
Contracts & Tax Records: Signed service agreements, issued invoices, and payment records are retained for 10 years following contract termination as mandated by Portuguese tax law (Autoridade Tributária e Aduaneira).

6. Your Rights Under GDPR

You have full control over your personal data. Under the GDPR, you have the right to:

Access the personal data we hold about you.
Correct any inaccurate or incomplete data.
Request Erasure of your data (subject to legal or tax retention obligations).
Restrict or Object to how we process your information.
Request Data Portability to move your data elsewhere.

To exercise any of these rights, email us directly at [email protected].

If you believe your data is being handled improperly, you also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD - Comissão Nacional de Protecção de Dados) at cnpd.pt.