Legal
Privacy Notice
Last updated: 14 September 2026
This notice explains how TECHSHOT, LDA handles personal data when you visit techshot.ai, contact us, or use Ava, our AI assistant.
1. Who is responsible for your data
The data controller is TECHSHOT, LDA, with registered address at R. do Benformoso 168, 1.º Dto., 1100-083 Lisboa, Portugal.
Privacy enquiries and requests can be sent to [email protected].
2. What we collect and why
| Activity | Data | Purpose and basis |
|---|---|---|
| Website visit | Technical request data such as IP address, device/browser information, requested page and security signals. | Deliver and secure the website, diagnose faults and understand aggregate use. We rely on our legitimate interests in operating a secure, effective website. |
| Contact form or email | Name, company, work email, selected topic, message and any information you choose to provide. | Reply to your enquiry, assess a possible engagement and manage follow-up. Processing is necessary to take steps at your request and for our legitimate interest in handling business enquiries. |
| Ava AI assistant | Your messages, a random session identifier, language, current page, timestamps, assistant replies and anti-abuse signals. | Provide the requested conversation, maintain continuity, prevent abuse and route a business enquiry when applicable. Browser storage is activated only after you accept the chatbot notice. |
Do not submit passwords, financial details, special-category data, confidential client information, or anything you are not authorised to share.
3. Browser storage, analytics and cookies
- Ava stores your consent choice and a random session identifier in local storage. The session identifier expires after up to 7 days.
- Chat messages displayed in your browser are kept in session storage and normally disappear when that browser session ends.
- Cloudflare Web Analytics is used for aggregate website measurement. It is configured as a privacy-focused, cookieless analytics service and is not used for advertising profiles.
- Cloudflare Turnstile is initialised only after you accept the chatbot notice and processes technical signals needed to distinguish legitimate use from automated abuse.
Techshot does not use advertising trackers. No site-wide consent banner is currently shown because the deployed website does not intentionally set non-essential advertising or behavioural-tracking cookies. This will be reassessed before introducing any such technology.
4. How the chatbot processes messages
Ava is an AI system, not a person. Messages are sent to Techshot's backend, processed through a self-hosted OpenClaw gateway and passed to the configured AI model provider, currently DeepSeek, to generate a reply.
A temporary transcript and turn counter are held in Techshot's Redis service for up to one hour. The AI orchestration system may retain session records for continuity, troubleshooting and follow-up. Records are kept only while needed for those purposes, to manage a prospective business relationship, or to meet legal obligations, and are then deleted or anonymised where appropriate.
When configured, Techshot's self-hosted n8n automation may receive a conversation transcript to route a business enquiry. It remains within Techshot-controlled infrastructure.
5. Service providers
We use providers that process data on our behalf or support delivery of the service:
- Cloudflare — DNS, website hosting, security, aggregate analytics and Turnstile.
- Formspree — processing and delivery of contact-form submissions.
- Hetzner — hosting for Techshot-controlled backend services.
- DeepSeek — AI model processing for Ava's replies.
Self-hosted OpenClaw, Redis and n8n components are operated within Techshot's infrastructure. Providers may process data outside the European Economic Area. Where required, we rely on appropriate contractual or legal safeguards for international transfers.
6. Retention
Contact enquiries and related correspondence are retained only for as long as needed to answer the enquiry, manage a potential or active business relationship, establish or defend legal claims, and comply with applicable record-keeping obligations.
The specific browser and temporary-chat periods are described above. You may ask us to delete an enquiry or chatbot record earlier, subject to any legal reason requiring us to retain it.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. Where processing depends on consent, you may withdraw it at any time without affecting earlier lawful processing.
Contact [email protected] to exercise a right. You may also lodge a complaint with Portugal's supervisory authority, Comissão Nacional de Proteção de Dados (CNPD).
8. Security and changes
We use proportionate technical and organisational measures to protect personal data, but no internet service can guarantee absolute security.
We may update this notice when the website, providers or legal requirements change. The date at the top identifies the current version.