PTEN

Security & Providers

Last updated: 24/03/2026

Platform Security

MyDigitalBot implements appropriate technical and organizational measures to protect personal data and ensure the security of the platform's communications and operations.

These measures include, among others:

  • use of secure communications (TLS/HTTPS);
  • access control and authentication;
  • activity monitoring and event logging;
  • protection against unauthorized access and abusive use;
  • logical isolation between organizations (multi-tenant).

Communication Channels

MyDigitalBot operates through external communication channels used by organizations, such as Microsoft Teams, WhatsApp, or other equivalent services.

Messages may be processed by these third-party platforms for the purposes of delivery, security, and operation of their respective services, and are subject to the policies and security mechanisms defined by those providers.

Artificial Intelligence

MyDigitalBot may use artificial intelligence services provided by third parties to process messages and generate automatic responses.

These services are used exclusively to support the operation of the application and not for advertising purposes.

Whenever possible, configurations are used that limit the retention and use of data to what is strictly necessary for the provision of the service.

Subprocessors

To provide the service, MyDigitalBot relies on technological service providers (subprocessors), who may process personal data on behalf of Gazelle Talent – Consultoria Empresarial, Lda.

These include, by way of example:

  • Microsoft – communication channels (Teams) and Azure infrastructure;
  • Vercel – application hosting and execution;
  • Supabase – database and storage;
  • OpenAI / Azure OpenAI – natural language processing;
  • MessageBird – WhatsApp integration;
  • Meta (WhatsApp) – communication channel.

Gazelle Talent – Consultoria Empresarial, Lda seeks to select partners that adopt appropriate security and data protection practices.

Data Processing

CategoryExamplesPurposeLegal BasisRetentionSubprocessors
Message contentText, attachmentsResponse and automationPerformance of the serviceUp to 12 monthsMicrosoft, AI services
MetadataIDs, timestamps, statusesDelivery, security, and metricsLegitimate interestUp to 12 monthsMicrosoft, Meta, MessageBird
Technical logsIP, errorsMonitoring and debuggingLegitimate interest30–90 daysCloud infrastructure
Account dataName, emailAccess managementPerformance of the serviceWhile activeMicrosoft

Note: Retention periods may vary depending on the platform’s settings and the operational needs of the service.