Data transparency
How Contattami.biz uses personal data and how you can exercise your rights. Last updated 20 September 2026.
Contattami provides professional profiles, contact exchange and AI assistants. Access does not require an age declaration. Previously recorded declarations remain subject to the applicable retention and deletion rules. You interact with an AI, not a person: verify important answers with the activity’s owner and do not share sensitive data. The owner can consult conversations as described in the privacy notice. Voice starts only when you choose to start it and allow microphone access. Pressing the voice start button accepts the linked voice terms. See the privacy notice for how audio and transcripts are processed. Sending your contact details is a separate, voluntary action and does not authorise marketing.
If the activity enables this feature and you provide an email address, Contattami may send one confirmation of your request through Resend. This is a service message, not a newsletter subscription. Replies go to the activity’s public email address. The delivery provider receives the recipient address and message content. Delivery status, the request identifier and a fingerprint of the address are recorded to handle errors and prevent duplicate or abusive sends. You can exercise your privacy rights using the contacts in this notice.
The text assistant uses DeepSeek. To answer, we send your messages, relevant conversation history and the profile's configured information: for example name, company, published contact details, catalogue and approved document excerpts. Voice features use Cartesia or ElevenLabs, depending on the profile; audio, text and transcripts are processed to provide the conversation. The text model may also process the voice transcript and profile context. Conversations can be consulted by the profile owner. Connecting a mailbox or calendar does not automatically give the public assistant access to their contents. Do not include sensitive or unnecessary personal information. AI answers may be incorrect; you can always use the activity's direct contact details.
The retention of conversations in Contattami and processing by each AI provider are separate. Disabling contribution to model training does not mean that every request is immediately deleted. We do not promise zero retention or processing exclusively within the European Economic Area. Cartesia and ElevenLabs publish data-processing addenda covering the applicable transfer mechanisms. Those documents do not by themselves establish the terms of other providers. For information or a deletion request concerning data sent through this service, contact the data controller identified in this notice; we will identify the relevant recipient and any applicable retention obligations.
When this feature is available and you purchase credits in the Android app, we process account and business details, billing details, order and transaction identifiers, amounts, taxes and payment, refund and dispute outcomes. Stripe receives the information needed to process the payment and calculate taxes. During checkout, Stripe also uses device and browser identifiers, the IP address, approximate location derived from the IP address, and interaction signals to prevent fraud and protect payments. It uses cookies and similar technologies for these purposes and analyses checkout interactions and transaction outcomes to improve payment performance. This approximate location comes from the IP address, not from GPS access. Your full card number and security code are entered in Stripe’s payment form and are not collected by Contattami’s servers. To report external purchases, Google Play receives transaction references, amounts, taxes, date and time, tax country and any required administrative subdivision. Refund verification may use Stripe tax reports: we retain relevant transaction facts, the document fingerprint and verification references; this feature does not retain the uploaded file. These processing activities support purchases, credits, refunds, disputes and reporting.
When you use the notebook, Contattami stores contact details, written notes, audio memos, transcripts, tasks and appointments in your protected workspace. Business-card photographs are processed on our server to extract text and are not retained. You review the extracted fields before saving. Voice transcription is optional: only when you request it is the audio sent to Cartesia. You can play the saved audio without requesting transcription. When you create, change or cancel an appointment, its title, date, times and location are sent to the contact’s email through our transactional email provider (Resend); private notes and audio are not included. The contact data you enter yourself does not establish consent to marketing. You are responsible for having an appropriate basis for recording and using another person’s data. Delete notes and audio from the notebook when they are no longer needed; backup copies follow the service’s backup lifecycle.
When you connect a mailbox, Contattami processes its address, connection settings and the credentials or authorisation tokens needed to access it. Connection secrets are stored encrypted. Reading and sending email involves the provider you chose (such as Aruba, Google or Microsoft) and Contattami's servers: sender, recipients, subject and message contents pass through the service when you use these functions. These data are used to provide the requested mailbox feature, not for advertising or automatic training of AI models. You can disconnect the mailbox in the workspace; this removes the active connection from Contattami, without deleting messages already held by the mail provider. Any provider-side authorisation must also be revoked with that provider.
If you enable notifications and connect your phone to a business, we store an installation identifier, an encrypted delivery token and the association with your account, session and business. Google Firebase Cloud Messaging receives the delivery token and notification content (title, text and the link to open) to deliver the alert. We do not use an advertising identifier, Firebase Analytics or Crashlytics in this app. You can stop alerts in the app or Android notification settings. Disconnecting the phone removes its active registration from Contattami. We remove invalid registrations when detected; disabling display in Android is not the same as requesting deletion of all technical data held by Google.
Provider documents: DeepSeek · Cartesia DPA · ElevenLabs DPA · Firebase · Stripe Privacy · Google Privacy.
For Contattami.biz, accounts and orders, the data controller is FIERE E DINTORNI S.R.L., VAT IT02131170686, registered at Via Tavo 290, 65128 Pescara (PE), Italia. Formal privacy requests can be sent to PEC [email protected]; the Contact page provides further support. When a visitor leaves information on a customer’s profile, that professional or company normally controls the purpose and method of follow-up; Contattami provides the technical infrastructure.
We process account and contact information, profile and card content, order and transaction references, messages sent voluntarily in forms or assistant conversations, and technical data needed for security and operation. Full payment-card data are handled by the payment provider, not by Contattami.
We use data to provide previews, accounts and the service; fulfil orders and legal obligations; forward consent-based contact requests; protect the platform; provide limited profile measurement; and answer the AI request. The applicable legal bases are contract, consent, legal obligation and legitimate interest as appropriate under the GDPR.
Authorised staff and necessary hosting, security, payment, email and AI providers may process data. A profile contact is shared with that profile’s owner. Voice conversations use Cartesia or ElevenLabs, depending on the profile: audio, transcripts and information needed to answer are processed by the voice service and its AI models. The transcript is available to the profile owner. Where providers process data outside the EEA, the transfer must rely on an adequacy decision or GDPR safeguards such as standard contractual clauses. We do not sell personal data.
Account and profile data are retained while the service is active and as needed for closure, disputes and security. Order and invoice data follow applicable administrative and tax obligations. Contact requests and conversations are retained while useful for the relationship or until a valid request requires otherwise. Technical logs are retained for a proportionate security and diagnostic period.
The service may use technical cookies or equivalent tools for session, authentication, security and preferences. Public-profile events do not store a persistent browser identifier and are not used to follow people across sites. There are currently no advertising cookies; see /en/cookie for the tools and their duration; any non-essential analytics or marketing tool requires the relevant notice and choice where required.
You can request access, correction, deletion, restriction, portability or object where the GDPR provides these rights. You may withdraw consent at any time without affecting prior processing. Write to PEC [email protected] or use the Contact page. You may also lodge a complaint with the competent data-protection authority.
This notice may change when functions, providers or legal requirements change. The published version carries its latest update date, and material changes are communicated in the service when needed.
You can request deletion of your account and associated personal data without signing in. Legal notices are processed to handle your request and fulfil applicable obligations, not for marketing. Your acknowledgement confirms receipt, not completed deletion. We will explain identity checks and any required retention when handling your request.
Connecting Google Calendar is optional and requires your authorisation with Google. You do not give Contattami your Google password. Google asks for access to your verified email address, your calendar list and events in calendars accessible to your account. Contattami uses your email to identify the account and lists writable calendars so you can choose which calendar to use.
In the calendar you select, we retrieve appointments to show their title, dates, times, location and all-day status in your private workspace. When you submit a new appointment, we send its title, times and notes to Google. This integration does not publish appointments on your mini-site, send them to the AI assistant, or provide event deletion or attendee invitations. These operations provide the Calendar feature you request.
We store encrypted authorisation tokens and connection settings, including the selected account and calendar. Events are retrieved from Google for display; this integration does not keep a permanent copy in Contattami’s internal event database. Data pass through Google and the technical infrastructure needed to provide the service. We do not sell these data or use them for advertising or training general AI models.
You can disconnect Google Calendar in Settings: we remove the connection and tokens from Contattami’s active configuration. Events already created remain in Google. To revoke the Google authorisation as well, remove Contattami from your Google Account connections. The retention and privacy-rights sections of this notice also apply; contact the data controller for deletion requests, including questions about technical backups.
Contattami’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
