Data Processing Agreement (DPA) & Service Integration Agreement
Last updated: March 9, 2026
Este acordo regula a forma como os dados pessoais podem ser tratados no contexto da utilização do serviço NautiBot AI, disponibilizado através do website nautibot.pt.
This document supplements the Terms and Conditions and the Privacy Policy of the service.
1. Nature of the Service
O NautiBot AI é um serviço de integração tecnológica que permite aos operadores turísticos instalar um assistente virtual (chatbot) nos seus websites.
The service includes:
technical configuration of the chatbot
initial training based on the client's website content
connection to external automation tools
configuration of contact or pre-booking request submission flows
NautiBot acts exclusively as a technical provider of software integration and configuration.
2. Responsibility Structure
2.1 Data Controller (Website nautibot.pt)
NautiBot is responsible for processing personal data collected directly on the website:
This data includes, for example:
name
business email
company website
mobile phone
messages submitted through forms
This data is used exclusively for:
commercial contact
service trial activation
technical support
administrative and fiscal management.
2.2 Data Controller (Client's Website)
The Client (Boat Tour Operator) is solely responsible for processing the personal data collected through the chatbot installed on their website.
This includes data collected from:
tourists
website visitors
potential clients
booking or pre-booking requests.
The Client determines:
what data is collected
for what purpose
how they are stored
how long they are retained.
3. NautiBot's Role
NautiBot does not act as a data controller or data processor in relation to tourist data collected through the chatbot installed on the Client's website.
NautiBot acts exclusively as:
Upon completion of the installation and configuration:
NautiBot does not access the collected data
NautiBot does not store that data
NautiBot does not control that data
NautiBot does not use it for any purpose.
4. Technical Data Flow
The system may use external technological tools to function.
Depending on each client's configuration, data may flow directly between:
the website visitor
the chatbot installed on the website
automation systems
storage services configured by the Client.
Typically, data is sent directly to:
the tourist operator's email
a database or spreadsheet controlled by the operator.
NautiBot does not maintain a centralised database of these contacts.
5. Third-Party Technology Services
The operation of the system may involve external technology platforms, including:
chatbot services
automation services
cloud services
data storage services.
These services may act as independent data processors, in accordance with their own legal terms and privacy policies.
The Client is responsible for ensuring that the use of these platforms complies with applicable legislation.
6. Individual Client Configuration
Each NautiBot implementation is created individually for each tourist operator.
Each client has:
their own technical configuration
their own data storage destinations
their own control over the data collected.
NautiBot does not maintain a centralised infrastructure for storing tourist data.
7. Security
NautiBot applies good security practices in the technical configuration of the service, including:
use of secure connections (HTTPS)
proper configuration of the tools used
security recommendations to the Client.
Upon delivery of the system, the Client assumes responsibility for the security of their accounts and systems.
8. GDPR Compliance Responsibility
The Client agrees to:
ensure a legal basis for data processing
inform website users about the use of the chatbot
comply with all GDPR obligations and applicable legislation.
NautiBot is not responsible for any infringements committed by the Client in the use of the collected data.
9. Limitation of Liability
NautiBot's liability is limited to the provision of the technical service of chatbot configuration and integration.
NautiBot is not responsible for:
the use of data collected by the Client
commercial decisions made by the Client
the Client's failure to comply with data protection legislation
10. Contact
For any questions related to data protection:
NautiBot AI
Email: info@nautibot.pt
11. Other Documents
Also read:
⚓ NautiBot AI
Intelligent sales assistant for boat tour operators.