Company
- Firm: HORIZONSHIFT, UNIPESSOAL, LDA, trading as Iterabase
- Registered office: Avenida do Atlântico, 16, Escritório 5.07, 1990-019 Lisboa, Portugal
- Registration: Commercial Registry Office (Conservatória do Registo Comercial), sole registration and tax number (NIPC) 518285618
- Share capital: €2,000.00
- Contact: hello@iterabase.com
For businesses only. Iterabase sells its services only to companies and professionals, not to consumers.
Privacy notice
Horizonshift, Unipessoal, Lda (Iterabase) is the controller of the personal data described here. This notice covers this website, booking a call and contacting us. Customer data inside an Iterabase environment is covered by each customer’s data processing agreement instead.
| What we collect | Why | Legal basis | How long |
|---|---|---|---|
| What you type when you book a call: name, email, company and notes | To hold the call and follow up | Steps you asked for before a contract (GDPR art. 6(1)(b)) | Up to 24 months after our last contact, unless we start working together |
| Emails you send us | To answer you | Our legitimate interest in answering (art. 6(1)(f)) | Up to 24 months after our last contact |
| Business contact details from public sources, if we contacted you first | To offer our services to your company | Our legitimate interest in business outreach (art. 6(1)(f)) | Until you object, or 24 months after our last contact |
| Visit statistics | To see which pages help | Plausible counts visits without cookies and without personal data | Aggregated only |
Who helps us. Cal.com, Inc. (United States) runs the booking calendar. Google Workspace holds our email. Our sales records live in our own systems. When data leaves the EU, we rely on the European Commission’s standard contractual clauses or an adequacy decision.
Your rights. You can ask to see, correct or delete your data, to limit or move it, and you can object to its use, including for outreach, at any time. Write to hello@iterabase.com. You can also complain to the Portuguese data protection authority, the CNPD (cnpd.pt).
Business contacts we reach out to
If we contacted you first about our services, this is how we handle your details (GDPR art. 14). The controller is Horizonshift, Unipessoal, Lda (Iterabase), Avenida do Atlântico, 16, Escritório 5.07, 1990-019 Lisboa, Portugal, NIPC 518285618. Contact: hello@iterabase.com.
| What | Examples | Where it comes from |
|---|---|---|
| Professional identity | Name, role, company | Public LinkedIn profile, Apollo.io, company website |
| Work contact details | Work email and phone | Apollo.io, company website, public sector directories such as the APAT member directory |
| Company context | Sector, size, location, systems used | Public sources and Apollo.io |
| Contact history | Messages, replies, meetings and their outcome | Our exchanges with you |
We don’t process special categories of personal data or non-work personal data.
Why, and on what basis. To contact you about Iterabase services relevant to your role and company, manage any business relationship that follows, and record your preferences, including an objection to further contact. The basis is our legitimate interest in offering our services to businesses (GDPR art. 6(1)(f)). We use only work details, contact people whose role relates to what we offer, keep messages few, and stop at once if you object. Ask us for a summary of that assessment. Where the law requires prior consent for marketing emails (Portuguese Law 41/2004), we send them only with that consent.
| Provider | Service | Location |
|---|---|---|
| Google (Google Workspace) | Email and documents | EU and US |
| Apollo.io | Sales database and sending messages | US |
| Messages on the platform | Ireland and US | |
| Anthropic and OpenAI | Help drafting messages and researching companies | US |
| Linear | Internal task management | US |
| Obsidian (Obsidian Sync) | Internal notes, end-to-end encrypted | EU |
| Cloudflare | Hosts our CRM, with records of the business relationship, and routes access to it | CRM data stored in the EU; global network |
Transfers outside the EEA rely on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission’s standard contractual clauses. We don’t sell your data.
How long. 24 months after our last contact, if no business relationship follows. If you object, we keep only what we need to make sure we never contact you again (name, email and the date of the objection). If you become a customer, the contract’s and the law’s retention periods apply.
Your rights. You can object at any time by replying “no” to any message or writing to hello@iterabase.com; we stop at once. You can also ask for access, correction, erasure, restriction or portability (GDPR arts. 15 to 21). We answer within one month. You can complain to the CNPD, Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.
Cookies and storage
| Name | Set by | What it does | Lasts |
|---|---|---|---|
ib_lang | Iterabase | Remembers the language you chose | 1 year |
ib_region | Iterabase | Shows prices in euros or dollars for your region | 30 days |
iterabase_attribution, iterabase_demo_email | Iterabase (browser storage) | Carries campaign tags and your email into the booking form | Until you close the tab; the email handoff expires after 2 hours |
| Cal.com cookies | Cal.com | Run the booking calendar | Set only after you click a booking button |
We use no advertising or tracking cookies, so there is no cookie banner. The booking calendar loads only when you click a booking button.
Where hosted environments run
This information is given under the EU Data Act (Regulation (EU) 2023/2854, art. 28).
- Infrastructure: each hosted customer gets a dedicated environment on Amazon Web Services in Ireland (AWS eu-west-1), contracted with Amazon Web Services EMEA SARL (Luxembourg). Traffic reaches it through Cloudflare’s network.
- AI models: run by TensorX Ltd. in Ireland and Finland, under written zero data retention.
- Other providers: listed on our sub-processors page.
- Government access: we only disclose customer data when a binding legal order requires it. We check each request, challenge it when it is unlawful or too broad, disclose the minimum, and tell the customer first unless the law forbids it.
Contract terms
Paid plans, the free trial and self-hosted licences are governed by the documents signed with each customer: the order form, the General Subscription Terms, the data processing agreement and, for the free trial, the Free Trial Terms. Ask us for the current versions at hello@iterabase.com.