Privacy Policy

AZMT Digital Solutions, Lda.
Version 1.0 · Effective date: 16 September 2026

1. The short version

The AZ Goals application runs entirely inside your own Salesforce organisation. It makes no external connections and sends nothing to us, so we never see your goals, your records or your users' data. What we do process is narrow: people who visit our website, people who contact us, and the licence records Salesforce gives us so that we can manage subscriptions.

The rest of this notice sets that out precisely, because the distinction between the application and the website matters for your rights.

2. Who we are

AZMT Digital Solutions, Lda. is the controller of the personal data described in this notice. We are registered in Portugal under number 517 649 357, with registered office at Rua Albino da Costa Reis, n.º 118, 3.º Dto. Fte., 4430-748 Oliveira do Douro, Vila Nova de Gaia, Portugal.

For any question about this notice or about your data, write to support@azimute.eu.

We have not appointed a Data Protection Officer, because our processing does not meet any of the conditions in article 37(1) of the GDPR: we are not a public authority, our core activity is not processing that requires regular and systematic monitoring of data subjects on a large scale, and we do not process special categories of data on a large scale.

3. The AZ Goals application

This is the most important section, so we will be explicit.

The AZ Goals managed package is installed into your own Salesforce organisation and executes there. It contains no HTTP callouts, no Named Credentials and no Remote Site Settings — the mechanisms Salesforce requires for an application to communicate externally. It therefore does not transmit your data anywhere.

This means:

• We are not a data processor for the personal data the application handles. You remain the sole controller of everything in your Salesforce organisation, including any personal data contained in goals, records, targets and history.
• We have no standing access to your data. We cannot, on our own initiative, read it, export it, delete it, or respond to a data subject request about it. Those requests must be handled by you within your own Salesforce organisation. The single exception is where you yourself grant us time-limited access in the course of support, which is described in section 5.
• Your use of Salesforce itself is governed by your agreement with Salesforce, Inc., who act as your processor for the platform.

Where goals are used to measure the performance of identifiable individuals — a common and legitimate use — you are responsible for the lawfulness, transparency and fairness of that processing, including informing the individuals concerned.

If a future version of the application ever transmits data outside your Salesforce organisation, we will say so in the release notes for that version and update this notice before it is released.

Licence and subscription data

Salesforce provides us with limited information about each installation through its License Management Application, so that we can manage subscriptions and provide support. This typically comprises the organisation name and Salesforce organisation ID, the name and email address of the administrator who installed the application, the licence status, the licence type, and the installation and expiry dates.

We process this to perform our contract with you, and to manage licences, renewals and support. Where the administrator named in those records is not a party to the contract, we also rely on our legitimate interest in administering the licence (article 6(1)(f) of the GDPR).

Where you purchase through Salesforce AppExchange Checkout, Salesforce (and its payment processor) also process payment and billing data under their own terms. We receive licence and subscription records needed to activate and support your subscription; we do not issue the AppExchange Checkout invoice ourselves.

4. The azgoals.com website

No advertising or measurement cookie is set before you accept. If you decline, or ignore the notice, none are set. Separately, whether or not you accept, Google Analytics receives a limited cookieless technical ping (page URL, referrer, browser type, IP address and timestamp), with no cookie and no client identifier, as described in the table above. The cookie banner lists each individual cookie, and lets you withdraw consent at any time through the cookie settings link in the footer.

LinkedIn. Where you accept cookies, we and LinkedIn Ireland Unlimited Company determine jointly the purposes and means of the processing carried out through the Insight Tag. Our part of that arrangement is limited to placing the tag and viewing aggregated reports; LinkedIn is responsible for informing you about its own subsequent processing and for handling requests relating to it, and the essence of the arrangement between us is set out in the terms LinkedIn publishes for that product. You may exercise your rights in respect of this processing against either of us, and you may address any such request to us at support@azimute.eu.

Google Analytics. Google LLC processes analytics data on our behalf, as our processor, for the purposes above. We have not enabled Google Signals or any advertising feature, and Google does not use this data for its own purposes. Where you have not accepted cookies, the processing is limited to the cookieless ping described in this section. Where you accept cookies, it also includes the analytics identifiers and usage data described above. Google's processing is described in Google's own policies for Google Analytics.

5. When you contact us

If you email support, request a demo or ask a question, we process your name, email address, the content of your message, and any information you choose to include. We do this to answer you, on the basis of our legitimate interest in responding to enquiries and, where you are a customer, to perform our contract.

If resolving an issue requires seeing your configuration or your data, we will ask for your explicit consent first. Any access is time-limited, limited to what the issue requires, at your discretion, and revocable by you at any time. Where such access involves us processing personal data on your behalf, we act as your processor for that processing only, and we do so under the data processing agreement published at azgoals.com/dpa.

6. Marketing

We may send marketing emails about AZ Goals to people who have given us their details, and to business contacts where we have a legitimate interest and the message is relevant to their professional role.

Every marketing email contains an unsubscribe link that works immediately. You can also ask us to stop at any time by replying or writing to support@azimute.eu. We do not sell or rent contact details to anyone.

7. Who else is involved

We do not sell personal data. We share it only with providers who help us operate, and only as much as they need:

We will also disclose personal data where required by law or by a competent authority.

We keep this list current, and publish the complete and current version at azgoals.com/subprocessors. Where you are a customer, we will notify you of a change to it by email before the new provider begins processing, and you may object.

8. Transfers outside the EEA

Some of the providers above are established outside the European Economic Area, principally in the United States. Where personal data is transferred outside the EEA we rely on the European Commission's standard contractual clauses, on an adequacy decision where one applies — including, for providers certified under the EU–US Data Privacy Framework, that decision — or on another lawful transfer mechanism, together with supplementary measures where appropriate. You can ask us for details of the mechanism used for a particular transfer.

9. How long we keep things

10. Your rights

Under the GDPR you may ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is inaccurate or incomplete;
• delete it, where we have no overriding reason to keep it;
• restrict how we use it, or object to our using it where we rely on legitimate interest;
• transfer it to you or another controller in a machine-readable form, where we rely on consent or contract; and
• withdraw consent at any time — for marketing, using the unsubscribe link; for cookies, by declining or clearing them.

Write to support@azimute.eu and we will respond within one month. We may ask you to confirm your identity first. Exercising these rights is free unless a request is manifestly unfounded or excessive.

Note: these rights apply to data we control. They do not extend to data inside a customer's Salesforce organisation, because we neither hold nor control it — see section 3. If your employer uses AZ Goals and you want to exercise rights over how your performance is measured, that request goes to your employer.

If you are unhappy with our response you may complain to your national supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

11. Notice to residents of the United States

This section applies in addition to the rest of this notice if you are a resident of a US state with a comprehensive consumer privacy law, including California, Texas, Virginia, Colorado, Connecticut and Utah.

The categories of personal information we collect, the purposes for which we use them, and how long we keep them are described in sections 4, 5, 6, 7 and 9. We collect identifiers, professional and employment-related information, internet activity information and, through the LinkedIn Insight Tag and Google Analytics where accepted, advertising and analytics identifiers. We do not collect sensitive personal information, and we do not knowingly collect personal information from anyone under 13.

We do not sell personal information for money. Where you accept cookies, the use of the LinkedIn Insight Tag may constitute a "sale" or "sharing" for cross-context behavioural advertising, or "targeted advertising", as those terms are defined in some of these laws. You can prevent it entirely by declining cookies when the banner appears, or by withdrawing your consent at any time through the cookie settings link in the footer of our website.

Subject to the conditions in the applicable state law, you may request access to, correction of, deletion of, or a portable copy of your personal information, and may opt out of targeted advertising. Write to support@azimute.eu. We will respond within the period the applicable law requires, generally 45 days. We will not discriminate against you for exercising these rights. If we decline your request, you may appeal by replying to our decision; we will respond to the appeal within the period the applicable law requires, generally 60 days, and if we deny the appeal we will tell you how to contact your state Attorney General.

12. Security

We keep the personal data we hold protected with measures appropriate to its sensitivity, including access control on a need-to-know basis, encryption in transit, multi-factor authentication on our own systems, and keeping the number of systems that hold personal data small.

The application itself was designed so that customer data never leaves the customer's organisation, and it has passed the Salesforce AppExchange security review. That review covers the application's code and behaviour; it is not a certification of our internal corporate practices.

No system is perfectly secure. If a breach affecting your personal data occurs and is likely to result in a risk to your rights, we will notify the CNPD within 72 hours where required, and will notify you where the risk is high. Where the breach affects personal data we process on your behalf under the data processing agreement, we will notify you without undue delay.

13. Children

AZ Goals is a business product, sold to organisations, and is not directed at children. We do not knowingly collect personal data from anyone under 16, or, in the United States, from anyone under 13.

14. Automated decision-making

We do not use your personal data to make automated decisions with legal or similarly significant effects about you.

Note that the application itself produces automated calculations about progress against targets, which may relate to identifiable employees of a customer. Those calculations happen inside the customer's own Salesforce organisation and under the customer's control; the customer is responsible for how they are used, including for any obligation to provide human review, and for any information or consultation duty owed to employees or their representatives.

15. Changes

If we change this notice we will update the effective date at the top. Where a change materially affects your rights we will say so prominently on the website and, where we hold your email address for that purpose, notify you. Superseded versions remain available at azgoals.com/privacy/archive.

AZMT Digital Solutions, Lda. · Rua Albino da Costa Reis, n.º 118, 3.º Dto. Fte., 4430-748 Oliveira do Douro, Vila Nova de Gaia, Portugal · NIPC 517 649 357 · support@azimute.eu