Privacy Policy
Who We Are
The so-ma.studio website is operated by SO-MA Studio ("SO-MA", "we"), a digital creative agency working from Lisbon and Paris. For any privacy question, contact lucas@so-ma.studio.
What We Collect
When you press Send, we receive the data you send us: in the conversation on the contact page, in the project brief, in the request for a fix plan from the store checker or the accessibility test, in the request from the llms.txt generator, in the proposal request on the Shopify cost calculator or in the request for a PDF checklist. That is your email and, if you fill them in, your name, company, website, message, program, timing, markets and how you found us. The message also carries the page you sent it from, the first page you opened on this visit and the site you came from (for example, google.com). A fix-plan request also carries the address you checked, its score and the three main issues; an accessibility-test request carries the address tested, its score and the issues; an llms.txt generator request carries the site address and how many pages we read; a calculator request carries the numbers you typed. None of this reaches us as a message before you press Send. We do not request or process special categories of data. What the tools, the MCP server, the hosting technical logs and visit measurement process without you pressing Send is described in the sections below.
The message is delivered by email to Lucas's inbox. The site keeps no copy and no contact database, and sends no automatic replies. If you prefer, you can open the same text in your own email app or write directly to lucas@so-ma.studio.
Store Checker, Accessibility Test and llms.txt Generator
The checker, the accessibility test and the llms.txt generator read only the public pages of the address you type, the way a crawler would, and do not store what they read. The generator also respects the site’s robots.txt. The IP address of whoever uses them or the Send button is used in memory, for a few minutes, to limit abuse. Apart from the hosting technical logs, described below, we do not store the address you type or the IP address. If you press Send, the address goes in your message, as explained above.
MCP Server for AI Assistants
The server at https://so-ma.studio/api/mcp answers AI assistants, such as Claude and ChatGPT, and other programs that use the Model Context Protocol. It asks for no account and no sign-in. It receives only what the assistant sends to each tool (for example, a question, a term or a website address) and, if the assistant sends them, the name and version of the program making the request. It answers with information published on this site; only the llms.txt generator reads another site, the one at the address it receives. It does not receive the conversation and does not store requests or answers. The IP address is used in memory, for a few minutes, to limit abuse of the llms.txt generator.
Hosting Technical Logs
Vercel, which hosts the site, keeps technical logs of requests to the site, including requests to the MCP server, the checker, the accessibility test, the llms.txt generator and the contact form: the time, the requested address with its parameters (for example, the site being checked), the response code, the program that made the request and the IP address. These logs do not include the text of messages or the MCP server’s answers. On our plan, Vercel keeps them for up to 30 days, and we use them only to fix errors and stop abuse. The legal basis is our legitimate interest in keeping the site secure and working (art. 6(1)(f) GDPR). Vercel also processes traffic data, such as IP addresses, for its own purposes, such as platform security, under its own privacy policy (vercel.com/legal/privacy-notice).
Why We Use It
Contact data is used exclusively to reply to your enquiry and for the commercial conversation that follows. The legal basis is pre-contractual diligence and our legitimate interest in answering the people who contact us (art. 6(1)(b) and (f) GDPR). We do not sell or share your data with third parties for marketing.
Cookies and Analytics
This website uses no tracking cookies and no advertising tools. That is why there is no cookie banner here: there is nothing to accept.
To measure visits we use Vercel Web Analytics, which uses no cookies and counts visits in aggregate, without identifying visitors. We also count clicks on contact buttons and the steps of the contact flow (for example, which program was chosen or what score the checker gave), never with your email, name or anything you typed. The legal basis is our legitimate interest in knowing which pages bring enquiries (art. 6(1)(f) GDPR).
So we know how an enquiry found us, your browser keeps for the visit (in sessionStorage, which is cleared when you close the tab) the first page you opened and the site you came from. It only reaches us inside a message you decide to send.
Processors
The website and visit measurement run on Vercel (hosting and Vercel Web Analytics). Messages sent from the site are delivered by email through Resend and arrive in Lucas's inbox on Google Workspace. 15-minute bookings are made on Cal.com. As processors, these providers process data only to deliver the service, under their own GDPR commitments. Separately, Vercel processes traffic data for its own purposes, as explained under Hosting Technical Logs.
For How Long
We keep contact messages for as long as the conversation and a reasonable commercial history require, at most 24 months after the last contact, unless a legal obligation or an ongoing contract applies. On our plan, Vercel keeps the hosting technical logs for up to 30 days.
Your Rights
Under the GDPR you can request access, rectification, erasure, restriction or portability of your data, and object to processing. Just write to lucas@so-ma.studio. You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (cnpd.pt).
Changes
This policy may be updated. The date of the last update is at the top of the page.