Privacy
What happens to what you tell us here, and to what your visit leaves behind. In short: we keep what you write or say to us, never the sound of your voice, and we use it to answer you.
Last updated 17 October 2026
Who we are
Darkmatter is Reentry Systems, Unipessoal Lda., a company registered in Portugal under NIPC 517263190, with its registered office at Rua dos Ílhavos 7, 1.º Frente, 2825-339 Costa da Caparica. We decide what happens to the data described on this page.
Talking to us by voice
The microphone turns on only when you tap it, and your browser asks you first. It stops when you send, cancel or close, and after two minutes at most.
While you speak, the sound goes from your browser straight to OpenAI, which writes your words down as you say them. Our server only gives your browser a key for that, which works for one recording and expires after a minute.
If that live connection fails, your browser holds the recording until you stop, then sends it once, through our server, to OpenAI to be written down. Our server passes it on and does not save it.
We keep the words. We never keep the audio.
What you write or say, and our reply
Your words, typed or transcribed, go through Vercel's AI Gateway to a language model from OpenAI, which writes the reply you see.
We keep your words and our reply, with the page you were on, where on the site you started and your browser's language. They go to our team's Slack and to a table in Darkmatter Agents, our own platform, as soon as the reply is written, whether or not you book a call. That is how one of us reads everything you send.
Booking a call
To book, you give us your name and e-mail, and you may pick a rough budget. With the time you chose and your time zone, these go to Cal.com, which books the call, sends the invites and puts it in our calendar. The invite carries your note and our suggestion, so whoever takes the call has read them.
The booking also goes to our Slack and to the same table.
Before the call, we read up on your organisation
Once a call is booked, we prepare a short brief on the organisation you work for, from public sources. We start from your e-mail's domain, or from an organisation you named. If you wrote from a personal address and named none, we don't guess.
We research the organisation, not you. The most the brief says about you is your job title, and only if your organisation's site or the press already gives it.
A language model from OpenAI does the reading, using Perplexity's search, both through Vercel's AI Gateway. The brief goes by e-mail to our team, sent through Resend, and to our Slack and the table. It is not part of your invite. You can ask for it, like anything else we hold about you.
Sending a note instead
If you send us a note rather than book a call, your name, e-mail, note and any budget go by e-mail to hello@darkmatter.is, sent through Resend, with a copy to you. They also go to our Slack and the table.
Analytics and cookies
In the European Economic Area, the UK and Switzerland, we ask first. Nothing from Google loads until you accept, and if you decline, nothing from Google loads at all. We tell where you are from the country your IP address points to. If we can't tell, we ask.
Elsewhere, there is no banner. If your browser sends Global Privacy Control, Google gets no advertising signals from your visit and RB2B does not load, unless you accept in Cookie settings.
Google Analytics counts visits and sets cookies to tell one visit from the next. We also send it a few events from the conversation, such as when it opens, when a reply is shown and when a call is booked. Never what you said.
The same Google tag tells Google Ads when a call is booked, a note is sent or a reply is e-mailed, and about a few steps before that, such as a reply about a project or the budget you pick, so we can see which ads bring conversations. It sends no name, e-mail or anything you said.
If you came from one of our Google ads and allow advertising cookies, we keep the ad's click ID in a cookie, dm_ad_click, for 90 days, and with your conversation. If the conversation later becomes a proposal or a project, we may tell Google Ads so, with that click ID and the date. Nothing else about you goes with it.
RB2B never loads in the European Economic Area, the UK or Switzerland. Elsewhere, it tries to work out which company a visit comes from and, for some visitors in the United States, who they are. What it finds goes to our team's Slack.
Vercel Web Analytics and Speed Insights count page views and measure how fast pages load. They set no cookies.
You can change your choice at any time from Cookie settings, at the foot of every page. Withdrawing it also deletes Google's cookies.
We set two cookies of our own, both needed to keep that promise: dm_region says whether we have to ask, for 30 days, and dm_consent holds your answer, for six months. The third, dm_ad_click, is only set with your consent, as above.
None of these tools is needed for the site to work. If your browser blocks them, nothing changes for you here.
Keeping abuse out
To stop a script from running up costs or flooding our inbox, our server counts requests from each IP address for ten minutes. The count lives in the server's memory and is gone after that.
Who handles it for us
- OpenAI turns speech into text and writes replies and briefs.
- Vercel hosts the site, runs the AI Gateway and the cookie-free analytics.
- Perplexity searches public sources for the brief.
- Slack is where our team reads each conversation.
- Cal.com books calls and sends invites.
- Google runs our calendar, Analytics and Ads.
- Resend sends our e-mail.
- RB2B identifies visitors outside the European Economic Area, the UK and Switzerland.
Most of them are based in the United States, so your data may be processed outside the European Union. Where it is, we rely on the EU–US Data Privacy Framework for providers certified under it, and on the European Commission's standard contractual clauses in each provider's data processing terms for the rest.
Why we use it
- Answering what you send us and booking the call: because you asked us to. These are steps you asked for before any agreement with us (GDPR Article 6(1)(b)).
- The brief on your organisation, keeping the conversation so we can follow up, and keeping abuse out: our legitimate interest in preparing for a call you booked, following up on it and protecting the site (Article 6(1)(f)). You can object to any of these.
- Google Analytics and Google Ads in the European Economic Area, the UK and Switzerland: your consent (Article 6(1)(a)), which you can withdraw from Cookie settings at any time.
- Analytics, ads and RB2B elsewhere: our legitimate interest in knowing how the site is used and which ads bring conversations (Article 6(1)(f)).
How long we keep it
A conversation, with your note, our reply, the booking, the brief and the e-mails about it, is kept for 12 months after we last heard from you, then deleted. If it turns into work together, it is kept with that work.
Google Analytics keeps event data for 14 months.
OpenAI does not train its models on what we send it, and keeps it for up to 30 days, only to check for abuse.
The count of requests against abuse lasts ten minutes. Our cookies last 30 days, 90 days and six months, as above.
Your rights
You can ask what we hold about you, have it corrected or deleted, ask us to stop using it, and take a copy with you. Write to hello@darkmatter.is and we will answer within a month.
You can also complain to a data protection authority. In Portugal, that is the CNPD.
When this changes
When we change what we collect or who handles it, we update this page and the date at the top.