Privacy Policy

Who is responsible

Mario Portilho, Portugal is the controller for personal data about our customers and website visitors. Contact: the support address published on our website.

For the personal data of our customers' contacts (the people stores email), the store is the controller and we act as processor under our Data Processing Agreement. Those people should contact the store directly.

What we collect

Account data: name, email, password (stored as a hash), store name and website, team members.

Billing data: handled by Stripe; we receive the plan, payment status and billing country, never full card numbers.

Usage data: logs needed to run, secure and improve the service, such as IP addresses and actions taken.

Why we use it

To provide the service and support (contract), to bill you and meet tax obligations (legal obligation), and to keep the service secure and prevent abuse (legitimate interest).

We send you service emails such as password resets, invitations and billing notices. We do not sell personal data.

Cookies

Our website and app only use a strictly necessary session cookie to keep you logged in. We do not use advertising or analytics cookies.

Where data is stored

Data is hosted in the European Union. Our subprocessors are listed on the Subprocessors page. Where a provider may access data from outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account data for as long as the account is open and up to 30 days after closure; invoices for the period required by Portuguese tax law (currently 10 years); security logs for up to 12 months.

Your rights

You can ask to access, correct, delete, restrict or port your data, or object to processing, by emailing the support address published on our website. You can also complain to the Portuguese data protection authority (CNPD, www.cnpd.pt) or the authority where you live.