Last updated: [DATE]
Privacy Policy
This policy explains how Vem Escavar processes your personal data under the GDPR. [Review and complete the bracketed fields before publishing.]
Data controller
The data controller is [ORGANIZATION NAME], based at [ADDRESS], reachable at privacidade@vemescavar.pt.
Data we collect
Account data (name, email), organization profile (name, contacts, description), published opportunities, contact-form messages, favorites, and images you upload.
Purposes and legal basis
We process your data to provide the service (performance of a contract), respond to enquiries and send account-related notifications (legitimate interest/consent), and keep the platform secure.
Processors
We use providers that process data on our behalf: Supabase (database, authentication and storage), Vercel (hosting and cookieless analytics) and Resend (email delivery). Some may process data outside the EEA under appropriate safeguards.
Retention
We keep your data while your account exists. Contact messages are kept as long as needed to respond and to meet legal obligations.
Your rights
You have the right to access, rectify, erase, restrict, object to processing, and to data portability. To exercise these, contact privacidade@vemescavar.pt. You may also lodge a complaint with your supervisory authority (in Portugal, the CNPD).
Cookies
We use only essential cookies for authentication and session. Analytics (Vercel Analytics) does not use tracking cookies.
Changes and contact
We may update this policy. For any privacy question, contact privacidade@vemescavar.pt.