Privacy policy

1. What we collect

• Account: email address, password (stored only as a hash), your name and the interface language you chose
• Company and team: company name, roles of members, invitations sent to other people
• Projects: names, site boundary, territory layers, parameters, notes, generated concepts, scenarios and versions with their KPIs and economics
• Files you upload: territory files, scenario files, orthophotos and drone photos
• Payments: packages bought, invoices, payment status. Card details are handled by Stripe and never reach us
• Activity log: which action was taken in your company or project, by whom and when, so the owner can review it
• Messages: notifications in the app and emails about your account, purchases and generation results

2. Why we process it

• To give you access to the workspace and run the generations you ask for
• To charge for purchases, issue invoices and keep accounting records
• To send service emails: login links, payment receipts, results and warnings about your account
• To keep the audit trail the company owner can review
• To understand how the site is used and fix errors, from aggregate counts only

3. Who else sees the data

We do not sell your data and do not show it to other customers. These providers act for us:

• Lovable Cloud - hosting, database, file storage and login for this site
• Stripe - card payments and invoices (United States)
• Resend - delivery of transactional emails
• Lovable - visitor counts on the site, with no cookies and no IP addresses
• Google - the web fonts loaded on every page, so Google sees the visitor's IP address
• OpenStreetMap, Overpass and Nominatim - map tiles, map features and the site's country when you work with a territory

4. How long we keep it

• Account, company and project data: while the account exists
• Files you upload: until you or the company owner deletes them
• Payment and invoice records: as long as Portuguese accounting and tax law requires
• Visitor counts: detailed data for 90 days, daily summaries for one year

5. Your rights

Write to info@allportugal.one and we will answer within 30 days. To delete your account and everything in it, say so in the same email: we remove the account, its companies, projects and files. Payment records stay as long as the law requires

• See the data we hold about you and get a copy of it
• Correct them or ask for them to be deleted
• Ask us to limit how they are used, or object to that use
• Take your data with you in a machine-readable form
• Complain to the Portuguese data protection authority, CNPD (www.cnpd.pt)

6. How we protect it

Access is by login, and a member of a company only sees what their role allows. Uploaded files sit in private storage and are not public links. Observer links are read-only and expire. Actions on company and project data are written to the audit log

7. Changes to this policy

If the policy changes, the new date appears at the top of this page and, where the change matters to you, we tell you by email