F

Privacy Policy

Version of 2026-11-07

Draft: the details of the entity responsible for the platform are still to be filled in.

This policy explains which personal data we process when you use Fundos na Mão, why, on what legal basis and what rights you have under the General Data Protection Regulation (GDPR).

1. Data controller

[POR PREENCHER: nome da entidade], tax ID [POR PREENCHER: NIF/NIPC], [POR PREENCHER: morada]. Contact: [POR PREENCHER: email de contacto].

2. What data we process

  • Account data: name, email and password (stored encrypted by our authentication provider; we never have access to it).
  • Beneficiary profile: name of the person or organisation, beneficiary type, tax ID, region, municipality and company size.
  • Projects and applications: descriptions, sectors, amounts, dates, tasks and notes you enter.
  • Documents you upload (for example, certificates and quotes), which may contain personal data.
  • Preferences: language and email alerts.
  • Technical data: access and security logs and the essential cookies described in the Cookie Policy.

3. Why we use the data and on what basis

We do not sell your data or use it for advertising.

  • To provide the service you asked for — create your account, show matching funding, organise applications and documents (performance of a contract, Art. 6(1)(b) GDPR).
  • To send deadline alerts by email, which you can turn off at any time on the Alerts page (performance of a contract).
  • To keep the platform secure and prevent abuse (legitimate interest, Art. 6(1)(f)).
  • To comply with legal obligations, where applicable (Art. 6(1)(c)).

4. Who processes data on our behalf

We use service providers (processors) that process data only on our instructions:

  • Supabase — database, authentication and file storage.
  • Vercel — platform hosting.
  • Resend — email delivery.

5. Transfers outside the European Economic Area

Some of these providers are based in the United States. Any transfer of data outside the EEA is made with appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework.

6. How long we keep data

We keep data while your account is active. When you delete your account, we delete the account, the organisation, projects, applications and documents. Our providers' backups may retain data for a limited period until they are overwritten.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. On the My account page you can correct your data, download a copy of all your data and delete your account. For any other request, contact us at [POR PREENCHER: email de contacto].

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD), at www.cnpd.pt, or with the supervisory authority of your country.

8. Security

All connections are encrypted (HTTPS). Each organisation can only access its own projects, applications and documents, and documents are kept in private storage accessible only through temporary links.

9. Minimum age

Fundos na Mão is intended for people aged 18 or over.

10. Changes

This is the version of 2026-11-07. If we change it materially, we will let you know on the platform or by email.