Cyber Planet Inc., a company incorporated in Ontario, Canada ("we"), is responsible for the processing of personal data on portuguesesnomundo.online and the associations' portal. This policy explains what data we process, why, for how long and what rights you have. We aim to collect the minimum necessary.
1. Summary
- Visitors: you can browse events without an account. We do not store your exact location and we do not build a profile about you.
- Associations: we store the account and organization data needed to provide the service; payments are handled by Stripe.
- We do not sell personal data.
2. What data we process
2.1 Visitors to the public site
- Technical server logs (IP address, date and time, page requested, browser type). They are used for security and operation and kept for a short period (up to about 14 days). The logs do not include the terms you type in the event search.
- Essential cookies (see the Cookie Policy).
- Analytics and marketing (optional): if enabled, and only after you accept the cookie notice, we use services such as Google Analytics to understand, in aggregate, how the site is used. You can refuse or change your choice under "Cookie settings" in the footer.
- Location: you choose the place by typing it. If we later offer a "use my location" option, it will only be requested when you tap the button, will be used temporarily for the search and will not be stored in profiles, statistics or logs.
2.2 Associations and portal users
- Account: name, email, password (stored encrypted and irreversibly), preferred language, two-step verification secret (encrypted) and dates you accepted the terms.
- Organization: name, type, country, city, description, website, contacts and other data you choose to provide, including the events, images and logos you publish.
- Security and audit: a record of important actions (for example sign-ins, changes, approval decisions) with date, IP address and browser.
- Subscription and billing: subscription status and customer identifiers with the payment provider. Full card details are handled by Stripe and do not pass through our servers.
- Communications: service emails (email confirmation, approval, payment notices) and messages you send us.
2.3 Newsletters and followers (when available)
- Email, city or area, language and proof of your consent (date, source and wording accepted). Subscription requires email confirmation and can be cancelled in any message. There are two separate lists: the platform newsletter (managed by us, which associations cannot see) and each association's follower list (which that association can access to send you information about its events).
3. What we use data for and our legal basis
| Purpose | Basis |
|---|---|
| Creating and managing accounts, reviewing applications and providing the service | Performance of a contract |
| Billing, invoicing and tax obligations | Contract and legal obligation |
| Security, preventing abuse and fraud, auditing | Legitimate interest (protecting the service and users) |
| Newsletters and promotional communications | Consent (you can withdraw it at any time) |
| Improving the service with aggregate statistics | Legitimate interest |
4. Who we share data with
We only use providers needed for the service, bound by contracts requiring data protection:
- Hosting: Hetzner Online GmbH — servers in Finland (European Union).
- Analytics (consent only): Google (Google Analytics / Search Console), when enabled.
- Payments: Stripe — for subscriptions and billing (when enabled).
- Email delivery: an email delivery provider (when enabled) for service messages and newsletters.
- Maps and addresses: a geocoding service (for example Google) may receive the text of an address or place to find coordinates (when enabled). It does not receive your device's location.
- Artificial intelligence: if an association uses AI features (for example OpenAI), the text it provides for that feature is sent to the provider. Visitor data is not sent.
Data that associations publish (events, organization profile, contacts marked as public) is visible to any visitor. Only contacts that the association chooses to make public are public. We may also disclose data where the law requires.
5. International transfers
We are a Canadian company and our servers are in the European Union. Data may therefore be processed in Canada and the EU, and by providers in other countries (for example the United States). Where required, we use appropriate safeguards such as standard contractual clauses.
6. How long we keep data
- Technical server logs: up to about 14 days.
- Account and organization data: while the account exists and, after closure, up to 24 months (to resolve issues and prevent abuse), unless a valid deletion request is made.
- Security audit logs: up to 24 months.
- Billing records: as long as tax law requires (up to 6 years).
- Newsletters: until you unsubscribe; we keep only the minimum record needed to prove consent and honour the cancellation.
7. Your rights
Depending on where you live (for example under Canadian privacy law, the GDPR in the EU or the UK GDPR), you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. To exercise these rights write to info@portuguesesnomundo.online. We may ask you to confirm your identity. We will reply within the applicable legal time limit.
If you believe we are handling your data incorrectly, you may complain to the data protection authority in your country — for example the Office of the Privacy Commissioner of Canada, the CNPD in Portugal or the equivalent authority where you live.
8. Security
We use encrypted connections (HTTPS), irreversibly hashed passwords, two-step verification, separation of data between accounts, audit logs, backups and regular updates. No system is completely secure; if a breach occurs that puts you at risk, we will notify you and the authorities where the law requires.
9. Children
The Service is not intended for children under 16 and we do not knowingly collect data from children. The associations' portal is intended for adults representing organizations.
10. Changes
We may update this policy. The date of the last update is at the top; for material changes we will notify associations by email.
11. Contact
Cyber Planet Inc. — info@portuguesesnomundo.online