Parc fermé
Privacy policy
Last updated: 31 October 2026
01Data controller
Eugénia Maria Magalhães Barros, NIF 265937060, Portugal. For any privacy question: hello@mypaddock.app. We reply within one month at most.
02What data we process and why
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| Email, name, password (encrypted) | Create and manage the account, authentication | Performance of the contract |
| Content you create (tasks, notes, minutes, projects, people) | Provide the service | Performance of the contract |
| Subscription status and Paddle customer identifiers | Manage access, billing and support | Performance of the contract |
| Security logs (IP, country, device, sign-in attempts) | Protect accounts and prevent fraud | Legitimate interest |
| Service emails (activation, account notices) | Communications required by the service | Performance of the contract |
| Waitlist (email and, if you provide it, name) | Announce the launch and send product news | Consent, which you can withdraw at any time |
| Product news emails | Inform you about product news | Consent, which you can withdraw at any time |
We do not process card data: payments are collected directly by Paddle. We do not sell personal data or use it for advertising.
03Content protection
The content you create is stored encrypted at rest and only travels over encrypted connections (HTTPS). Each account is isolated by access rules enforced in the database itself, and the platform's management tools do not show account content. Technical access to the infrastructure is restricted.
04Who we share it with
- Hosting and database: Lovable / Supabase (application infrastructure), with the database hosted in London, United Kingdom, a country covered by a European Commission adequacy decision.
- News emails and waitlist: Brevo (Sendinblue SAS, France, EU), which stores the contacts of people who sign up and sends the communications.
- Payments: Paddle.com, reseller and Merchant of Record, which processes your payment and billing data as an independent controller.
- Artificial intelligence (optional): when you use the Wall (Muro), the text of your question and the necessary context are sent to Google's Gemini model through Lovable's AI gateway, only to generate the answer and with no model training on that data.
- Service and sign-in emails: Brevo (Sendinblue SAS, France, EU).
- Others: professional advisers (accounting, legal) and authorities, where required by law.
When a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or on standard contractual clauses approved by the European Commission.
05How long we keep it
- Account data and content: while the account is active and, after cancellation, 30 days for export; after that they are deleted.
- Security logs: up to 12 months.
- Billing data: for the legal retention period, by Paddle and by us, where applicable.
06Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent where processing relies on it. You can export your data directly in your account; to delete it, or for any other request, write to hello@mypaddock.app. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt), or with the authority in your country.
07Security
We use encrypted connections (HTTPS), per-user data isolation, security event logging and restricted access to systems. No system is infallible; if a data breach affects you, we will inform you and the supervisory authority as required by law.
08Cookies
We only use cookies that are essential for the service to work. See the cookie policy.