Victor Ferreira de Almeida, trabalhador independente, tax number PT258489804, Rua Condessa Mumadona 87, 4835-056 Guimarães, Portugal. Privacy contact: contato@confeilab.com.
Account data: name, email, password (stored only as a cryptographic hash), language, the record of your acceptance of these texts and the account’s security events (without IP address). Business data: what you record in the service (products, recipes, sales, customers, suppliers). For business data, the business is the controller and we are the processor (see the Terms of Use).
Providing the service and keeping the account (performance of the contract — GDPR art. 6(1)(b); LGPD art. 7, V); sending confirmation, password reset, verification code and security notice emails (performance of the contract and legitimate interest in security — GDPR art. 6(1)(b) and (f); LGPD art. 7, V and IX); complying with legal and tax obligations (GDPR art. 6(1)(c); LGPD art. 7, II).
Service hosting: Oracle Cloud, Spain Central region (Madrid), in the European Union. Network and site protection: Cloudflare. Email delivery: Resend. Contact mailbox: Hostinger. Each one processes data only to provide its service, under a data processing agreement. Payments are processed by Paddle.com, an authorised reseller (Merchant of Record), which processes payment data as an independent controller, under its own privacy policy.
Some processors may process data outside the European Economic Area. In those cases the transfer relies on an adequacy decision or on standard contractual clauses approved by the European Commission.
Account data is kept while the account exists. The body of automatic emails is deleted as soon as the email is sent, and the delivery record after 30 days. Account security events are kept for 12 months. Business data follows the retention rules set by each business. After cancellation, the business data stays in read-only mode while the account exists; an account with no active plan and no sign-in for 6 consecutive months may be deleted after an email notice sent 30 days in advance (see the Terms).
You may request access, rectification, erasure, restriction, portability and objection (GDPR arts. 15 to 22; LGPD art. 18) by writing to contato@confeilab.com.
You may lodge a complaint with the Portuguese data protection authority (CNPD) or with the Brazilian authority (ANPD).
We only use the essential session cookie (to keep you signed in securely). We use no tracking or advertising cookies. Your language, theme and currency preferences stay in your browser.
On the public page, the country Cloudflare estimates from the connection is used only to suggest the price currency. It is not stored or linked to you.