This translation is provided for convenience. In case of any discrepancy, the Portuguese version prevails. View in Portuguese
Privacy policy
Last updated: [date to be completed]
1. Controller and contact
Controller for the data of the website and of company accounts: Edson Roberto, [tax number (NIF) to be completed], [address to be completed]. Contact for privacy matters: [contact email to be completed].
2. Roles under the GDPR
For the data each company enters in the app (workers, clients, sites, photos, documents), the company is the controller and LimpaRota acts as processor, processing the data only to provide the service. [Data processing agreement (Art. 28 GDPR) to be made available]
3. What data we process
- Account data: name, email or username, phone number and password (stored encrypted).
- Operational data: routes, visits, cleanings, photos, documents and messages.
- GPS location of workers while working (recording of cleanings and position on today's board).
- Subscription billing data, processed by Stripe.
- Technical logs needed for security and operation.
4. What we use the data for
To provide the contracted service, send the notifications the company switches on (WhatsApp, SMS or email), charge the subscription and keep the service secure. We do not sell data or use it for advertising.
5. Legal basis
Performance of the contract with the company, compliance with legal obligations and legitimate interest in the security of the service. [To be reviewed with legal advice]
6. Service providers
To operate, the service may use: hosting (Render), payments (Stripe), WhatsApp messaging (Meta's WhatsApp Business), SMS (Twilio), email delivery, maps (OpenStreetMap) and, if the company connects them, Moloni or InvoiceXpress. [Confirm the list, the location of the data and the safeguards for transfers outside the EU]
7. Retention
In the app, the company decides how long to keep photos (1 to 6 months) and documents (6 to 24 months, or never delete). Other data is kept for as long as the account exists. [Deletion period after the account ends to be defined]
8. Security
Each company has its own separate database, photos and documents. Passwords are stored encrypted, connections are encrypted (HTTPS) and photos only open with a valid session or a signed, temporary link.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. If your data was entered by a client company (for example, you are a worker or a client on a site), please contact that company first; you can also contact us at [contact email to be completed]. You may lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).
10. Cookies and local storage
The website does not use cookies (neither advertising nor analytics). The app stores in the browser only what it needs to work (session, language and data for working offline).
11. Website statistics (cookie-free)
To know how many people visit the website, our server counts visits to the public pages without cookies and without storing your IP address. For each visit we keep only: the page, the day and time, the country and approximate city (worked out from the IP address at that moment, which is then discarded), the website you came from (for example Google or Facebook), the type of device (phone, tablet or computer) and the browser language. So as not to count the same person twice on the same day, we use an anonymous code calculated from the IP address and the browser with a key that changes every day and is then deleted — it is not possible to identify anyone or follow their visits from one day to the next. Robots and automated crawlers are not counted. The details are kept for 13 months; after that, only monthly totals remain. The data is not shared with third parties. Legal basis: legitimate interest in improving the website. Approximate location by IP: IP Geolocation by DB-IP.