Data retention and privacy
Retention
Section titled “Retention”The policy is published in Portuguese only — “signed documents and their evidence are retained for the applicable legal period (a minimum of 10 years for documents with evidential value)”:
Os documentos assinados e respetivas evidências são retidos pelo período legal aplicável (mínimo 10 anos para documentos com valor probatório).
Ten years is a floor, not a choice — it follows from the document having evidential value.
Personal data is processed under the GDPR.
What erasure actually does
Section titled “What erasure actually does”This is the part most people assume incorrectly. Exercising the right to erasure does not delete the audit trail — it anonymises it while keeping the cryptographic evidence intact:
| Element | After erasure |
|---|---|
| IP address | Truncated to /24 (IPv4) or /48 (IPv6) |
UserId |
Replaced with NULL |
| Hashes | Preserved |
| Remaining trail elements | Preserved |
The steps to delete your account are in Delete your account or download your data.
Consent
Section titled “Consent”Feature consent. Some features require explicit acceptance before use, and the accepted text is recorded with its SHA-256 hash. How and when that screen appears is in Where consents turn up; how the accepted wording is proven, in The integrity proof.
Cookies. “We use Google Analytics cookies to understand how the platform is used and improve your experience.” You can Accept or Reject, and read the Cookie Policy.
Analytics and member privacy
Section titled “Analytics and member privacy”Aggregate organisation analytics never expose who did what. Viewing an individual member’s activity is a separate, opt-in permission — see Roles and permissions.