Data retention and privacy
Retention
Section titled “Retention”The policy is published in Portuguese only — “signed documents and their evidence are retained for the applicable legal period (a minimum of 10 years for documents with evidential value)”:
Os documentos assinados e respetivas evidências são retidos pelo período legal aplicável (mínimo 10 anos para documentos com valor probatório).
Ten years is a floor, not a choice — it follows from the document having evidential value.
Personal data is processed under the GDPR.
What erasure actually does
Section titled “What erasure actually does”This is the part most people assume incorrectly. Exercising the right to erasure does not delete the audit trail — it anonymises it while keeping the cryptographic evidence intact:
| Element | After erasure |
|---|---|
| IP address | Truncated to /24 (IPv4) or /48 (IPv6) |
UserId |
Replaced with NULL |
| Hashes | Preserved |
| Remaining trail elements | Preserved |
Consent
Section titled “Consent”Feature consent. Some features require explicit acceptance before use. The gate is titled Your acceptance is required and you must read to the end before accepting — “Leia até ao fim para ativar o botão ‘Aceitar’.” The choices are I have read and accept. Continue or I do not accept. Cancel.
The text you accepted is recorded with a SHA-256 hash of its body, so it is provable later exactly which wording you agreed to.
Cookies. “We use Google Analytics cookies to understand how the platform is used and improve your experience.” You can Accept or Reject, and read the Cookie Policy.
Analytics and member privacy
Section titled “Analytics and member privacy”Aggregate organisation analytics never expose who did what. Viewing an individual member’s activity is a separate, opt-in permission — see Roles and permissions.