Privacy Policy for Individuals

For this direct service to individuals, the controller is Além do Código, Lda., operator of PedirDocumentos.pt, NIPC 518014088, with registered office at Rua Dom Francisco Gomes, n.º 4, 1.º A, 8000-306 Faro, Portugal.

For privacy questions or to exercise your rights, contact geral@pedirdocumentos.pt.

• the name, email address, mobile telephone number and billing details you provide;
• selected documents, request status, documents obtained and related technical metadata;
• NIF, NISS, credentials for official portals and verification codes, only when required for the collection you authorised;
• payment and billing data. Full card details are processed by the payment provider, not by PedirDocumentos.pt;
• technical and security data, such as timestamps, IP data processed for security limits, browser information, authentication attempts and error type.

• Preparing and carrying out your request: steps taken before entering into a contract and performance of the collection contract you requested.
• Authenticating with the portals and obtaining the selected documents: performance of the request and the operational authorisation you give us to act on your behalf.
• Processing payments, issuing invoices and complying with tax obligations: performance of the contract and compliance with legal obligations.
• Security, fraud prevention and abuse limits: legitimate interests in protecting the service, data subjects and official portals.
• Responding to support requests, complaints or competent authorities: performance of the contract, legitimate interests and, where applicable, legal obligations.

Confirming that you have read this Policy is not treated as general consent to processing that is necessary for the service. Where an operation requires consent, it will be requested separately and specifically.

• Official portals: only the data and credentials required to authenticate and obtain the documents you selected.
• Technical service providers: hosting, database, storage, payment, communications, monitoring and security services, such as Supabase, Vercel, Railway and Stripe, when required to provide the service.
• Public or judicial authorities: where required by law or by a valid order.

We do not sell your personal data. Some providers may process data outside the European Economic Area; where this occurs, we apply the safeguards provided for under the GDPR, such as adequacy decisions or standard contractual clauses.

Required technical providers may include Supabase, Vercel, Railway, Stripe and Resend for hosting, databases, storage, payments, communications, monitoring and security.

We apply measures proportionate to the risk, including TLS-protected communications, protection of temporary credentials during collection, access controls, temporary download URLs and security logs.

• Credentials and verification codes: deleted when collection is completed, fails or is cancelled.
• Paid documents: access ends 48 hours after payment; physical deletion occurs on the next automated cleanup run, normally within no more than one hour.
• Unpaid documents: the payment window ends 24 hours after collection is ready; files are deleted on the next automated cleanup run.
• Partial files from failed or cancelled requests: deleted as soon as the request is technically closed.
• Authorisation and order evidence: kept for applicable limitation periods and while a complaint or dispute is pending, then deleted or anonymised.
• Billing and payments: kept for applicable statutory tax and accounting periods.
• Security logs: kept for 90 days unless an incident, fraud or legal duty justifies longer retention until closure.
• Support and complaints: kept until the request is closed and for periods needed to establish or defend legal rights.

You may request access, rectification, erasure, restriction, portability or object to processing, under the GDPR. You may also withdraw any specific consent you have given, without affecting processing carried out before it was withdrawn.

If you believe your rights have not been respected, you may lodge a complaint with the CNPD.

We use only cookies and similar technologies that are necessary for operation, security, session management and abuse prevention. If we use non-essential cookies in the future, we will request consent where required by law.

We may update this Policy for legal, technical or security reasons. The version applicable to your request is recorded with the date and version you confirmed in the form.

The assistant is optional. We send what you write, up to ten previous messages, selected document identifiers and codes for your current public page to OpenAI. On a guide, we also send the document type from our catalogue. We do not link the conversation to contacts, accounts or collection requests, or automatically include form fields, collected documents or portal credentials. We do not send the full page address, parameters or tokens. You can use the site without chatting.

We store accepted questions, replies generated by Júlia and the status of any failures on the server, along with the language, validated public page path and dates. Messages are grouped by a random identifier for this tab, without linking them to your IP, contact details, account or collection request. Records are available for review for 30 days from the start of the conversation. They then become unavailable; a daily task deletes records whose retention period has ended. We also record the response options sent and, when the browser reports this information, how many buttons it displayed and whether the reply was typed, chosen with a button or sent through a shortcut. This information does not prove that the options were seen or read. We also store the identifiers of suggested documents, whether to add or remove documents or replace the selection, and the proposed actions. When the browser reports this information, we record whether the proposal was displayed, the numbers of documents and actions displayed, the documents approved for selection and the reported resulting selection, with the corresponding dates. These records do not authorise document collection or payments.

Before saving, the server filters obvious personal data. The filter may miss names, addresses or other freely written data: it does not guarantee complete anonymity. Do not share personal data, passwords or codes. Access to records is restricted to people with privileged permissions.

We use these records to review questions and improve our help. At their request, the person responsible may use AI tools such as Codex to read the stored filtered messages. This review is not automatic, and we do not use these records to train models automatically.

The visible conversation stays in browser memory and disappears when you reload, leave the public area or close the tab. This does not delete server records, which follow the stated review period and daily deletion process. OpenAI may retain security logs under the account terms.

To improve the catalogue, we save the generic name of missing documents, their purpose, language and date, without linking them to your request or contact details. A daily task deletes these records after 30 days. Usage limits use identifiers derived from the IP with a secret-salted hash to prevent abuse.

The assistant can make mistakes. Review suggestions and confirm the list required by the receiving organisation. Adding a suggestion does not authorise collection or payment.

The browser remembers that Júlia has already been introduced, so the chat does not open automatically again. This preference does not contain the conversation and can be removed by clearing the site data.

An order containing only blank forms requires no official portal credentials. We process contact details, selected forms, payment and billing data and evidence of the accepted conditions and immediate supply, to perform the contract, provide support and meet legal obligations.

Data you enter in a PDF outside the platform is not sent to us by filling it in. We do not collect that content through delivery of the blank form.

Order file access and deletion periods also apply to copies of forms prepared for that order. Blank catalogue originals containing no customer data may be retained to provide the service. Order and acceptance records follow the periods stated in this Policy.