Privacidade

Tratamos os dados que nos fornece para gerir a sua conta: nome, e-mail profissional, empresa, país e preferências de mercado, os itens que guarda e as suas mensagens ao apoio, bem como dados técnicos que mantêm as contas seguras (inícios de sessão, endereço IP). Não usamos rastreadores publicitários nem análises de terceiros; as nossas páginas só criam os cookies necessários para manter a sessão iniciada e proteger os formulários. Os dados de contratação neste sítio vêm de anúncios públicos (TED); não criamos perfis de funcionários públicos individuais. Pode pedir a qualquer momento uma cópia ou a eliminação dos dados da sua conta — contacto: support@govtorch.com.

Last updated: 27 October 2026 · Este documento é disponibilizado em inglês; aplica-se o texto em inglês.

1. Who is responsible

Controller: [LEGAL_ENTITY_NAME], [REGISTERED_ADDRESS], Montenegro (CRPS [CRPS_NUMBER] · PIB [PIB] · PDV/VAT [VAT_NUMBER_IF_APPLICABLE]). Privacy and data-protection requests: [LEGAL_CONTACT_EMAIL]; any other question: support@govtorch.com.

2. What we process

• Account data — name, work e-mail, organisation, country, market preferences (countries, categories), role in your organisation, interface language and notification choices. Passwords are stored only as a one-way hash.
• Billing data you give for an invoice — company name, billing e-mail and address, VAT number, purchase-order reference, message.
• Service usage — items you watch, alert rules, settings, exports, data-problem reports, and counts of the features your organisation used per day.
• Support communications — what you send through the support form or by e-mail, with your e-mail, organisation and the page you were on.
• Technical and security data — IP address and browser type of your sessions, sign-in times, failed sign-in attempts, request counters used for rate limits, and server error logs.
• Cookies — only the cookies the service needs: a session cookie that keeps you signed in and a short-lived security cookie for forms. No advertising trackers, no third-party analytics.

3. Why

• to provide the service and your account, alerts and digests you switch on (performance of the contract);
• to issue invoices and keep accounting records (contract; legal obligation);
• to keep the service secure and fair — sign-in protection, one session per user, request limits against scraping and credential sharing (legitimate interest);
• to answer your support requests (contract; legitimate interest).

4. Public procurement data

The procurement information in GovTorch comes from public notices (TED). Notices can contain names or contact details of contact persons as published by buyers or suppliers; we show them as published and do not build profiles of individuals.

5. Who else receives data

• Hosting and backup storage: Hetzner Online GmbH (Germany); the application server is located in Helsinki, Finland (EU).
• Transactional e-mail delivery (account, invitation, password and billing e-mails): Zoho CPaaS (ZeptoMail), Zoho Corporation.

We do not sell personal data and do not share it for advertising.

6. How long

Account and usage data for as long as the account exists, then as long as legal retention duties require (e.g. invoices). Sessions end after 14 days without use; request counters are deleted after two days; backups are overwritten in a short rotation.

7. Your rights

You can ask for access to, correction, deletion or restriction of your data, for a copy in a portable format, and object to processing based on legitimate interest. Write to [LEGAL_CONTACT_EMAIL] (or support@govtorch.com). You can also complain to a data-protection supervisory authority.

8. Changes

We update this notice when our processing changes; the date above shows the current version.