AEDIFICA / LEGAL
Privacy
Draft — mandatory legal review before publication. Company identity, tax number and terms to be confirmed with Walter.
Controller and contact
[Responsible company — to be confirmed by Walter] · Tax number: [to be confirmed] · Address: [to be confirmed]. Contact: suporte@audaces-scale.com. This draft describes intended processing in Aedifica; active services and contracts must be verified before launch.
Data, purposes and lawful bases
We process professional identity and contact details, account, business, projects, documents, time records, billing and security data. GDPR bases: contract performance for SaaS and support (Article 6(1)(b)); legal obligations for tax and accounting (6(1)(c)); balanced legitimate interests for security and abuse prevention (6(1)(f)); consent for optional analytics (6(1)(a)). We do not sell data or make solely automated decisions with legal effects.
Customer and employee data
The client business is the controller of customer, supplier and employee data it enters. Aedifica acts as processor under documented instructions and a data processing agreement (DPA) to be validated. The client must provide privacy information and ensure time tracking is lawful.
Providers and transfers
Planned providers: Google Firebase/Cloud, EU region europe-west1 for configured services; Stripe for subscriptions and payments; Resend for transactional email; self-hosted Typesense for search. Entities, regions, contracts, support access and transfers outside the EEA must be confirmed. The database region does not guarantee that all processing stays in the EU. Transfers require a valid GDPR Chapter V mechanism and an assessment of safeguards.
Retention and security
Proposal subject to validation: account data for the contract term; after termination, 30 days for export and operational deletion within 90 days, unless a legal obligation or dispute requires retention. Backup rotation up to 90 days; security logs up to 180 days. Tax records for the applicable statutory period in each country, to be confirmed. Cookie preference: 180 days. These periods must match actual technical mechanisms before publication. Proportionate access controls and security measures will apply.
Rights and complaints
You may request access, rectification, erasure, restriction, portability and objection where applicable, and withdraw consent without affecting earlier processing. Contact suporte@audaces-scale.com. We normally respond within one month, subject to GDPR extensions. You may complain to the CNPD (Portugal), AEPD (Spain) or the competent authority where you live.
Review and updates
Confirm company identity, tax number, address, DPA, active providers, transfers, real retention periods and any data protection officer. Material changes will be communicated in the service. Draft dated 4 November 2026.