Legal
Privacy & Cookie Policy
Last updated: August 16, 2026
This policy explains what personal data Inventa Melhor Unipessoal Lda (“we”) collects when you visit https://bytecaplatform.com or subscribe to Byteca Platform, why we collect it and what your rights are under the General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for your data is Inventa Melhor Unipessoal Lda, Rua Professor Doutor Bento de Jesus Caraça 18 1Dto, 2840-111 Paio Pires, Portugal. Contact for privacy matters: [email protected].
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name (optional) and email address | Creating and managing your subscription, providing receipts and invoices, sending service messages, answering support requests | Performance of the contract (Art. 6(1)(b) GDPR) |
| Subscription and payment status (plan, amount, dates, Stripe customer/subscription identifiers, payment outcome) | Billing, access control, accounting | Contract (Art. 6(1)(b)); legal obligation for accounting and tax records (Art. 6(1)(c)) |
| Card details | Collected directly by Stripe in a secure form; we never receive or store your full card number | Contract (Art. 6(1)(b)) — see Stripe’s privacy policy below |
| Technical data (IP address, browser type, timestamps, pages requested) | Security, fraud and abuse prevention (rate limiting), diagnosing errors. IP addresses used for rate limiting are stored only as one-way hashes for up to one hour | Legitimate interest in keeping the service secure (Art. 6(1)(f)) |
| Acceptance of the Terms (date and time) | Evidence that the contract was concluded | Contract and legal obligation (Art. 6(1)(b), (c)) |
We do not use your data for advertising, profiling or automated decisions with legal effects, and we do not sell it.
3. Who receives your data
- Stripe Payments Europe, Ltd. (Dublin, Ireland) processes payments and stores your payment method for renewals; for these purposes Stripe acts as an independent controller under its own privacy policy. Stripe may transfer data to Stripe, Inc. in the United States under EU-approved safeguards (Standard Contractual Clauses / EU-US Data Privacy Framework).
- Our hosting provider, which stores the website and its database on our behalf under a data-processing agreement.
- Professional advisers (accountants, lawyers) and public authorities where required by law.
4. How long we keep it
- Subscription and account data: for the duration of your subscription and afterwards as long as needed to handle questions or claims (normally up to 3 years).
- Billing records: 10 years, as required by Portuguese tax and accounting law.
- Rate-limiting records: up to 1 hour. Server logs: up to 30 days.
- Records of Stripe events (webhooks) that concern your subscription: kept for the life of the subscription record and pruned together with it.
5. Your rights
You have the right to access your data, have it rectified or erased, restrict or object to its processing, and receive it in a portable format, in the cases provided by the GDPR. To exercise these rights, email [email protected]. We answer within one month. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt).
6. Cookies and similar technologies
- Our website does not set any cookies for visitors on the public pages. The merchant administration area uses a single strictly necessary session cookie (
paysid) to keep administrators logged in. - Stripe loads its payment form (Stripe.js) on the subscribe and payment pages only. To prevent fraud and comply with its legal obligations Stripe sets strictly necessary cookies such as
__stripe_midand__stripe_sid; see Stripe’s cookie policy. - We do not use analytics, advertising or social-media cookies. Because only strictly necessary cookies are used, no consent banner is shown.
- During checkout your browser keeps a small local record (in
localStorage) of your current subscription attempt — the private management link and the email you entered — so that reloading the page resumes the same subscription instead of creating a duplicate. It contains no card data, stays only on your device, and you can clear it at any time in your browser settings.
7. Security
The website is served over HTTPS, passwords for the administration area are stored hashed, and card data is handled exclusively by Stripe (PCI DSS Level 1). Access to the database is restricted to the systems that need it.
8. Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
9. Changes
We may update this policy; the date at the top shows the current version. Material changes will be announced by email to subscribers.