Privacy Policy

goppo account

When an account is created, its email and password are managed by Supabase, the authentication service goppo uses. Passwords are never stored in plain text.

The account also stores the email linked to the profile, the account creation date, and, where marketing consent exists, the date and source of that consent (signup or the resources area) and the privacy policy version in force at that time.

Marketing consent (newsletter)

When the option to receive the goppo newsletter is selected — at signup or in the training resources area — that choice is stored. The option is unchecked by default and is never pre-selected. Course updates are an independent choice, specific to that area.

Analytics

The site uses Google Analytics 4 only after analytics consent, to measure visits and site use. The service receives cookie identifiers, interaction, browser, device and approximate location information; reports are viewed in aggregate. Names, emails, messages, UUIDs and other personal data are not sent as events.

Where data is stored

The account and associated data live in Supabase, on a project hosted in Ireland (EU).

The site runs on Vercel, with server functions configured for the Frankfurt (EU) region. [Not verified] Vercel may, under certain circumstances described in its own documentation, transfer data outside the EU; the exact extent of that possibility has not been independently confirmed for this site.

Analytics data is processed by Google Analytics 4. Google may process data outside the European Union under its applicable terms and transfer mechanisms.

Data controller

The controller of personal data is Joaquim Mira, Portuguese tax identification number 216841828, with address at Rua Alfredo Cortês, no. 1, 2nd floor right, 1700-026 Lisbon, Portugal.

How long we keep data

We keep account data while the account is active. After 24 months without a sign-in, we send a notice to the email linked to the account. If there is no response within the following 30 days, we delete the account and associated data, unless a legal obligation requires us to keep them for longer.

Google Analytics 4 user and event data is kept for 2 months, according to the Analytics property settings.

Data subjects' rights

Data subjects have the right to access, correct, delete, restrict, or request portability of their data, and to object to processing or withdraw consent at any time, without affecting access to the account or free resources.

To exercise any of these rights, a request should be sent to the contact at the bottom of this page.

Data subjects may also lodge a complaint with the Portuguese Data Protection Authority (CNPD).

Cookies

Authentication cookies and optional Google Analytics 4 cookies are described separately in the Cookies Policy (goppo.io/en/cookies).

Changes to this policy

Whenever this policy's content changes, the version in force is associated with new marketing consents. This makes it possible to know what information was available when consent was given and to assess whether renewed consent is needed after a meaningful change.

Contact

For any question about this policy or personal data, contact jm@jaqqes.ai. Requests are handled by Joaquim Mira, the data controller.