Privacy policy
This policy explains what personal data meetNISA handles, why, and what rights you have. In short: we keep what the service needs, in the European Union; we use no advertising or analytics tools; you can export or delete everything in the app, except invoices, which the law requires us to keep. The Portuguese version prevails if the two ever differ.
On this page
1. Data controller
André Karam Soares, sole trader, tax number (NIF) 251492710. For any question about your data: support@meetnisa.com.
2. What data we handle
- Account: email, name (optional), password (stored only as a one-way hash), language, the words you choose for records, locations and services, and creation date.
- Your work: the places, services and records you enter (dates, durations, amounts, materials, VAT and no-shows), and any notes you write on places and services.
- Subscription: plan status, renewal dates and your Stripe customer ID. Card and bank details stay with Stripe and never reach us.
- Invoicing: the name, address, email and, if you give it, tax number (NIF) you enter when paying, to issue the invoice-receipt for each payment.
- Session and preferences: kept in your browser (local storage) to keep you signed in and remember your language and page layout.
- Technical logs: requests to the server, errors and the IP address they come from, for security and fixing faults.
- App usage: the days you use it, the pages you open, the kind of device (phone, tablet or computer), whether you open it as an installed app, where you came from when you created the account (the site button or the site that sent you), and some steps such as signing in, moving through the first-steps guide or exporting. No amounts, no IP address and nothing you write.
- Messages: the emails you exchange with us.
3. Your clients’ data
meetNISA does not need to know who your clients are. We recommend you do not write people’s names, contact details or health information in notes. If you do, you are the controller of that data and we handle it only on your behalf, to provide the service.
4. Why we use data and on what basis
- Providing the service (account, calculations, charts, exports, account emails such as welcome, trial ending or password reset): performance of the contract.
- Charging the subscription and invoicing: performance of the contract and legal, tax and accounting obligations.
- Security, abuse prevention and fixing errors: legitimate interest in keeping the service safe and working.
- Improving the app (seeing which parts are used and where the first-steps guide gets hard), with usage statistics: legitimate interest in improving the service. We look at totals, not at what each person does. You can object by writing to support@meetnisa.com.
We send no advertising or newsletters, sell no data and make no automated decisions with legal effects on you.
5. Who handles data for us
- Microsoft (Azure): hosting the app and database, technical logs and sending account emails. Data is stored in Sweden, in the European Union. The app’s files (not your data) are delivered by Microsoft’s distribution network from the server nearest you.
- Stripe (Stripe Payments Europe, Ireland): payments. For fraud prevention and its own legal obligations, Stripe also acts as a controller, under its privacy policy.
- InvoiceXpress (Portugal): invoicing software certified by the Portuguese Tax Authority. It issues the invoice-receipt for each payment, reports it to the Tax Authority, as the law requires, and emails it to you. It receives your name, address, email and, if you give it, tax number (NIF). Invoices are stored in the European Union.
- Cloudflare (Turnstile): checking that whoever creates an account is not a bot. It handles browser data and the IP address during that check.
All are bound by data protection agreements. Stripe and Cloudflare may transfer data to the United States under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
6. How long we keep it
- Account and records: while you have an account. When you delete data or the account in the app, it is removed from the database at once.
- Backups: the database has automatic backups, overwritten in cycles and deleted after 12 months at most. They are used only to restore the service after a serious failure.
- Technical logs: access logs, with the full IP address, 7 days; monitoring logs, with the IP address masked, 30 days.
- App usage: 25 months, and deleted sooner if you delete your data or the account. After that we keep only anonymous monthly totals (for example, how many accounts used the app in a month), which identify no one.
- Invoices and billing data: 10 years, as tax law requires, even if you delete your account.
- Emails with us: up to 2 years after the last contact.
7. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, and to receive it in an open format. Much of this you can do in the app: on the Account page you can change your details, download everything in one file and delete your data or the account. For anything else, write to support@meetnisa.com: we reply within one month.
Invoices are the exception: the law requires us to keep them for 10 years and does not allow an issued invoice to be changed. If something on an invoice is wrong, such as the NIF, we issue a credit note and a new invoice with the right details.
You can also complain to the Portuguese data protection authority (CNPD), www.cnpd.pt.
9. Security
All communication is encrypted (HTTPS). Passwords are stored only as one-way hashes, the database is encrypted at rest and keys and secrets are kept in a dedicated vault. Access to production data is limited to the person responsible for the service.
10. Minimum age
meetNISA is for people aged 18 and over.
11. Changes to this policy
If we change this policy in a meaningful way, we tell you by email before the changes take effect.