Effective date: 10 August 2026
1. Who We Are
Assessoria is operated by Abdelfattah Ennaciri Serviços, Sociedade Unipessoal Lda,
registered in Portugal with NIF 518616304 , at Estrada de Mem Martins N 275 2DTO 2725-392 Mem Martins, Portugal.
For data protection enquiries: Assessoria.eu.pt@gmail.com
2. Data We Collect
Account information: full name, email address, phone number, and password (stored in hashed form — we never see your plain-text password).
Financial documents: files uploaded by your service provider (receipts, invoices, tax documents) and their metadata.
Payment information: subscription plan and status, payment history, billing name and email. We do not store card numbers — all payments are processed by Stripe (PCI-DSS certified).
Technical data: device push notification token, anonymised usage analytics (Firebase Analytics), crash reports (Firebase Crashlytics).
3. Legal Basis (GDPR Article 6)
Contract performance (Art. 6(1)(b)): account management, document access, payments.
Legitimate interests (Art. 6(1)(f)): security, fraud prevention, service improvement.
Legal obligation (Art. 6(1)(c)): compliance with Portuguese tax and accounting law.
Consent (Art. 6(1)(a)): optional features such as push notifications (withdrawable at any time).
4. How We Use Your Data
To create and manage your account; to deliver documents from your service provider; to process payments and issue invoices; to send push notifications about your account; to provide support; to maintain security; to comply with legal obligations; to improve the Service.
5. Data Sharing
We share data only with: Google Firebase (authentication, storage, analytics — EU/US, Standard Contractual Clauses); Stripe Inc. (payments — US, Standard Contractual Clauses); Expo (push notifications — US, Standard Contractual Clauses). We do not sell your data.
6. International Transfers
Transfers outside the EEA rely on Standard Contractual Clauses approved by the European Commission (GDPR Art. 46(2)(c)).
7. Data Retention
Account profile: duration of account + 3 years. Financial documents: 7 years (Portuguese accounting law). Payment records: 10 years (Portuguese tax law). Analytics: 14 months.
8. Your GDPR Rights
You have the right to:
access your data (Art. 15);
correct it (Art. 16);
request deletion (Art. 17);
restrict processing (Art. 18);
receive it in portable format (Art. 20);
object to processing (Art. 21).
Contact Assessoria.eu.pt@gmail.com — we respond within 30 days.
9. Account and Data Deletion:
You can delete your account directly from the Assessoria app via the Delete Account button on the Profile page.
You may also request the deletion of your account and all associated personal data at any time by contacting us at Assessoria.eu.pt@gmail.com with the subject "Account or Data Deletion Request", providing the email address associated with your account.
You may request the deletion of specific personal data without deleting your entire account.
Upon verification, we will process the deletion of the requested account and/or data.
Certain information may be retained where required by law (legal, tax, accounting, or regulatory obligations) and will only be kept for the period mandated by applicable law.
10. Security
We use TLS encryption in transit, encrypted Firebase storage, role-based access controls, and Firebase Authentication. No internet transmission is 100% secure. We will notify you of any breach as required by GDPR Articles 33–34.
11. Children
The Service is for adults (18+). We do not knowingly collect data from children under 16.
12. Changes
Material changes are notified at least 30 days in advance via in-app notification and/or email.
13. Contact
Abdelfattah Ennaciri Serviços, Sociedade Unipessoal Lda,Estrada de Mem Martins N 275 2DTO 2725-392 Mem Martins , Portugal —Assessoria.eu.pt@gmail.com