Privacy Policy

Last updated: 20 October 2026. This policy explains, in plain language, what data FiscalPiloto collects, what we use it for, who processes it for us and what your rights are.

1. Who is responsible for your data

FiscalPiloto (fiscalpiloto.pt) is the data controller for the personal data described here. For anything about privacy, write to privacidade@fiscalpiloto.pt or use the contact page.

2. What data we collect

• Account: your email, your name (optional) and your password — always stored hashed, never in plain text.
• Fiscal profile: activity type, VAT regime and withholding rate, so the calendar and calculations match your situation.
• Receipts: the receipts you register, import or forward to your FiscalPiloto address.
• Alerts: if you enable phone alerts, your browser's push subscription (a technical address for notifications — it does not identify you personally).
• Abuse prevention: a one-way hashed record of the connection address used at signup, kept only to enforce one free trial per connection. The address itself is never stored.
• If you sign in with Google: your name and email from Google, only to create and identify your account.

We never ask for, and you should never send us, your Portal das Finanças or Segurança Social password.

3. What we use it for

Only to provide the service you signed up for: the fiscal calendar, receipt management, calculations and pre-filled declaration values, email and push alerts before each deadline, billing, account security and preventing trial abuse. We do not sell your data, and we do not use it for advertising.

4. Who processes data for us

• Stripe — payments. Card payments are processed by Stripe; we never receive or store your card number.
• Resend — sending transactional email (activation, alerts, billing notices).
• Railway — hosting. The application and database run on servers in the European Union (Amsterdam).
• Google — only if you choose "Sign in with Google".

Some of these providers may process data outside the European Economic Area, under appropriate safeguards such as standard contractual clauses.

5. How long we keep it

While your account exists. When you delete your account, your data is erased immediately; encrypted backup copies are removed in the normal backup rotation, within 90 days.

6. Cookies

We use only essential cookies: one to keep you signed in and one to remember your language. No advertising or tracking cookies.

7. Your rights (GDPR)

You have the right to access, correct, export, delete, restrict and object to the processing of your data. Most of this is self-service: on the account page you can export or delete everything at any time. You can also write to privacidade@fiscalpiloto.pt. If you believe your rights were not respected, you may complain to the Portuguese data protection authority, the CNPD (cnpd.pt).

8. Changes to this policy

If we change this policy, we will publish the new version here and, for important changes, notify you by email before they take effect.