Privacy notice
How Kintrae handles personal data
A plain-language overview of the data used to operate a bilingual community directory.
Controller identity, physical address, direct contact, and registration or tax identifiers must be confirmed by Portuguese counsel before launch. The current product owner should replace this notice with the verified details before collecting production data.
Version 0.1 · 10 September 2026 · Review before public launch
Controller and contact
Kintrae is currently a project operated by its product team. The legal controller, registered name, physical address, direct privacy email, and any applicable registration or tax identifiers are pending confirmation. Do not treat a general project contact as a substitute for the verified controller identity.
Data we may use
- Account details such as name, email address, profile image, locale, and authentication records.
- Contribution details such as organization information, contact details, source links, location choices, supporting notes, ownership claims, and uploaded media.
- Community participation details such as ideas, replies, memberships, and personal affiliations. Organization connections, including approved owners, are visible to anyone signed in to Kintrae. Signed-out visitors see only a blurred preview without personal details.
- A proportionate age confirmation for public posting. Kintrae does not collect government ID for this check by default.
- Messages sent to the team and operational records needed to secure, moderate, troubleshoot, and improve the service.
- Public or third-party sources used to verify directory records, including public organization websites and contact pages.
Purposes and lawful bases
Kintrae uses data to provide requested account and directory features, review and publish community records, handle ownership and safety reports, respond to contact requests, protect users and the service, and meet legal obligations. The applicable basis may be performance of a requested service, legitimate interests, consent, or a legal obligation, depending on the feature and the final legal assessment. Special-category data is not requested as a requirement for ordinary directory use and must not be inferred or published without a documented lawful basis and appropriate safeguards.
Recipients and transfers
Data may be processed by service providers used for authentication, hosting and database operations, email delivery, maps, geocoding, and security. Current architecture references Google and Discord authentication, Supabase, Resend, OpenFreeMap, Photon, and Nominatim. The final provider list, roles, regions, transfer safeguards, and contract disclosures must be verified before launch.
Retention
Kintrae should keep each record only as long as needed for its stated purpose, safety, dispute handling, and any justified legal retention. The final retention schedule must cover accounts, submissions, claims, messages, reports, moderation records, logs, backups, and deleted-account content.
Your rights and complaints
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing relies on consent. Contact the verified privacy address listed in the final controller notice. You may also complain to the Portuguese data protection authority, CNPD.