Privacy Policy
Last updated: April 2026
We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, and how you can exercise your rights under the GDPR.
1. Who we are
e-Expat is operated from Portugal. For privacy matters, contact privacy@e-expat.com.
2. Data we collect
- Account data — name, email, password hash, locale.
- Application data — date of birth, address, phone, dependents you choose to add.
- Documents — passport, proof of address, and other files you upload.
- Payment data — handled by Stripe; we never store your card details.
- Technical data — IP address, browser, basic usage analytics.
3. Why we use it
- To deliver the services you signed up for.
- To submit applications on your behalf to Portuguese authorities.
- To send transactional emails (order updates, document requests).
- To meet our legal and tax obligations.
4. Legal bases
We process your data on the basis of contract performance, your consent (e.g., for marketing emails — you can opt out anytime), and our legitimate interests in operating and improving the service.
5. Data sharing
We share your data only with sub-processors required to deliver the service: Stripe (payments), Supabase (storage), Brevo (transactional email), and Portuguese authorities to whom your applications are submitted. We never sell your data.
6. Retention
We keep application records for the period required by Portuguese accounting and AML regulations (typically 10 years for invoicing data). You may request deletion of optional data at any time.
7. Your rights
Under the GDPR you have the right to access, rectify, delete, port, and object to the processing of your data. Email privacy@e-expat.com and we will respond within 30 days.
8. Security
Documents are encrypted at rest. Access is role-gated and audited. Should a breach affect your data, we will notify you and the relevant supervisory authority within 72 hours.
9. International transfers
Some of our processors operate outside the EU. Where this is the case, we rely on Standard Contractual Clauses approved by the European Commission.
10. Updates
We will update this policy as our practices evolve. Material changes will be communicated by email.