Privacy policy

1. Controller

Alternativepurple, Unipessoal Lda, NIPC 516357948, Rua da Mata de São Mateus, Nº 34, Alto de Santa Catarina, 1495-735 Cruz Quebrada - Dafundo, Portugal ("AlternativePurple") is the data controller for personal data processed through Obras. Contact: hello@mudacorp.com.

2. What we collect

Account data: your email address, name and language, and the name of your business. Billing data: handled by Stripe; we receive your subscription status and the last digits of your card, never the full number.

Content you upload or create while using the service. Technical data: server logs with IP address and browser type, kept for security and debugging.

3. Why we process it

To provide the service you subscribed to (contract), to bill you (contract and legal obligation), to keep the service secure (legitimate interest) and, where you consent, to measure the effectiveness of our advertising.

4. Processors

We use Supabase (database and authentication), Cloudflare (hosting and file storage), Stripe (payments), an email delivery provider for transactional email, PostHog (product analytics, hosted in the European Union) and AI model providers that process the text you ask the service to work on. Each acts on our instructions under a data processing agreement.

5. Advertising measurement

Our marketing pages may load the Meta Pixel to measure whether our advertising works. It is not loaded in the application itself. You can block it with your browser settings or an extension; the pages work without it.

To understand how the application is used, we use PostHog: which screens are opened, which buttons are clicked, and session replays in which every piece of text and every field is masked — we see the layout and the clicks, never what you type or what your data says. On our pages PostHog only counts visits, anonymously: no cookie, nothing stored on your device, no recordings and no IP address kept — and nothing at all if your browser sends Do Not Track or Global Privacy Control, or if you turn statistics off at the bottom of this page.

6. Retention

We keep your data for as long as your workspace exists and for thirty days after it is closed, then delete it. Billing records are kept for as long as tax law requires. Logs are kept for ninety days.

7. Your rights

You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and complain to your data protection authority. Write to hello@mudacorp.com and we will answer within one month.

8. Changes

We may update this policy; the date above tells you when. Significant changes are announced in the application.