Privacy Policy

Your privacy

tcg.crm is an inventory and sales management application developed by Kapta (ABSOLUTEPIXEL UNIPESSOAL, LDA). This policy explains which personal data is processed when you visit the public website or use the application.

For privacy questions or to exercise your rights, contact Kapta at comercial@kapta.pt. If you use tcg.crm on behalf of an organisation, that organisation may also be responsible for the information entered into its account.

Personal data we process

We process the account information you provide: name, email address, password in hashed form, organisation name and subscription status. We also process the operational data you add to the application, such as product, inventory, sales, supplier, customer and support-ticket information.

When you request password recovery, we generate a single-use security token, store only its hash and remove it after use or expiry.

To keep the service secure and working, we also process technical information necessary for authentication, session management, language and theme preferences, as well as communications between your browser and our servers.

Why we use this data

We use your data to create and manage the account, provide inventory and sales features, process subscription requests, answer support requests, keep the service secure and comply with applicable legal obligations.

The applicable legal bases may include performance of a contract, compliance with legal obligations, legitimate interests in service security and improvement, and consent for optional cookie categories.

Cookies and similar technologies

Strictly necessary technologies are used to maintain your session, protect forms, remember language and theme preferences, and record your cookie choices. They are necessary for the website and application to work.

Analytics and marketing technologies are not loaded by default. If they are introduced in the future, they will only be activated after consent through the cookie manager. You can accept, reject or change optional preferences at any time.

Service providers and international transfers

We may use service providers that process data on our behalf, including hosting and infrastructure providers, Fontshare to deliver public-site fonts, email delivery services and Stripe for subscription payments. Stripe is responsible for processing payment details; tcg.crm does not store card numbers.

Some providers may process data outside the European Economic Area. Where that happens, appropriate safeguards required by applicable data-protection law are used.

Retention

We retain account and operational data for as long as the account is active and for the period needed to meet legal, accounting, security and dispute-resolution obligations. Support communications are retained only for the period necessary to respond and maintain an auditable support history.

When data is no longer required, it is deleted or anonymised securely, subject to any legal retention requirement.

Security

We apply technical and organisational measures designed to protect data, including authenticated access, password hashing, access controls, encrypted communications when HTTPS is available, and server-side protections. No system can guarantee absolute security, but we continuously work to protect the service.

Your rights

Subject to the applicable conditions, you can request access, rectification, erasure, restriction, portability or object to certain processing. You can also withdraw consent for optional cookies without affecting processing carried out before withdrawal.

You may contact comercial@kapta.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or another competent supervisory authority.

Changes to this policy

We may update this policy when the service, legal requirements or our processing practices change. The current version is always available on this page.