Privacy
Last updated: 13 August 2026
This notice explains how Kastor handles data on the public website, in the resident app, and while providing condominium administration and operations services.
Controller and contact
Kastor is the data controller. For privacy questions or to exercise your rights, email hello@kastor.pt.
Data and purposes
On the public website, we process the contact details, condominium role, and request information needed to respond and prepare a review. In the app and service, we may process account and authentication data, building and unit associations, contact details, dues, transactions and payment status, requests, messages and attachments, incidents, documents, meetings and votes, language and notification preferences, and technical device identifiers. We use this data to provide the service, maintain operational and accounting records, respond to residents, manage incidents, communicate updates, and protect the platform. For the newsletter, we process email, language, and consent, confirmation, and cancellation records.
Legal basis
Building review requests are processed to answer pre-contractual enquiries. App and operations data is processed where necessary to perform the administration contract, comply with legal duties, protect people and property, or pursue legitimate interests in organizing, securing, and improving the service, balanced against individual rights. The newsletter and optional analytics rely on separate consent. Notification permission can be refused or withdrawn in the device and app settings.
Retention
Building review request data is kept for up to 12 months after the last interaction unless it leads to a contract. App and operations records are kept during the administration relationship and afterwards for as long as needed for accounting, tax, legal, security, evidence, and claims obligations. Messages, attachments, and device identifiers are deleted or anonymized when no longer needed, subject to those duties. Newsletter data is kept until cancellation; afterwards, we keep only the minimum opt-out record.
Service providers
We use hosting, database, email, notification, artificial-intelligence support and, when authorized, measurement providers: currently Vercel, Neon, Resend, Expo, Anthropic, PostHog, and Google Analytics. The PostHog project is configured in the European Union. Each provider receives only the data needed for its service and is subject to applicable contractual and transfer safeguards. We do not sell personal data.
Automated assistance and human review
Kastor may use artificial-intelligence systems to classify requests, summarize information, and prepare replies or next steps. Decisions that create significant commitments, such as hiring or paying suppliers, reaching legal conclusions, or closing sensitive cases, remain subject to human review. You can request administration involvement in the conversation or at hello@kastor.pt.
Optional analytics and campaigns
PostHog and Google Analytics are not loaded before you make a choice. If you allow analytics, we measure only public pages and essential actions, without sending names, emails, addresses, fractions, messages, or form fields. PostHog session recording, when enabled, excludes forms and private areas and masks every input. Campaign attribution and advertising click identifiers require a separate choice. You can change or withdraw these choices through Preferences in the footer.
Your rights
You may request access, correction, erasure, restriction, or portability of your data and object where applicable. You may withdraw newsletter consent at any time without affecting prior processing. You may also complain to Portugal's data protection authority, the CNPD.