Privacy
Last updated: 19 October 2026
This notice explains how Kastor handles data on the public website, in the resident app, and while providing condominium administration and operations services.
Controller and contact
The data controller is KASTOR ADMINISTRAÇÃO DE CONDOMÍNIOS, LDA, Portuguese company tax number 519651413, trading as Kastor. Registry: Conservatória do Registo Comercial Lisboa. Registered office and mailing address: Alameda 25 de Abril nº 11 A, 2855-211 Corroios, Portugal (correspondence only, no customer reception). For privacy questions or to exercise your rights, email hello@kastor.pt.
Data and purposes
On the public website, we process the contact details, condominium role, and request information needed to respond and prepare a review. In the app and service, we may process account and authentication data, building and unit associations, contact details, dues, transactions and payment status, requests, messages and attachments, incidents, documents, meetings and votes, language and notification preferences, and technical device identifiers. We use this data to provide the service, maintain operational and accounting records, respond to residents, manage incidents, communicate updates, and protect the platform. For the newsletter, we process email, language, and consent, confirmation, and cancellation records.
Proposal questionnaire and optional maps
Your proposal draft stays in your browser's session storage. To finish the questions and download the PDF, we ask for your name, email and permission to contact you about the proposal. We save those contact details, your answers and indicative proposal in Kastor's system to review and follow up on the request, and notify the team by email. To prepare the PDF, we send the answers needed for the document to our server. Your contact details and private notes do not appear in the shared PDF. This request does not subscribe you to the newsletter. Typing in the address field sends the search text to Photon (Komoot) for automatic suggestions. You can turn suggestions off and enter the address manually. The map loads only after your choice and shares the displayed area and your IP address with OpenFreeMap. You can always enter the address manually. The entire questionnaire is excluded from session recording; consented analytics receives only actions and broad categories, without addresses, coordinates, contact details, or free text.
Legal basis
Building review requests are processed to answer pre-contractual enquiries. App and operations data is processed where necessary to perform the administration contract, comply with legal duties, protect people and property, or pursue legitimate interests in organizing, securing, and improving the service, balanced against individual rights. The newsletter and optional analytics rely on separate consent. Notification permission can be refused or withdrawn in the device and app settings.
Retention
Building review request data is kept for up to 12 months after the last interaction unless it leads to a contract. App and operations records are kept during the administration relationship and afterwards for as long as needed for accounting, tax, legal, security, evidence, and claims obligations. Messages, attachments, and device identifiers are deleted or anonymized when no longer needed, subject to those duties. Newsletter data is kept until cancellation; afterwards, we keep only the minimum opt-out record.
Service providers
We use hosting, database, email, notification, artificial-intelligence support and, when authorized, measurement providers: currently Vercel, Neon, Resend, Expo, Anthropic, PostHog, and Google Analytics. The PostHog project is configured in the European Union. Each provider receives only the data needed for its service and is subject to applicable contractual and transfer safeguards. We do not sell personal data.
Automated assistance and human review
Kastor may use artificial-intelligence systems to classify requests, summarize information, and prepare replies or next steps. Decisions that create significant commitments, such as hiring or paying suppliers, reaching legal conclusions, or closing sensitive cases, remain subject to human review. You can request administration involvement in the conversation or at hello@kastor.pt.
Optional analytics and campaigns
PostHog and Google Analytics are not loaded before you make a choice. If you allow analytics, we measure only public pages and essential actions, without sending names, emails, addresses, fractions, messages, or form fields. PostHog session recording, when enabled, excludes forms and private areas and masks every input. Campaign attribution and advertising click identifiers require a separate choice. You can change or withdraw these choices through Preferences in the footer.
Your rights
You may request access, correction, erasure, restriction, or portability of your data and object where applicable. You may withdraw newsletter consent at any time without affecting prior processing. You may also complain to Portugal's data protection authority, the CNPD.