Clear choices.
No hidden tracking.
This notice explains who is responsible, what the Hub stores, why it is used and which outside services load only after you choose them.
Notice version 26 August 2026Language, saved items and Your Portugal Plan start in local browser storage. A verified account can synchronise plan and saved-item data when you choose.
A form sends the fields shown on that form. Contact details are not published or added to a marketing list.
Sofia and Jitsi load only after a clear action. The Windy embed states that it does not use cookies or tracking.
Controller and contact
Portugal Hub is currently operated by Ruben dos Reis as an individual project using the Itervanta name. Ruben decides why and how personal information is handled and is the controller for Hub submissions.
Email hello@itervanta.com or use the secure contact form for privacy or security matters. Website: itervanta.com.
The service is not directed to children. A person under 16 should not submit a public form without a parent or guardian.
Information the Hub handles
A verified account stores your identity-provider user reference, verified email address, display name, customer or professional account choice, preferred language, synchronised saved items and Portugal Plan. Forms can also store contact messages, consultation requests, professional applications and introductions, nominations, service reviews, event submissions, business invitations, community questions and comments, reports and privacy-rights requests. The exact fields are shown before submission.
Security processing uses a one-way hash derived from a submitted email, device vote token or request address to limit abuse. Raw IP addresses are not copied into the rate-limit table. A random device token prevents repeated “Useful” votes; it does not identify a Hub account.
Normal hosting logs can include IP address, browser, requested URL, time, response status and security events. Do not submit identity documents, tax numbers, medical information, bank or card details, passwords or confidential client files.
Purpose and legal basis
Consultation, introduction and commercial requests are used to take requested pre-contractual steps and, where a service is agreed, to administer it. Community, review and event data is used under the Hub’s legitimate interest in operating a moderated information and discovery service, protecting readers and preventing fraud or abuse. Privacy requests and legally required records are processed to meet legal obligations.
Where legitimate interest is used, the Hub limits the fields, holds public submissions for review and keeps contact details private. You can object where the law permits. Consent is used only where the interface asks for an optional choice; withdrawing it does not affect earlier lawful processing.
No solely automated decision accepts a professional, awards a trust state, publishes content, agrees commercial terms or produces a legal or similarly significant effect.
Publication and sharing
A community display name and contribution, event details, professional profile or moderated review may become public after review. Email addresses, telephone numbers supplied only for moderation, and private enquiry details are not published.
A requested professional introduction is reviewed before contact information is shared with the selected professional. Information is not sold to directory businesses, and payment cannot create Verified or Hub Recommended status.
Hosting and outside services
Cloudflare Sites and D1 provide the primary site and submission database. Vercel provides a second production host and forwards Hub form/API requests to that primary database. These providers process technical and stored information needed to deliver and protect the service.
Clerk provides account creation, verified-email sign-in and secure sessions. It processes the account identity, email address, authentication events and technical data needed to protect the session. Portugal Hub keeps the linked account profile, synchronised plan and saved items in its own database.
Resend sends and receives operational email for hello@itervanta.com. It processes addresses, subjects, message content and delivery information. Inbound messages are copied to the private operations desk; attachment files are not downloaded automatically.
Open-Meteo and IPMA supply weather, marine and safety data through Hub endpoints. OpenStreetMap supplies visible map tiles. Windy supplies the weather animation and states that its embed uses no cookies or tracking. These services receive ordinary connection information when their resources load.
Presença AI supplies Sofia, which loads only after you choose to start the AI assistant. Typed questions, context, language and technical request data can then be processed by Presença AI and its AI infrastructure. If you separately enable voice, microphone audio is sent for speech processing. Jitsi/8x8 supplies appointment video after you enter a valid room and choose to join; its service may process meeting and diagnostic information under its own notice.
Some suppliers or subprocessors may process data outside the EEA under their applicable transfer safeguards. Ask the privacy contact for information about the safeguard relevant to a particular submission.
Retention and deletion
Your account remains until you delete it. Account deletion removes the Clerk identity, Hub account profile, synchronised plan and saved items. Public community contributions linked to the account are anonymised. You can download the account data first. A submitted service record may be kept separately where a legal obligation, contract administration, fraud prevention or legal claim requires it.
Pending or unanswered consultations, applications, introductions, nominations, event submissions, business enquiries, operational email and unpublished community contributions are automatically removed after 12 months under the configured workflow rules. Pending review-verification, report and privacy-request records are removed after 36 months. Rate-limit buckets expire shortly after their security window; pseudonymous vote records are removed after 12 months.
Published material can remain while it serves the public record, subject to valid privacy, safety, legal and editorial requests. Contract, invoicing, fraud-prevention or legal-claim records are retained only for the applicable obligation or limitation period. Backups and provider logs follow the relevant provider lifecycle.
Security and incident handling
Safeguards include HTTPS, restrictive browser headers, verified-email authentication, secure session cookies, same-origin write checks, server-side authorisation and validation, request-size limits, bot-trap fields, rate limits, pseudonymous vote controls, a private operator session and moderation before publication. Access to stored submissions is limited to operational need.
No online service can promise zero risk. Report a suspected security or privacy issue through the secure contact form. A personal-data breach will be investigated, documented and reported to the CNPD and affected people where the GDPR requires it.
Your rights
Subject to the legal conditions, you can request access, correction, deletion, restriction or portability, object to particular processing, and withdraw optional consent. Requests are normally free and answered without undue delay, ordinarily within one month. Limited information may be retained where a legal obligation or overriding lawful reason applies.
Use Privacy controls and data requests or the secure contact form. You can complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or another competent EEA supervisory authority.