# Babete — Privacy Policy

> Read our privacy policy to understand how we collect, use, and protect your personal data.

**Canonical URL:** https://www.babete.pt/en/privacy
**Markdown URL:** https://www.babete.pt/en/privacy.md
**Language:** en
**Entity:** Babete (https://www.babete.pt)
**LLMs Index:** https://www.babete.pt/llms.txt
**Last updated:** 2026-03-31

---

At Babete, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

---

## 1. Information We Collect

### Personal Information
- Email address and full name (when you sign up)
- Profile information you provide
- User-generated content (campaigns, personas, messaging, and related materials)

### Technical Information
- IP address and user agent
- Browser type and device information
- Activity logs and usage data
- Performance metrics and error logs

### Cookies and Similar Technologies
- Authentication tokens (essential)
- User preferences (theme, settings)
- Analytics cookies (with your consent)
- Session data used for platform functionality

## 2. How We Use Your Information

- To provide and maintain our service
- To authenticate and authorize your access
- To improve our platform and user experience
- To analyze usage patterns and performance
- To communicate important updates
- To detect and prevent fraud or abuse
- To comply with legal obligations

## 3. Data Security

- End-to-end encryption for data in transit (HTTPS/TLS)
- Encryption at rest for stored data
- Row-level security policies on all database tables
- Secure authentication via Supabase
- Regular security reviews and updates
- SOC 2 Type II compliance at the Supabase infrastructure layer

## 4. Data Retention

- **User Data:** Retained while your account is active
- **Activity Logs:** Retained for 90 days and then archived
- **Analytics Data:** Aggregated and anonymized after 6 months
- **Deleted Accounts:** Permanently deleted within 30 days

## 5. Your Rights

- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your account and data
- Withdraw consent for non-essential cookies
- Export your data where applicable

To exercise these rights, visit your [Account Settings](https://www.babete.pt/settings) or contact us.

## 6. Third-Party Services

We rely on the following third-party services:

- **Supabase:** Database, authentication, and storage
- **Google OAuth:** Optional authentication method
- **OpenRouter/OpenAI:** AI request processing when applicable

These providers maintain their own privacy policies and data processing practices.

## 7. International Data Transfers

Your data may be processed outside the European Economic Area when our service providers operate in other jurisdictions.

- Standard Contractual Clauses and other appropriate safeguards
- Technical and organizational security measures
- Ongoing review of the protections offered by our providers

## 8. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, contact us using the email address below.

- **Email:** privacy@babete.pt
- **Support:** support@babete.pt

## 9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date and highlight material changes through our usual communication channels.

---

## AI Agent Discovery & WebMCP Protocols

- **llms.txt:** https://www.babete.pt/llms.txt
- **API Catalog (RFC 9727):** https://www.babete.pt/.well-known/api-catalog
- **Agent Skills Index:** https://www.babete.pt/.well-known/agent-skills/index.json
- **MCP Server Card:** https://www.babete.pt/.well-known/mcp/server-card.json
- **OAuth / OpenID Discovery:** https://www.babete.pt/.well-known/openid-configuration
- **Sitemap:** https://www.babete.pt/sitemap.xml
- **WebMCP Tool `search_urban_regulations`:** https://urbanismo.babete.pt?q={query} (RGEU, RJUE, PDMs, SIMPLEX DL 10/2024 & DL 108/2026)
- **WebMCP Tool `search_condo_law`:** https://condominio.babete.pt?q={query} (Código Civil Art. 1414.º–1438.º-A, Portaria 282/2013, RGR)