Privacy Policy

Tech Companies Portugal ("we", "us", or "our") operates an open directory of tech companies hiring in Portugal. This Privacy Policy explains how we handle information when you visit our website.

We are committed to being transparent about our data practices. We collect only what is necessary to operate and improve the Service, and we do not sell personal data to third parties.

We collect minimal data required to run the Service. This includes:

• Usage data — pages visited, search queries, and interactions with the directory, collected in aggregate and anonymised form via our analytics provider
• Technical data — browser type, device type, and approximate geographic region derived from IP addresses (not stored in identifiable form)
• Voluntary submissions — if you submit a company listing or contact us, we may retain the information you provide for the purpose of processing your request

When you create an account via OAuth sign-in (GitHub or Google), we receive and store your email address, display name, and profile picture from your identity provider. Anonymous visitors to the directory do not have any personally identifiable information collected or stored.

We use PostHog to understand how visitors use the Service. PostHog collects anonymised event data such as page views and feature interactions. This data helps us improve the directory experience.

PostHog is configured in “identified-only” mode: anonymous visitors are not individually profiled. Authenticated users may be associated with their activity within PostHog. No sensitive personal data (passwords, payment info) is sent. For more information, see the PostHog Privacy Policy.

We use a minimal number of cookies and browser storage mechanisms to support core functionality:

• Analytics cookies — set by PostHog to distinguish unique sessions and measure usage patterns
• Preference storage — local storage may be used to remember UI preferences such as theme or filter state
• Session cookies — set by Supabase to maintain your login session when you sign in; cleared when you sign out or delete your account

We do not use advertising, tracking, or third-party marketing cookies.

The Service integrates with the following third-party providers, each with their own privacy practices:

• Supabase — used for database and authentication infrastructure
• PostHog — used for product analytics
• Vercel — used to host and serve the application; may process IP addresses as part of request handling
• Plunk — used to send transactional and notification emails (welcome email on sign-up and weekly digest for opted-in users)
• Arcjet — used for rate limiting and security protection; processes request metadata but does not store personal data
• Upstash Redis — used for server-side caching; does not store personal data
• Inngest — used to process background jobs such as sending weekly digests; handles user IDs and email addresses to dispatch emails
• Logos.dev — used to fetch company logo images based on domain names; no personal data is involved

We encourage you to review the privacy policies of these providers if you have concerns about how they handle data.

Under applicable data protection law, including the GDPR where relevant, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Lodge a complaint with a supervisory authority

Because we collect very little personal data, most requests can be handled quickly. To exercise any of these rights, please contact us via the channels listed in Section 9.