← Back

Privacy Policy

Last updated: June 2026

1. Data controller

TugAgil — Associação Portuguesa de Agilistas is the data controller for personal data collected through this platform. For privacy-related questions, contact us at info@tugagil.com.

2. Data we collect

We collect the following personal data:

  • Email address — required for authentication and access control.
  • Name — provided via social login (Google or Microsoft), if applicable.
  • Last login timestamp — recorded automatically after authentication.
  • Support data — name, email, and message when you submit a support request.

We do not collect payment data. Transactions related to the RSG event were processed by the event organisation, not by this platform.

3. Purpose and legal basis

Your data is used exclusively for:

  • Authenticating your access to the platform (legal basis: contract performance — Art. 6(1)(b) GDPR).
  • Verifying that you have valid, non-expired access to the videos (legal basis: contract performance).
  • Responding to support requests submitted by you (legal basis: consent).

We do not use your data for marketing, profiling, or sharing with third parties for commercial purposes.

4. Sub-processors and third parties

To operate this platform, we rely on the following third-party services, each with their own privacy policy:

  • Supabase — database and authentication (EU servers).
  • Vercel — application hosting.
  • Bunny.net — video hosting and delivery.
  • Resend — transactional emails (magic link and support notifications).
  • Google — authentication via Google OAuth, if you choose that option.
  • Microsoft — authentication via Microsoft OAuth, if you choose that option.
  • Sentry — error monitoring (may capture session data on errors).

5. Data retention

Your email is kept in our database for 1 year from the RSG event date, during which you have access to the videos. After that period, access expires. You may request deletion of your data at any time (see section 6). Support requests are retained as long as they are relevant for managing the request.

6. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Access — know what data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request removal of your data.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing in certain circumstances.

To exercise any of these rights, contact us at info@tugagil.com. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).

7. Security

Video access is protected by short-lived tokens generated server-side. Authentication is managed by Supabase with support for magic links and OAuth. Database access is protected by row-level security (RLS) policies.

8. Changes to this policy

If we update this privacy policy, we will publish the new version on this page with an updated date. Significant changes will be communicated by email.