Kangaroo Files, Lda, NIPC 517811278, headquartered at Praceta do Castelo, Centro de Negócios de Sequeira, Pavilion C5 Sequeira - Braga 4705-629 Braga, is the entity responsible for processing your personal data. For any questions related to data protection, you can contact us at kangaroo@kangaroofiles.com.

Depending on how you interact with our platform, we may collect: Contact name and email address Company name, VAT number and billing details Technical data such as IP address, browser type and access logs

We use your personal data to: Create and manage your user account Provide secure access to our platform Process payments and issue invoices Comply with legal obligations Improve our platform and ensure its security

We adopt appropriate technical and organizational measures to protect your personal data, including: Local encryption of documents before storage End-to-End encryption in the 'Vault' area, ensuring that only the accountant and client have access to the content Data storage on servers located in the European Union, with redundancy across two countries for added security

Your personal data may be shared with: Service providers essential to our operation, such as technology infrastructure providers (e.g. Heroku/Salesforce) Payment processing platforms (e.g. Lemon Squeezy) We ensure these providers adopt data protection measures compliant with the GDPR.

Data required for billing and payments may be transferred to the United States of America via the Lemon Squeezy platform. These transfers are carried out with appropriate security safeguards in place.

Under the GDPR, you have the following rights: Access your personal data Rectify incorrect or incomplete data Erase your data ('right to be forgotten') Restrict the processing of your data Object to data processing Data portability To exercise any of these rights, contact us at kangaroo@kangaroofiles.com.

We retain your data only for the period necessary to fulfill the purposes for which it was collected or for as long as required by applicable legal obligations.

We may update this Privacy Policy as needed to reflect legal changes or improvements to our services. The updated version will be published on this website along with the revision date.

This Privacy Policy was prepared in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and with Law no. 58/2019 of August 8, which ensures its implementation under Portuguese law.