This Privacy Policy describes how TraffiSense (referred to as “we,” “us,” or “our”) collects, uses, and protects personal information when you use our website and cloud services (the “Services”). By using the Services, you acknowledge that you have read this policy.
1. Data controller
Processing is performed for the organization registered as a tenant (typically a municipality or agency). For privacy questions relating to your data within that organization, contact the administrator designated by your authority.
2. Information we may collect
May include: account data (name, email, tenant identifier, and roles within the organization); operational data related to projects (names, descriptions, map geometries, analysis outputs, signs, signals, and technical identifiers); and technical data (IP addresses, summarized security logs, browser type, request timestamps) as needed to operate security controls and prevent abuse.
3. Purposes of processing
- Providing the Services to your organization, including studios, projects, and reporting features.
- Authentication, role enforcement (e.g. admin vs engineer), and tenant isolation between customers.
- Performance improvement, fault diagnosis, and security compliance monitoring.
- Legal compliance and response to lawful requests from authorities, where required.
4. Legal bases
Where applicable law requires a basis, we rely on: performance of a contract (the Services), legitimate interests in network and service security, and, where necessary, your consent (for example, optional marketing communications, if any, where you have not opted out).
5. Retention
We retain data for as long as your organization’s relationship with the Service continues and as needed to operate the platform, including backups and archive cycles. When a project or account is deleted in accordance with your permissions and our procedures, we apply steps to delete or de-identify data to the extent technically feasible.
6. Sharing and international transfers
We do not sell your personal data. We may use infrastructure providers and, when enabled, payment interfaces (e.g. Stripe, PayPal) under appropriate agreements. If data is transferred across borders, we apply reasonable safeguards required by applicable law.
Dados de pagamento e subempreiteiros de tratamento
Os processadores de pagamento recebem os dados necessários para autorizar e liquidar transações (tipo de cartão, últimos dígitos, montante e sinais de risco). Não utilizamos dados do cartão para marketing não relacionado.
Os processadores podem operar noutros países com acordos e certificações próprios; selecionamos parceiros que cumprem as expetativas comuns de segurança do setor.
Pode solicitar acesso, retificação ou eliminação de dados pessoais, nos limites das obrigações legais de conservação e contabilidade, conforme descrito nas secções acima.
7. Security
We implement reasonable technical and organizational measures, including authenticated sessions, password hashing, CSRF protection for web forms, and tenant-scoped data design. No system is perfectly secure; your organization is responsible for credentials and user access practices.
8. Your rights
Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction, objection, or portability. Requests related to your organization’s tenant data in TraffiSense should be routed through your authority’s admin or as provided in your agreement.
9. Changes to this policy
We may update this Privacy Policy. The current version is shown in this modal with a “last updated” date. Continued use of the Services after material changes, where your tenant relationship and contract so provide, constitutes acknowledgment of the updated terms.
