1. Data Controller
ForestCell is operated by Cloud Aten LDA, registered in Portugal, with office at Escritório 5.07, Av. Atlântico 16, 5.º, 1990-019 Lisboa, Portugal. We are the data controller for the personal data collected through forestcell.com and related services.
Data protection contact: privacy@forestcell.com
2. Data We Collect
- Account data: name, email address, and password hash when you register.
- Profile data: display name, avatar, organisation details, and IBAN (for seeders receiving payouts).
- Contribution data: trees funded, amounts, and payment references.
- Verification data: identity documents and land ownership proofs submitted by seeders.
- Usage data: pages visited, device type, and IP address (via server logs).
3. How We Use Your Data
- To provide the ForestCell platform and process contributions.
- To verify seeder identities and land ownership.
- To send transactional emails (contribution receipts, proof status updates).
- To improve the platform and fix bugs.
We do not sell your personal data. We do not use your data for advertising.
4. Data Storage & Security
Your data is stored on Supabase infrastructure (AWS eu-central-1). Passwords are hashed with bcrypt. File uploads are stored in encrypted cloud storage. We use HTTPS for all communications.
5. Third-Party Services
We share data with these processors, all of which comply with GDPR:
- Stripe: payment processing. Stripe receives your payment details (card info, billing address) directly. ForestCell does not store card numbers. See Stripe's Privacy Policy.
- Supabase: authentication and database (hosted in AWS eu-central-1).
- Mapbox: map display (no personal data shared).
- Resend: transactional email delivery.
6. Your Rights
Under GDPR and LGPD, you have the right to:
- Access, correct, or delete your personal data.
- Export your data in a portable format.
- Withdraw consent for optional data processing.
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact: privacy@forestcell.com or write to Cloud Aten LDA, Escritório 5.07, Av. Atlântico 16, 5.º, 1990-019 Lisboa, Portugal.
Supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt
7. Cookies
We use essential cookies only (authentication session). No analytics or marketing cookies are used.
8. Changes
We may update this policy. Material changes will be communicated via email or in-app notification.