Privacy Policy

Future Proof Wealth Advisors, Unipessoal Lda ("Portfolyou", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Portuguese law.

1. Data Controller

2. Data We Collect

3. How We Use Your Data

• To provide and maintain the Portfolyou platform and its investment tools.
• To authenticate you and manage your account.
• To improve platform features and fix issues based on pseudonymised usage analytics.
• To comply with legal obligations, including EU cofinancing reporting requirements (Portugal 2030 / Centro 2030 programme).
• To send you service-related communications (no marketing emails without your explicit consent).

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Contract: Processing necessary to provide the service you requested.
• Legitimate Interest: Analytics and platform improvement, balanced against your privacy rights.
• Legal Obligation: Compliance with EU and Portuguese regulatory requirements.
• Consent: For any optional cookies or marketing communications.

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes, EU fund programme obligations). Shared links: when you use “Save URL”, we store the tool's values behind a short link, without your name, email, account or IP address. The link is deleted 12 months after it was last opened or, earlier, on request if you send us the link. Encrypted backups are deleted after 90 days.

6. Data Sharing

We do not sell your personal data. We may share it with:

• Cloud infrastructure providers (hosting, databases) under data processing agreements.
• Google (OAuth sign-in) — governed by Google's own privacy policy.
• EU programme auditors and regulators, as required by the Centro 2030 cofinancing programme.

7. Cookies

We use cookies and local storage in your browser in three categories: strictly necessary (always on — they keep you signed in and record your cookie choice itself), functionality (optional — stores your language, questionnaire drafts and saved tool forms) and performance (optional — our own pseudonymised behavioural analytics). Everything we use is first-party: no advertising cookies, no third-party tracking. Without your consent the optional categories write nothing; if you withdraw it, anything stored is erased immediately. You choose in the banner and can change or withdraw your choice at any time under "Cookie Policy" in the footer. The full itemised list — name, host, duration and purpose of each item — is in our Cookie Policy.

8. Behavioural analytics

By understanding where people hesitate, what they change and where they give up, we can make the tools clearer and more useful for every user, guide you toward better-informed investment decisions and gather the raw material for the research this project exists for. So, with your permission — given in a dedicated request, separate from cookies, when you start using the tools — we record how you interact with them: which steps you take, what you change, where you hesitate and what you leave unfinished. This processing is optional; if you do not allow it, the app works exactly the same.

• Purpose and benefit: usage records show us where to improve (for example, at which questionnaire step people drop off), which makes the tools better for you and for others; they also let us guide you with suggestions (nudges) toward better-informed investment decisions, with the aim of helping you become a better investor; and they are the basis of the EU-co-financed research (Centro 2030 / Portugal 2030) that underpins the project.
• Legal basis: your consent (Art. 6(1)(a) GDPR) and, for the research component, Art. 89 in conjunction with Art. 5(1)(e).
• Pseudonymised, not anonymous: we use a random identifier that does not identify you on its own; if you are signed in, it is linked to your account. We use no external services — everything is handled by us (first-party).
• Retention: raw records are kept for up to 5 years, for research purposes only, with the re-identification key stored separately.
• You can withdraw consent at any time, as easily as you gave it, under “Manage behavioural analytics” (in the footer or on the Cookies page). On withdrawal, we stop collecting and delete the stored identifiers.

9. Your Rights

Under GDPR, you have the right to:

To exercise any of these rights, contact us at portfolyou@futureproof.pt. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Portfolyou after changes constitutes acceptance of the revised policy.