Legal

Privacy Policy

Last updated: 24 March 2025 GDPR Compliant

🛡

Your privacy matters to us

CT App Center is operated by Segurança Digital Lda., a company registered in Portugal. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Portuguese law.

1. Who we are

Data Controller: Segurança Digital Lda.

Address: Rua Principal, Nº 74, 3800-326 Aveiro, Portugal

Email: [email protected]

Website: https://ctappcenter.com

We operate CT App Center and CheckTrusted.com as digital security platforms for individuals and businesses.

2. What data we collect

We collect the following categories of personal data:

Account data

Name, email address, password (hashed), plan type, billing address.

Usage data

Scans performed, URLs submitted, scan results, API calls, feature usage and timestamps.

Technical data

IP address, browser type, device type, operating system, referring URL and session data.

Payment data

Billing information processed by our payment provider. We do not store full card numbers — only transaction references.

Community data

Scam reports, trust ratings and reviews submitted voluntarily through our platform.

3. How we use your data

We use your personal data for the following purposes:

✓ To provide and maintain the CT App Center platform and its apps
✓ To process payments and manage your subscription
✓ To send transactional emails (confirmations, invoices, alerts)
✓ To provide customer support and respond to your queries
✓ To improve our threat intelligence database and platform security
✓ To comply with legal obligations under Portuguese and EU law
✗ We do NOT sell your personal data to third parties
✗ We do NOT use your data for advertising purposes

4. Legal basis for processing

Under GDPR, we process your data based on the following legal grounds:

Contract Processing necessary to fulfil our service agreement with you.

Consent Marketing emails and optional analytics — you can withdraw consent at any time.

Legal Obligation Tax records, invoicing and compliance with Portuguese law.

Legitimate Interest Platform security, fraud prevention and threat intelligence improvements.

5. Data retention

We retain your data for the following periods:

Data type	Retention period
Account data	Until account deletion + 30 days
Scan history (Free)	Not stored
Scan history (Pro)	30 days
Scan history (Business)	1 year
Billing records	10 years (Portuguese tax law)
Support tickets	3 years

6. Your rights under GDPR

You have the following rights regarding your personal data:

✓ Right of Access

Request a copy of all data we hold about you.

✓ Right to Rectification

Correct inaccurate or incomplete data.

✓ Right to Erasure

Request deletion of your personal data.

✓ Right to Portability

Receive your data in a structured, machine-readable format.

✓ Right to Object

Object to processing based on legitimate interest.

✓ Right to Withdraw Consent

Withdraw marketing consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies

We use cookies to ensure the platform functions correctly and to analyse usage. For full details see our Cookie Policy. You can manage your cookie preferences at any time via the cookie banner.

8. Third-party services

We use the following third-party services that may process your data:

💳

Stripe

Payment processing · EU data centres · PCI DSS compliant

☁️

OVHcloud

Hosting infrastructure · EU data centres · GDPR compliant

🔒

Cloudflare

DNS, SSL and DDoS protection · Standard Contractual Clauses

9. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. These include SSL/TLS encryption, hashed passwords, access controls and regular security audits. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Portuguese data protection authority:

CNPD — Comissão Nacional de Proteção de Dados

Rua de São Bento, 148-3º, 1200-821 Lisboa, Portugal

Website: www.cnpd.pt

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our platform. The date at the top of this page indicates when it was last updated.

📧

Privacy questions?

Contact our Data Protection team at [email protected]. We respond within 30 days.