Privacy Policy

Last updated: 2 May 2026

Who we are

UnShare is a product operated by URSO INVENCÍVEL - UNIPESSOAL LDA (“we”, “us”), a company registered in Portugal (NIPC 519337867). For GDPR purposes we act as the data controller for personal data described in this policy. Contact: hello@unshare.io. The legal notice (imprint) with registered address and VAT number is on our Terms & legal notice page.

What this policy covers

This policy covers the unshare.io marketing site (including the waitlist form) and the UnShare application (mobile and web builds) when you use them. Different parts of the service may process different categories of data; we describe them below in plain language.

Data we collect

  • Marketing site & waitlist: If you join the waitlist, we collect the email address you submit and your consent record. Submissions are sent to Formspree, which processes them on our behalf (including optional autoresponse email if enabled) according to Formspree’s documentation and terms.
  • Site preferences: The marketing site may store your language choice (unshare-locale) in your browser’s local storage so the page remembers PT/EN.
  • Email and support: If you email us, we process your address, message content, and technical headers as needed to respond and to keep minimal business records.
  • UnShare account & app usage: If you create an account or sign in, we process identifiers and authentication data from your chosen identity provider (for example Google or Microsoft) as configured in the app, a session token (JWT) issued by our FastAPI backend, and progress data (for example which privacy steps you marked complete) stored in PostgreSQL.
  • Connect (email providers): If you use “Connect” to review where your email appears with providers, OAuth tokens and audit results are processed by our backend and providers you authorise, so we can show you linked accounts and settings. We only use this for the functionality you trigger.
  • Device storage: The app stores tokens and preferences using the platform’s secure or local storage (for example SecureStore on native builds and localStorage on web) so you stay signed in and the UI can function offline where designed to.
  • Server and security logs: Our hosting and infrastructure providers may log technical data (such as IP address, timestamps, URLs, and user agent) when you access the site or API. We use logs for security, debugging, and abuse prevention.
  • Analytics on this marketing site: We do not load third-party analytics or advertising scripts on the static marketing pages. If that changes, we will update this policy and, where required, ask for consent before enabling tracking.

Purposes and legal bases (GDPR)

  • Contract — to provide the app, account, waitlist signup, and support you request.
  • Legitimate interests — to secure the service, prevent abuse, improve reliability, and understand aggregate use of our own infrastructure, where we do not rely on consent and our interests are not overridden by your rights.
  • Legal obligation — to retain certain records where tax, accounting, or regulatory rules require it.
  • Consent — where we rely on consent (for example marketing communications beyond the single waitlist email you signed up for, or optional analytics if we add them), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Processors and sharing

We use service providers that process data on our instructions, including for example:

  • Netlify — static hosting and security headers for unshare.io.
  • Formspree — waitlist form submissions (email and consent) for the marketing site.
  • Cloud / database providers — infrastructure and PostgreSQL used by the UnShare API backend.
  • Google and Microsoft — when you choose them for sign-in or Connect, their identity and API services process data under their terms and your account settings with them.

We do not sell your personal data.

Cookies and similar technologies

A detailed table for cookies and local storage is on our Cookie policy page.

Retention

We keep data only as long as needed for the purposes above. Waitlist and support correspondence are kept for a reasonable period to operate the launch and respond to you. Account and progress data are kept while your account exists and deleted or anonymised when you delete your account, except where we must retain minimised records for legal reasons. Provider logs follow their own retention schedules.

Your rights (EEA / UK)

You may have the right to access, rectify, erase, restrict, object to certain processing, data portability, and to lodge a complaint with a supervisory authority (in Portugal, the CNPD). To exercise rights, email hello@unshare.io. Erasing your account in the app does not automatically erase data held by Google, Microsoft, or other processors; you may exercise rights with them directly or ask us to help coordinate where feasible.

International transfers

Some providers may process data outside the EEA or UK. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or UK equivalent mechanisms offered by our providers.

Digital Services Act and illegal content

If you believe content we publish is illegal under applicable law, contact hello@unshare.io with enough detail to locate the material. We are not a large-scale user-generated content platform; this channel is for good-faith reports about our published pages. Final procedures should be confirmed with counsel for your role under the DSA and national law.

Automated decisions and AI

We do not use your personal data for solely automated decisions with legal or similarly significant effects. If we add optional in-product assistance that processes personal inputs, we will describe it here and in the app before it processes your data in a new way.

Children

UnShare is not directed at children under 16. We do not knowingly collect their personal data.

Changes

We may update this policy from time to time. The “Last updated” date will change when we do.

Contact

Questions or requests: hello@unshare.io.

← Back to home