Privacy · 19 Sep 2026

What we keep, and why.

What we keep

• Senders: name, email, origin and destination, item description and declared value, size, deadline, reward, and the request's status. The Stripe payment identifier. Never card data.
• Carriers: name, email, route, date, means of transport, room and notes.
• Waiting list: email and the request or trip you left, while payments are closed.
• We don't keep tracking cookies, advertising or third-party analytics. The light/dark theme lives only in your browser.

Why, and on what basis

To match senders and carriers, process payment, record delivery and talk to you about your request or trip: performance of a contract (GDPR art. 6(1)(b)). To meet tax and legal obligations: legal obligation (art. 6(1)(c)). For the waiting list: consent (art. 6(1)(a)), which you can withdraw at any time.

Who we share with

• Stripe, for payment. Stripe is responsible for card data.
• Cloudflare, which hosts the site and the database, in the European Union.
• The other person in the match: the carrier sees the sender's name, the item description and the city; the sender sees the carrier's name, verification and ratings. Emails are shared only after both accept the match.

For how long

Requests and trips: 12 months after closing, then deleted. Payment records: as long as tax law requires (10 years). Waiting list: until you ask to leave or Cyrcle opens, whichever comes first.

Your rights

Access, rectification, erasure, restriction, portability and objection. Write to privacidade@cyrcle.pt. We answer within 30 days. You may also complain to the CNPD, the Portuguese data protection authority.

Controller

Cyrcle (beta), Lisbon, Portugal. ola@cyrcle.pt.