PRIVACY POLICY
YURIX Platform
1. Introduction
This Privacy Policy describes how IMD – Consultoria e Inovação, Lda. processes personal data in the context of providing and using the YURIX platform.
2. Identity of the Data Controller
Entity: IMD – Consultoria e Inovação, Lda.
Brand / Platform: YURIX (Nordangle)
Contact: hello@nordangle.com
3. Roles in Data Processing
3.1 Data of YURIX Users
Regarding personal data of platform users, IMD generally acts as the Data Controller.
3.2 Data Entered by YURIX Clients
Regarding personal data entered into the platform by clients, IMD acts as a Data Processor.
4. Categories of Personal Data Processed
4.1 Identification and Account Data
- Name
- Email address
- Phone number
- Access credentials (encrypted)
4.2 Professional Data
- Role
- Organization
- User profile
- Activity logs on the platform
4.3 Data Entered by Clients
- End-client data
- Data contained in cases, documents and communications
- Potentially sensitive data, as defined by the Client
4.4 Technical Data
- IP address
- Access logs
- Device and browser data
- Security and audit data
5. Purposes of Processing and Legal Basis
| Purpose | Legal Basis |
| Provision of the YURIX service | Contract performance |
| Account and access management | Contract performance |
| Security, audit and fraud prevention | Legitimate interest |
| Billing and financial management | Legal obligation |
| Support and operational communications | Contract performance |
| Platform improvement | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
6. Subprocessors and Technology Providers
- Supabase – backend platform, database, authentication and storage
- Amazon Web Services (AWS) – underlying cloud infrastructure used by Supabase
- Cloudflare – edge services, security, performance and frontend hosting
- Artificial Intelligence providers, when used by the Client or by the platform
7. Location and Data Transfer
Personal data is stored in cloud infrastructures, mostly located in the European Union.
8. Data Retention
- During the contractual relationship
- During legally required periods
- In the case of a trial period, as described in the Terms and Conditions
- After cancellation, for a limited period for export purposes or legal obligations
9. Data Subject Rights
- Access personal data
- Rectification of inaccurate data
- Erasure of data
- Restriction of processing
- Object to processing
- Data portability
- Withdraw consent, where applicable
10. Data Security
IMD implements appropriate technical and organizational measures to protect personal data, including encryption, access controls, multi-factor authentication, security logs and monitoring.
11. Cookies and Similar Technologies
The use of cookies and similar technologies is regulated in a separate document.
12. Changes to the Privacy Policy
IMD reserves the right to change this Privacy Policy at any time.
13. Contacts and Complaints
📧 hello@nordangle.com