Documentos legales que rigen la Plataforma

What we collect and why

For citizens: When you register via your country's eID system, the Platform receives identity attributes from your eID provider. These are immediately processed through a one-way cryptographic hash (SHA-256 with a seasonal salt). The Platform stores only the resulting fingerprint. Your name, ID number, date of birth, and other personal identifiers are never stored.

Your civic judgments (trust or distrust toward specific officials) are stored in anonymized form, linked only to your cryptographic fingerprint. We store your current judgment per official — not the history of changes.

Your email address (if provided for waitlist or notifications) is stored separately from your judgment data and can be deleted independently.

For officials (monitored subjects): We collect and publish publicly available information about officials exercising governmental authority: name, position, institution, jurisdiction, and authority level. This information is sourced from official government records and public databases.

For subscribers: We collect billing information (processed by Paddle) and account credentials. Billing data is not linked to judgment data.

Legal basis for processing

• Citizen judgment data: Legitimate interest (Article 6(1)(f) GDPR) — providing continuous accountability infrastructure in the public interest.
• Official profile data: Legitimate interest and public interest — officials exercising governmental authority are subjects of legitimate public scrutiny.
• Subscriber billing data: Contract performance (Article 6(1)(b) GDPR).
• Waitlist email addresses: Consent (Article 6(1)(a) GDPR), withdrawable at any time.

Data storage and residency

Citizen data for each country is stored on servers within that country's territory wherever possible. Where national infrastructure does not yet meet the Platform's security, uptime, and compliance requirements, data is stored within the EU in jurisdiction-appropriate infrastructure. In no case does citizen data leave the EU. National deployments are fully isolated.

AGPT Ltd is the data Controller for all national Platforms. Cloud infrastructure providers operate as Sub-processors under data processing agreements.

Data retention

• Citizen fingerprints: Retained while the account is active. Deleted permanently upon account deletion.
• Cryptographic salt: Rotated annually. Old salts permanently deleted after two years.
• Aggregated indices: Retained indefinitely as public statistical data. Cannot be traced to individuals.
• Subscriber billing data: Retained as required by UK tax and accounting law (typically 6 years).
• Waitlist emails: Retained until you unsubscribe or the waitlist period ends.

Your rights under GDPR

• Access (Article 15) — request a copy of data associated with your account.
• Rectification (Article 16) — correct inaccurate data.
• Erasure (Article 17) — delete your account and all associated data permanently.
• Restriction (Article 18) — request that we limit processing.
• Data portability (Article 20) — receive your data in a structured format.
• Object (Article 21) — object to processing based on legitimate interest.
• Lodge a complaint with your national data protection authority.

Because the Platform uses irreversible hashing, most personal data is not stored in identifiable form. Account deletion removes all linkable data permanently.

To exercise your rights: Contact privacy@teisond.com. We respond within 30 days as required by GDPR.

International transfers

Citizen judgment data is not transferred outside the EU. AGPT Ltd (UK) accesses only aggregated, non-personal statistical outputs. The UK has an EU adequacy decision for data protection purposes.

Sub-processors

We use: cloud infrastructure providers (EU-based data centers), payment processor (Paddle), identity verification provider (Veriff), email service provider (for waitlist and notifications only). A current list is available upon request at privacy@teisond.com.