Draft — pending legal review. This document is not yet the published policy.

Privacy policy

Draft prepared: 9 September 2026

This notice describes how Lobby handles personal data when providing condominium management tools.

Privacy questions: privacy@lobbyapp.pt
Service support: support@lobbyapp.pt

1. Who is responsible

Lobby is a condominium management project in development. For condominium records, the condominium or its administrator determines why residents’ data is used; Lobby processes those records to provide the service under the applicable agreement. Lobby’s operator is responsible for its own account administration and service communications. Controller identification remains subject to review before this notice is finalized.

2. Information processed

Information may include names, email addresses, account details, building and unit details, resident and contractor information, quotas, payments, expenses, balances and related notes. Administrators provide condominium records; users provide account and support information. Connected banks and uploaded statements provide financial information when those features are used.

3. Purposes and legal grounds

Data is used to provide accounts and requested features, administer access, support users and protect the service. Depending on the relationship and purpose, processing relies on performance of a contract, legal obligations or legitimate interests in operating and securing the service. The condominium or administrator must determine and communicate the legal grounds for its resident records. Optional bank access requires the account holder’s authorization; that authorization is distinct from the legal basis for processing condominium records.

4. Bank connections

When an authorized user connects an account through Enable Banking, Lobby can retrieve account information, balances and transactions for review and import. Lobby does not initiate payments. Authentication takes place through the bank’s flow. Disconnecting stops further retrieval through that connection; records already imported into the condominium ledger are not automatically deleted.

5. Statement processing and AI

Statement text and transaction information may be sent to OpenAI or Google Gemini to extract transactions and suggest matching rules. Suggestions require user review and may contain errors. Upload only information you are authorized to process and avoid unnecessary personal information. Parsed transactions and suggestions may be stored to support later review and imports.

6. Service providers and disclosures

Lobby uses Supabase for application data and authentication, Vercel for hosting and usage/performance telemetry, Resend for service email, Cloudflare for DNS and incoming email forwarding, and Google Gmail for receiving and handling support and privacy correspondence. Enable Banking and the selected bank participate in bank connections; OpenAI and Google Gemini support AI-assisted processing. Data relevant to a feature is processed by its providers. Authorized condominium users can access records according to their permissions. Data may also be disclosed where required by law.

7. Storage, transfers and retention

Before publication, the operator must confirm its provider agreements, processing locations and any safeguards for transfers outside the European Economic Area. Retention depends on the purpose, account relationship, condominium instructions and applicable legal duties. The operator must also confirm deletion and backup retention arrangements. Disconnecting a bank account or ending access does not itself erase accounting records.

8. Browser storage and telemetry

Lobby uses browser storage for authentication and preferences such as language and selected workspace. Vercel Analytics and Speed Insights provide usage and performance telemetry. These support understanding site use and diagnosing performance; their processing is subject to Vercel’s privacy documentation.

9. Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data and object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. For condominium records, contact your condominium administrator first. For privacy questions or requests, email privacy@lobbyapp.pt. You may complain to the Portuguese supervisory authority, CNPD, at www.cnpd.pt.

10. Changes to this notice

This notice will be updated when relevant processing changes. The published version will identify its effective date and verified contact details.