PRR · Aviso N.º 21/C16-i02/2025 · Vouchers para Startups - Novos produtos digitais/tecnológicos

PRR Communication - Project 22995

Public information regarding the PRR-supported development of PureRand by 143, LDA.

Project information

Project 22995 is supported under the Portuguese Recovery and Resilience Plan (PRR), Aviso N.º 21/C16-i02/2025 - “Vouchers para Startups - Novos produtos digitais/tecnológicos”.

Beneficiary
143, LDA

Region
Lisboa

Total eligible investment
€ 32.000,00

EU financial support (PRR)
€ 30.000,00

Objective and expected results

Project objective: Development of a verifiable quantum randomness digital platform to support transparent, secure and auditable digital decision processes.

Expected results:

Multi-source quantum entropy engine.
Verifiable randomness API.
Digital infrastructure for AI, cryptography and research applications.

Ficha de Projeto / Project Sheet

The official project poster / project sheet contains the project identification, objectives, expected results, eligible investment and European Union financial support.

Open Ficha de Projeto / Cartaz (PDF)

This project is funded by the Recovery and Resilience Plan (PRR) and the European Union - NextGenerationEU.

recuperarportugal.gov.pt

1) Data Controller (website visitors)

For processing on this website (e.g., contact requests and basic security logs), the data controller is:

PureRand.com is a trade name of 143 LDA

Caminho Outeiro do Bezerro 126

2655-077 CARVOEIRA MFR

Lisbon, Portugal

VAT: PT-517916959

2) Contact (privacy / GDPR)

For privacy-related questions or requests (access, deletion, objection, portability), contact us via /contact/ and include “Privacy / GDPR request”.

3) Scope & roles (website vs API)

Website visitors: PureRand acts as a controller for website-related processing.
Registered users / API platform: we process account data (e.g., email and internal identifiers) to provide access, security, and support. If a customer uses PureRand to process personal data (depending on their use case), the customer is typically the controller and PureRand the processor.

4) What data we process

Contact form: name, email, message content you submit (delivered to an IMAP mailbox on our NL server).
Registered users: account email, internal user ID, plan and usage metadata.
Operational & security logs: request metadata, IP address, user agent, timestamps for security, abuse prevention, and reliability (stored on our NL infrastructure).

5) Purposes & legal bases (GDPR)

Provide the service (contract necessity, Art. 6(1)(b)).
Operate and secure the website and infrastructure (legitimate interests, Art. 6(1)(f)).
Respond to enquiries (your request + legitimate interest in responding).
Legal obligations where applicable (Art. 6(1)(c)).

6) Blockchain anchoring

We may anchor certain records on-chain. On-chain data is designed to be anonymous/pseudonymous (e.g., hashes/commitments), and is not intended to directly identify a person.

Without the relevant reference (e.g., a verify hash/reference), on-chain anchors are not meaningful for third parties. For registered users, we can link internal identifiers to the user account off-chain to provide the service and support audits. Note: public blockchains generally do not allow deletion; we therefore avoid placing direct identifiers on-chain.

7) Subprocessors

We use a minimal set of third parties to operate the service:

Provider	Purpose	Data categories	Location
mijn.host	Infrastructure hosting (green energy)	Account data, service logs, website hosting	Netherlands (EU)

8) International data transfers

We operate and store our primary service infrastructure in the EU (Netherlands). We do not intentionally transfer website or account data outside the EU for hosting, email handling (IMAP), or logging.

9) Data retention (typical)

Security & access logs: typically 30–90 days (rotated/deleted) unless needed for incident investigation.
Account data: for the life of the account; deleted upon request where applicable, subject to operational/security constraints.
Contact messages: up to 24 months to support follow-ups, unless you request deletion sooner.
On-chain anchors: not erasable; we avoid direct identifiers on-chain.

10) Cookies

We use only strictly necessary cookies/localStorage for core functionality and security. We do not use analytics cookies at this time.

11) Security overview

TLS for web and API traffic
Access controls and least privilege
Monitoring and logging for abuse prevention and reliability
Data minimisation by design

These Terms of Service govern your use of the PureRand website and, where applicable, the PureRand API. By using this site you agree to these terms. Separate terms may apply to the API and dashboard.

Use of the website

This website is provided on an “as is” and “as available” basis.
You agree not to misuse the site, attempt to gain unauthorised access, or interfere with its security.

Use of the API

Access to the API and dashboard requires an account and acceptance of additional terms provided at sign-up. In general:

You are responsible for protecting your API keys and credentials.
You must comply with applicable laws and regulations when using the API.
We may suspend or limit access in case of abuse, security concerns or legal obligations.

Service Reliance and Availability

The core function of the PureRand API relies on two independent, third-party quantum randomness setups. PureRand does not own or directly control this quantum hardware. Consequently, the Service's availability and the quality of its entropy stream are directly dependent on the operational status and proper functioning of these external setups. We cannot guarantee or predict the uptime, maintenance schedules, or successful operation of these third-party quantum sources. While we strive to maintain connectivity and automatically failover to a high-grade CSPRNG when quantum sources are unavailable, PureRand is not liable for any interruption, cessation, or delay in the Service resulting from the failure of these external providers.

Disclaimer of Warranties

PureRand expressly disclaims all warranties of any kind, whether express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. PureRand makes no warranty that the Service will be error-free, completely secure, or that the entropy provided will meet the statistical or randomness requirements of the User's specific application. The User assumes all risk and responsibility for determining the suitability of the API for the User's intended use.

Liability

We strive to keep the service secure and reliable, but we do not guarantee that it will be error-free or uninterrupted. To the maximum extent permitted by law, PureRand's total aggregate liability arising out of or related to these Terms, whether in contract, tort (including negligence), or otherwise, shall not exceed the greater of: (i) the total fees paid by the User to PureRand in the twelve (12) months preceding the claim, or (ii) One Hundred Euros (€100.00). In no event shall PureRand be liable for any indirect, incidental, special, punitive, or consequential damages arising from the use or inability to use the API.

Changes

We may update these terms from time to time. The date of the latest version will be indicated here. Your continued use of the site after changes are published means you accept the updated terms.

Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of Portugal, without regard to its conflict of law principles. The parties agree that any dispute arising out of or in connection with these Terms, which cannot be resolved amicably, shall be submitted to the exclusive jurisdiction of the competent courts located in Lisbon, Portugal.

Contact

For questions regarding these terms, please contact us.