Privacy Notice
This notice explains how personal data is processed on the Matravo information website. Account creation and platform use take place in the Matravo portal; the relevant privacy information is presented during registration. Section 8 covers the Matravo mobile apps.
1. Data controller
Matravo is operated by Fusapp OÜ, registered in Estonia. For any privacy-related request, write to [email protected].
2. What we collect
- Existing mailing-list records: the work e-mail, role and consent record you previously supplied. This information website no longer accepts new mailing-list signups.
- Technical and security data: IP address, browser/device type and security logs.
You can choose your preferences for optional analytics in the cookie notice. Analytics and advertising storage in Google tags are denied by default.
3. Purposes and legal bases
- Consent — the mailing subscriptions and optional measurement tools you agreed to. You can withdraw at any time via the unsubscribe link in every e-mail, or by writing to us.
- Legitimate interest — site security and abuse prevention.
4. Processors
- Brevo (EU) — e-mail list and delivery
- Cloudflare — CDN and security
- Scaleway (EU) — hosting
- Google — tag management and analytics when configured
Your personal data is never sold. Active tools and their purposes are described in the cookie and privacy information.
5. Retention
Your e-mail record is kept until you unsubscribe or request deletion; security logs are kept short-term on a rolling basis.
6. Your rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Requests: [email protected]. You may also lodge a complaint with your supervisory authority (for Estonia, the Data Protection Inspectorate).
7. Changes
When this notice changes, the updated date is shown on this page.
8. Matravo mobile apps
The Matravo apps for Android and iOS give access to your Matravo account and to the marketplace. This section explains how personal data is processed when you use them. Fusapp OÜ is the controller. The points below on chat messages and attachments, content moderation, message translation and the automated company pre-check apply in the same way when you use the Matravo web portal.
- Account and company data: name, business e-mail, password (stored only as a hash), phone number if you add one, preferred language, company information and your role in the company; the requests, offers and delivery details you create.
- Device and push notification data: if you allow notifications, the app obtains a push token from Google Firebase Cloud Messaging (on iOS together with Apple's push notification service), and we link it to your account so that we can notify you about activity such as new offers and messages. Firebase uses an app installation identifier for this. You can turn notifications off in your device settings at any time; when you sign out, the app deletes its token.
- Chat messages and attachments: the messages you send in conversations about requests and offers, and the files you attach (images, PDF, Word, Excel, text and CSV files of up to 10 MB), are stored on our servers and in our file storage (Microsoft Azure) and are visible to the participants of the conversation. If you block or report a user or a message, we keep a record of the block or report and of the related content so that our moderators can review it.
- Content moderation: the text you publish or send (requests, offers, chat messages and your company profile) and the images you upload (including your company logo) are automatically screened by Microsoft Azure AI Content Safety for harmful content (sexual, violent, hateful or self-harm content). Content that is flagged may be blocked.
- Message translation: where automatic translation is included in a participant's plan, the text of chat messages, requests, offer notes and the questions and answers on a request is sent to DeepSeek for machine translation. DeepSeek's privacy policy states that it processes and stores data in the People's Republic of China, which is outside the EU/EEA. Please do not include personal data in messages that the conversation does not need.
- Automated company pre-check: when you register a company through the web portal or the apps, the company details you submit (company name, country and region, website, VAT number, company phone, description and selected product categories), the domain of your e-mail address (not the full address) and your preferred language are sent to DeepSeek for an automated pre-check of the application. The pre-check may also visit your company website to check that it is reachable and matches the application; the content it reads there is also sent to DeepSeek. If the pre-check recommends approval with a confidence score at or above a threshold we set, and none of its website, e-mail-domain, VAT-number or website-content checks fails or remains inconclusive, your application can be approved automatically. The pre-check never rejects an application on its own: all other applications are reviewed by our team, and you can ask for a person to review a decision about your application by writing to [email protected]. DeepSeek processes this data in the People's Republic of China.
Purposes and legal bases: we process this data to provide the apps and the marketplace to you or to the company you represent (performance of a contract, or our legitimate interest in serving the company's account), to keep the platform safe, check company applications and moderate content (legitimate interest and legal obligations), and to keep invoicing and transaction records (legal obligations).
Service providers for the apps and the portal include Google (Firebase Cloud Messaging), Microsoft (Azure file storage and Azure AI Content Safety) and DeepSeek (machine translation and the automated company pre-check). Your personal data is never sold. DeepSeek processes data in the People's Republic of China; information on the mechanism used for this transfer is available on request from [email protected].
Retention and account deletion: we keep your account data while your account is active. You can request deletion in the app (Account > Delete account) or by e-mail. Recording a request does not mean data has been deleted; our team reviews the verified request. Invoices, transaction records and moderation records may be retained only where a legal reason and retention period or criteria apply. Details: Delete your Matravo account.
Your rights: the rights in section 6 also apply to the apps; requests: [email protected].