This document is maintained by Matsivo. It is provided for transparency and does not replace a signed data processing agreement, which governs customer data processed inside the platform.
1. Information we collect
- Account data: name, work email, job title, organization and language preference.
- Operational data entered by our customers into their workspace (for example workers, schedules, attendance, suppliers and stock records).
- Contact and demo request data submitted through this website.
- Technical data required to operate the service securely: IP-derived request metadata, authentication events and audit logs.
2. Purpose of processing
- Providing and maintaining the Matsivo platform for the customer organization.
- Authenticating users and protecting accounts against abuse.
- Responding to demo requests, enquiries and support messages.
- Meeting legal, accounting and security obligations.
For workspace content, the customer organization is the data controller and Matsivo acts as a processor. For website enquiries and account administration, Matsivo is the controller.
3. Cookies
Matsivo uses strictly necessary cookies and equivalent browser storage to keep you signed in and to protect sessions. Details are described in the Cookie Policy.
4. Retention
- Workspace data is retained for as long as the customer subscription is active, and deleted or returned on termination according to the applicable agreement.
- Security and authentication audit events are retained for a limited period defined by our retention policy and then purged automatically.
- Website enquiries are retained only as long as needed to answer them and to keep a record of the commercial exchange.
5. Processors and subprocessors
Matsivo relies on a small number of infrastructure and communication providers to operate the service, including cloud hosting and database services and a transactional email provider. An up-to-date list of subprocessors is available on request at contact@matsivo.com.
6. Security
Data is encrypted in transit and at rest, access is enforced server-side per organization, and privileged operations are logged. The Trust Center describes the implemented controls in detail.
7. International transfers
Matsivo aims to keep processing within the European Economic Area. Where a provider processes data outside the EEA, the transfer is covered by an appropriate legal mechanism such as the European Commission's Standard Contractual Clauses.
8. Your rights
- Access to the personal data we hold about you.
- Rectification of inaccurate data.
- Erasure, where no legal obligation requires retention.
- Restriction of, or objection to, certain processing.
- Data portability in a structured, machine-readable format.
- Lodging a complaint with your national supervisory authority.
If your data is held inside a customer workspace, please contact that organization first; we will assist them as their processor.
9. Contact
Privacy questions: contact@matsivo.com. Security reports: security@matsivo.com.