Privacy Policy

At Matfy we value your privacy and want you to understand how we process your personal data. This Privacy Policy clearly and transparently explains how we collect, use, and protect your information when you use our website or the Matfy platform.

By accessing or using our services, you accept the conditions described in this policy, which may be updated at any time. We recommend reviewing it periodically to stay informed about possible changes.

1. Purpose of processing and types of data collected

We collect the personal data you voluntarily provide when:

• Create an account to access the platform.
• Request information, demonstrations, or free trials.
• Participate in commercial activities, events, or referral programs.
• Contact our support or customer service team.
• Subscribe to newsletters or marketing campaigns.

The data we process may include first name, last name, email address, phone number, and billing information.

During browsing we may also collect technical information through cookies, such as IP address, browser, operating system, or visited pages.

Matfy does not collect sensitive data such as health, religion, or political orientation.

2. Legal basis for processing

We process your personal data based on the following legal grounds:

• Performance of a contract or pre-contractual measures related to the use of the Matfy platform.
• Compliance with legal obligations (tax, accounting, etc.).
• Explicit consent for sending marketing communications or using non-essential cookies.
• Legitimate interest in improving our services or informing you about relevant updates.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. Data processing and security

Matfy complies with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on personal data protection and digital rights.

Our systems are hosted on Google servers located in the European Union, with high security standards. All information is transmitted using encrypted connections.

• All Matfy staff sign confidentiality agreements.
• Access to data is strictly controlled.
• Providers guarantee an equivalent level of security and GDPR compliance.

For any questions, you can contact our Data Protection Officer (DPO) at info@matfy.es.

4. Data retention and deletion

• Customer and billing data: 10 years from the end of the contract.
• Marketing or prospecting data: 3 years from the last contact.
• Call recordings: 6 months.
• Technical security logs: 1 year.

When the data is no longer necessary, it will be securely deleted. You can request deletion of your account by writing to info@matfy.es.

5. Data recipients and sharing

Matfy staff may access your data within the scope of their duties and always under confidentiality obligations.

We may share data with providers who assist us with hosting, communication delivery, technical support, or payment processing.

Under no circumstances do we sell or transfer your data for commercial purposes.

6. Integrations with third-party services

Use of data obtained through Google APIs

Our application may access certain user data through Google APIs when the user chooses to connect their Google account or use Google Drive.

Data accessed

• User's first and last name.
• Email address.
• Unique identifier of the Google account.
• Profile image, if available.
• Identifiers or references of files selected by the user in Google Drive.

Data usage

Data obtained through Google is used exclusively to:

• Allow sign-in using Google authentication.
• Create or link the user's account within the platform.
• Allow the user to select and link files stored in their Google Drive account.
• Provide functionalities explicitly requested by the user.

The application does not use data obtained through Google APIs for advertising, user profiling, or behavioral analysis.

Data sharing

We do not sell or share data obtained through Google APIs with third parties.

Data storage and protection

Data is stored securely using appropriate technical and organizational measures.

• Encryption of communications through HTTPS/SSL.
• Restricted access to systems.
• Application of the data minimization principle.

Retention and deletion

Data obtained through Google will only be retained while the user maintains an active account.

• Revoke access from the permissions settings of their Google account.
• Delete their account on the platform.
• Request deletion of their personal data.

Deletion requests will be processed within a maximum period of 20 days.

7. International transfers

If it is necessary to transfer data outside the European Economic Area, Matfy will ensure that such transfers are carried out under the European Commission's Standard Contractual Clauses.

8. Matfy communications

We may send you emails related to technical, security, or administrative matters.

You can unsubscribe at any time using the link included in the emails or by writing to info@matfy.es.

9. User rights

According to current legislation, you may exercise the following rights:

• Access to your data.
• Correction of inaccurate data.
• Deletion of data.
• Restriction or objection to processing.
• Data portability.

To exercise these rights, write to info@matfy.es or by postal mail to:

You may also file a complaint with the Spanish Data Protection Agency (AEPD).