Privacy Policy — Maverto

1. Who We Are

Maverto provides a contextual knowledge SaaS platform and related browser extension. For questions about this Privacy Policy, contact us at privacy@maverto.com.

Address:
Maverto
Sněženková 2429
Brandýs nad Labem-Stará Boleslav, 25001
Czech Republic

2. GDPR Roles

Depending on context, Maverto may act as:

Processor for personal data included in workspace content on behalf of customer organizations.
Controller for account, billing, support, anti-abuse, and security-related processing.

3. Data We Process

Account and profile data (e.g., name, email, hashed password).
Organization/workspace membership and role data.
Customer Content stored in workspaces (e.g., SOPs, notes, attachments, metadata).
Operational and audit events (for security, integrity, and compliance).
Billing and tax-relevant data processed through payment providers.
Support communications and contact form submissions.

4. Browser Extension Data

The browser extension is designed for data minimization. It is intended to use the current page URL to match relevant workspace guidance. It is not designed to store full third-party page content in Maverto.

URL data may be processed transiently for matching and may be present in technical/security logs where necessary for service integrity, abuse prevention, or troubleshooting.

5. Purposes and Legal Bases (GDPR)

Contract performance: providing core Service features, authentication, collaboration, and support.
Legitimate interests: service security, fraud prevention, reliability, diagnostics, and product improvement.
Consent: optional analytics and non-essential cookies.
Legal obligations: tax, accounting, compliance, and lawful requests from authorities.

6. Cookies and Similar Technologies

We use essential cookies for authentication and security, and optional analytics/marketing cookies where required consent is obtained. You can update your preferences at any time via cookie settings.

7. Sharing and Subprocessors

We do not sell personal data. We may share data with:

Infrastructure and hosting providers.
Transactional email and support tooling providers.
Payment processors for billing and tax operations.
Analytics providers only where consent/legal basis applies.
Authorities where disclosure is required by law.

Subprocessors are contractually bound through data protection obligations appropriate to GDPR Article 28 where applicable.

8. International Transfers

Where personal data is transferred outside the EEA/UK, we apply recognized safeguards such as Standard Contractual Clauses (and UK transfer addenda where relevant) or other legally valid mechanisms.

9. Retention

We retain personal data only as long as necessary for the purposes described in this Policy, contractual requirements, and legal obligations. Retention periods may differ by data category (for example, billing, audit, and support records).

10. Security

We implement technical and organizational measures including encryption in transit, access controls, isolation controls, monitoring, and backup procedures. No system is absolutely secure, but we apply risk-based safeguards aligned to modern SaaS practices.

11. Your Rights (EEA/UK)

Subject to applicable law, you may have rights to:

Access personal data.
Rectify inaccurate data.
Erase data in certain cases.
Restrict or object to processing.
Data portability.
Withdraw consent where processing relies on consent.
Lodge a complaint with your supervisory authority.

Requests can be submitted to privacy@maverto.com. We may verify identity before fulfilling requests.

12. Children

The Service is intended for business users and is not directed to children.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. Material updates will be communicated through appropriate channels.

14. Contact and Complaints

For privacy questions: privacy@maverto.com.

If you are in the EEA/UK, you may also contact your local data protection authority.