Privacy Notice

This Privacy Notice explains how mvdm.io processes personal data as a controller: for the public marketing site, for people who sign in to any Product, for billing, and for first-party request analytics. It does not replace the Data Processing Agreement, which covers personal data mvdm.io processes as a customer’s processor for mvdm.io Compliance, mvdm.io Translation Tools, mvdm.io Health Check and mvdm.io Statistics.

1. Who we are

• Legal name: mvdm.io
• Legal form: sole proprietorship (eenmanszaak)
• Chamber of Commerce (KvK): 86594737
• VAT identification number: NL003999887B21
• Registered address: De Vierakkers 15, 7766 BL Nieuw-Schoonebeek, the Netherlands
• Email: michiel@mvdm.io

Further identification is on Company details.

2. What we process as controller

• Sign-in and account administration — name, email address, authentication identifiers, account membership, and related security logs needed to operate sign-in and accounts, across every Product.
• Billing — customer and payment details processed through Stripe so we can charge for any Product.
• Request analytics — first-party request analytics captured by mvdm.io Statistics for the other applications, so we can see how they are used at a technical level.
• Marketing site — ordinary server and access logs for mvdm.io, and whatever you send us by email or form contact.

3. Why we process it

We process this data to provide and secure the services, to bill for paid use, to understand and improve reliability and usage, and to respond to you. The legal bases are performance of a contract, our legitimate interests in operating and securing the service, and where required by law.

4. Cookies

The strictly necessary sign-in cookie is the only cookie mvdm.io sets. It is required for the service you ask for, so it is not something you can decline; that is also why we do not show a cookie consent banner. There is no other cookie, and none for marketing or advertising.

5. Google Fonts

The public marketing site loads fonts from Google Fonts. Your browser may contact Google’s servers to fetch those fonts. See Google’s own documentation for how Google processes that connection.

6. Analytics

mvdm.io Statistics captures first-party request analytics for the other applications: the signed-in user’s name, or their email address where no name is available; the full URL requested, including its query string; timing; and tags. This means your email address can end up standing in for your name in that record. mvdm.io Commonplace sends nothing to Statistics. This is our own instrumentation, not a third-party advertising tracker.

7. Assistant conversations and operator access

When you use the assistant in mvdm.io Compliance or mvdm.io Translation Tools, conversation content is processed so the feature can run (see the Data Processing Agreement for the processor role). A Platform Administrator of mvdm.io can read those assistant conversations for support and quality. Import conversations used by Compliance’s import feature are likewise visible to Platform Administrators for debugging.

8. Recipients and transfers

We use subprocessors listed on the Subprocessor list. Some of those providers are in the United States. Hosting for the applications is a Hetzner dedicated server in Nuremberg, Germany.

9. Retention

Sign-in and billing records are kept while the account is active and for as long as needed for security, accounting, and legal obligations. Product data after a licence ends follows closed-licence retention: when a Product’s licence ends, we keep that account’s data for that Product for 365 days from the licence end date. If you obtain a new current licence for that Product within those 365 days, the countdown stops and the data remains. If you do not, we delete that account’s data for that Product after 365 days. Your sign-in account and users are not deleted by that wipe. This rule is the same for every Product, as described in the Terms of Service and the Data Processing Agreement.

10. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. For controller data, contact michiel@mvdm.io. For personal data a customer keeps in mvdm.io Compliance, mvdm.io Translation Tools, mvdm.io Health Check or mvdm.io Statistics, contact that customer organisation first; we act as their processor.

11. Changes

We may replace this notice by publishing an updated page with a new effective date.