MASAR policies
Privacy Policy
This Policy explains MASAR's own use of personal data and how that differs from support data a business customer puts in its workspace.
1. Our role
MASAR controls account, billing, public-site contact, and service-security data used for its own purposes. A business customer ordinarily controls the support data in its workspace and widget; MASAR processes that data for the customer under the DPA. For a request about a business's support conversation, contact that business first.
2. Data and purposes
We use names, email addresses, account and role details, billing references, support requests, and limited technical records to provide accounts and subscriptions, meet accounting duties, answer requests, and protect the service. Our legal bases are contract, legal obligation, and legitimate interests in security and support, as applicable. Workspace data can include tickets, messages, contacts, and files; we process it under the customer's instructions. Stripe receives card details for payment; MASAR does not need full card numbers.
3. Providers and transfers
Authorized workspace users can access data according to their roles. MASAR hosts primary application data in Frankfurt, Germany, and stores encrypted recovery backups in Cloudflare R2's EU jurisdiction. Hostinger Email delivers service email, and Stripe provides billing. The Subprocessors page explains these providers' roles. Some providers or their affiliates may process or access personal data outside the EEA. Where required, MASAR uses an applicable transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, and provides information about safeguards on request.
4. How long data is kept
Support data stays available while the workspace is in service; cancellation, overdue payment, or suspension alone does not delete it. After a verified closure request, MASAR offers return or deletion. If return is chosen, the owner has 30 days from notice of availability to collect the data, after which live support data is deleted. Deleted data may remain in rotating recovery backups until those copies expire; completed deletions are reapplied before a restored service reopens. Required accounting records, such as invoices, are generally kept for seven years and are not part of the workspace-data purge.
5. Browser storage and security
MASAR uses browser storage for sign-in, widget conversation continuity, and preferences. The current site does not use advertising or cross-site tracking code. We use authenticated access, workspace permissions, encrypted transport, private application storage, and backups to protect data, but no online service can guarantee absolute security.
6. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, or portability, object to certain processing, or complain to the Dutch Data Protection Authority. We may verify your identity. For support data controlled by a business customer, we direct or assist requests under that customer's instructions. Send requests to contact@masarhelp.io.
7. Changes and identity
We update this Policy when our practices change and communicate material changes where required. Masar, the provider of MASAR, is the controller for its own account and business data. KVK 96831685; business address Kraijenhoffstraat 38, 5612 PZ Eindhoven, Netherlands; privacy contact contact@masarhelp.io.
Questions about this document?