Privacy

Controller and contact

The controller is MAPP OUTSOURCING LLC, a Montana Limited Liability Company (LLC). Privacy and data-rights contact: Grégory CANDELA, admin@makereliable.com, +33 6 63 55 68 15, 711 Route de Berrias, 07460 Beaulieu, France. This operational contact is not presented as a formally appointed DPO or GDPR Article 27 representative.

Professional data we process

MAPP Trade does not intentionally request special-category personal data for ordinary B2B intermediation. Please do not submit such data unless it is genuinely necessary and lawful.

• professional contact identity, company, job role, professional email and phone where provided, and country
• inbound enquiries, CRM deal information, public professional sourcing information and EEN opportunity/source references
• communications and replies, contract/signature metadata and documents, and transaction/reporting information where contractually necessary
• audit and security logs and IP/device/security metadata where technically collected

Purposes and legal bases

We process professional data to respond to enquiries, qualify B2B demand, perform sourcing and matching, manage opportunities, communicate with professional counterparties, prepare and manage contracts and fee protection, follow protected transactions and commissions, prevent fraud and abuse, secure the service, comply with legal obligations, and establish, exercise or defend legal claims.

Depending on context, the legal basis may be steps requested before a contract, performance of a contract, legitimate interests in B2B intermediation and professional relationship management, compliance with legal obligations, or legal claims. Consent is used only where it is genuinely the appropriate basis. MAPP does not claim one universal legal basis for all B2B outreach in every European jurisdiction.

Public and third-party professional sources

Professional information may be obtained from the Enterprise Europe Network, company websites, public professional directories, public business registries and other legitimate public professional sources. Where data was not obtained directly, MAPP applies the applicable transparency obligations and supports first-contact information about MAPP, the commercial reason for contact, relevant source or category information, this Privacy Policy and a simple objection mechanism, subject to jurisdiction-specific B2B rules.

Recipients and processors

MAPP does not sell personal data and does not share it with advertisers for their independent advertising purposes.

• Supabase — authentication, CRM, database, private storage and backend services
• OpenAI — ChatGPT Sites hosting and server-side AI analysis or generation where used
• Resend — transactional or business email delivery when enabled
• future electronic-signature provider, only once connected and required
• professional advisers, accountants or legal advisers where necessary

International transfers

MAPP is a United States entity and some processors operate internationally. Transfers may therefore occur outside the EEA. MAPP relies on the contractual, adequacy and other lawful transfer safeguards made available by the relevant provider and applicable to the actual processing context. We do not claim that all data remains physically in France or the European Union.

Retention

Records that must still be retained for legal, accounting, contractual or claim purposes are restricted or archived rather than deleted prematurely.

• Unsuccessful or inactive professional prospect: 3 years from collection or the last meaningful professional contact, where applicable.
• Active deal or contractual relationship: for the duration of the active commercial relationship.
• Contract, accounting, transaction and legal-claim records: for applicable accounting, statutory limitation, contractual and legal-claim retention periods.
• Security and audit logs: only for the operationally justified security and audit period.
• Cookie consent choice: 6 months.

Your rights

Where applicable, you may request access, rectification, erasure, restriction, object to processing, request portability where available, withdraw consent where processing relies on consent, and complain to a competent supervisory authority. Send requests to admin@makereliable.com. Rights depend on the processing context and applicable law.

Security and protected identities

The administrative CRM and contract areas are private. Protected buyer identities and other protected counterparty information are not intentionally exposed through public legal pages, search metadata or optional analytics.

Partner Portal data and confidentiality

Partner Portal access is personal, invitation-only and tied to an authorized business email, company and MAPP case. Portal records can include messages, requested information, private documents, access/security events and Case Assistant interactions. MAPP applies role- and case-based visibility before information is made available to a partner or to the Case Assistant. Protected counterparty identities and private MAPP records are not disclosed unless an authorized MAPP process expressly changes their visibility.