MATERIA is operated by a company now being incorporated by its founders. Its legal name, registered office and registration number will appear here as soon as incorporation is complete. Contact: hello@hellomateria.com.
01Who is responsible
The company that operates MATERIA, named at the top of this page, is the controller of the personal data described here. For anything about your data, write to hello@hellomateria.com. We answer within one month.
02What we collect
Your account. Name, email address and password. Passwords are stored by our authentication provider as a one-way hash; we never see them. If you sign in with Google we receive your name, email address and profile picture from Google.
Business details, if you register as a professional: company name, country, registration or VAT number, and optionally website and phone.
Your portfolio. The assets you add, with their details, photos, cost, your own estimate of value, asking price and notes. Also your wanted orders, offers, deals, the reviews you write and your profile photo.
Deals. When you buy, the delivery address you give us, and the record of every step of the deal.
Messages you exchange with other members through MATERIA.
Access requests from the home page: name, email address and what you told us.
Technical data. Our hosting and database providers keep server logs (IP address, browser, time of request) to run and secure the service.
03Why we use it
To run your account and the service you asked for: storing your portfolio, matching wanted orders with what members hold, handling offers and deals, delivering messages. Legal basis: the contract between us (our terms).
To check professionals before their public profile goes live, and to keep the service safe: blocking contact details in messages so deals stay inside the verified process, and detecting fraud. Legal basis: our legitimate interest in a trustworthy service, and the contract.
To meet legal obligations, such as keeping records of completed deals for tax and accounting. Legal basis: legal obligation.
We send you emails about your account and your deals. We do not send marketing, and if we ever do it will be only with your consent.
04Who sees your data
Other members. Your portfolio is private. What you list for sale is visible to signed-in members: the asset, its details, photos and asking price. A private member stays anonymous to buyers until a deal settles. A verified professional has a public page with company name, profile photo, country, listings with asking prices and reviews; registration or VAT number, website and phone are never shown.
MATERIA staff see what they need to review professionals, operate deals and resolve problems.
Partners on a deal. The authenticator and the carrier receive what they need to verify and ship the asset, such as the delivery address.
Our providers, who process data on our instructions: Supabase (database, authentication and file storage), Vercel (hosting), Google (sign-in with Google, and our email). Fonts on the site load from Google Fonts, which receives your IP address when a page opens.
We do not sell personal data, and we do not share it with advertisers.
05Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.
06How long we keep it
While your account is open. When you close it we delete your account, portfolio and messages within 30 days. Records of completed deals are kept for as long as tax and accounting law requires, which in Portugal is ten years. Access requests that did not lead to an account are deleted after twelve months.
07Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Write to hello@hellomateria.com. If you think we have handled your data badly you can complain to the Portuguese data protection authority, the CNPD (cnpd.pt), or to the authority where you live.
08Security
Data travels encrypted. Access is enforced in the database itself, so one member cannot read another member's private data even through the API. Asset photos are served through links that expire.
09Cookies and browser storage
We use no advertising or analytics cookies. Your browser stores your session so you stay signed in, your light or dark theme, and, until sign-up finishes, whether you chose a private or professional account. None of it is used to track you.
10Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change applies. Version 2026-10-26.