Your data supports the process. It is not the product.
Matea does not sell or rent personal data or private conversations.
Name, contact details, goal and a short outcome description — no documents, passwords or payment credentials.
AI may organise information, but it does not decide whom you should trust, pay or meet.
You may ask for access, correction, deletion, restriction or an end to further contact.
Open table of contents
Controller and scope
This Notice applies to matea.club, preliminary applications, consultations and Matea services. The operator of the website and recipient of an application is Matea Private Match Team. Before any paid service begins, the full details of the responsible contracting party are stated in the individual agreement.
It applies to visitors, applicants, clients and, where relevant, people whose profiles or communications are lawfully included in an authorised workflow. This is a transparency notice, not blanket consent to every use of data and not a waiver of mandatory rights.
Data we may receive
- Application data: name or alias, Telegram, Instagram, selected goal and description of the result you want.
- Contract and service records: age and identity confirmations, criteria, operating instructions, approvals, action history, enquiries and delivery records.
- Profiles and communications: links, profiles, images, messages, translations, consistency notes and risk indicators that you provide or authorise for the selected service.
- Technical data: page URL and UTM parameters, request time, browser and device type, IP address and security logs created by the website and infrastructure providers.
- Billing and contract records: invoices, payment status and information needed for accounting. Matea does not request bank logins, card details or one-time codes through the public form.
Sources may include you, your authorised representative, platforms you use, approved service providers and lawful public sources. We do not collect information simply because it might be useful one day.
Sensitive and highly personal information
Dating information may reveal ethnicity, religion, health, sex life or sexual orientation. Matea does not ask for this information in the public application. If a specific service genuinely requires it, we explain the purpose and scope in advance and process it only where an appropriate legal basis and an additional condition — including explicit consent where required — are in place.
Purposes and legal bases
Where processing relies on consent, you may withdraw it for future use. Withdrawal does not invalidate earlier processing and does not remove records that must be retained under another valid legal basis.
How the application is handled
When the form is submitted, the full application is sent to a Vercel server function and stored in private Vercel Blob storage. A minimal notification is sent through the Telegram Bot API to a restricted team workspace: the request identifier, reply contact, goal, language and source. Free-text desired-result details and legal-request contents are not copied into Telegram.
Access to full applications is limited to team members who need it. The form uses server-side validation, request-size and rate controls, duplicate-field rejection, a bot honeypot, source checks and form-timing controls. If Cloudflare Turnstile is enabled, its token is also validated on the server.
Telegram, Vercel and other providers process technical data under their own terms and security measures. We do not send names, contact details, form contents or conversations to PostHog.
AI, qualification and human review
AI-assisted tools may support classification, translation, summarisation, inconsistency detection and drafting. They do not decide whether you should trust someone, meet, travel, transfer money or continue a relationship. Material conclusions and sensitive exceptions require human review.
Personal data and conversations are not used to train any general-purpose or proprietary model. Any future training programme would require a separate, voluntary written opt-in or contractual addendum identifying the data, purpose, model, providers, retention period and withdrawal process. That choice will never be bundled into general consent, an application or the core service.
Analytics, cookies and device storage
On matea.club, limited PostHog product analytics may record page views and specifically defined funnel events, including CTA clicks, form start, and successful or unsuccessful submission. Autocapture and session recording are disabled. UTM parameters and advertising click identifiers (such as gclid, fbclid or ttclid) may be retained for source attribution, but form contents are not. PostHog may use first-party browser storage to distinguish sessions.
Optional analytics starts only after your choice. Refusal does not prevent the website or application form from working. You may revisit your choice through the analytics settings on our legal pages or by clearing site data in your browser.
Recipients and international transfers
Matea does not sell personal data. Limited access may be given to the team and providers needed for hosting, private storage, communications, analytics, security, signing and accounting. On the current website, these include Vercel, Telegram and — if you allow analytics — PostHog.
Conversation content may be sent to an AI or translation provider only within an authorised service and after prior disclosure of the provider’s identity, purpose, retention period, model-training terms and international-transfer terms. Without that disclosure and your authorisation, conversation content is not sent to that provider.
Some providers and infrastructure may be outside your country, including in the United States. Where required, a transfer must rely on a legally recognised mechanism and the provider’s contractual safeguards. Information may also be disclosed in response to a binding lawful request or where necessary to protect people and legal rights.
Retention and deletion
A pre-contract application is reviewed no later than 90 days after the last meaningful contact. If there is no continuing active discussion and no legal need to retain it, the data is deleted, anonymised or access-restricted. Active-client data, accounting records, and incident or dispute materials are retained under the individual agreement or for the period required by law.
An erasure request covers operational copies in Vercel Blob and Telegram. Exceptions may apply to mandatory records, the protection of rights and safety, and provider logs or backups until routine overwrite. Where complete erasure is not possible, the retained data is isolated from ordinary use.
Security and incidents
Matea uses proportionate organisational and technical measures, including private server-side storage, need-to-know access, protected accounts, copy minimisation, controlled channels and prompt removal of access when work ends. No system can eliminate risk entirely.
If an incident is confirmed, we restrict access, preserve necessary logs, assess the consequences and notify affected people or an authority where applicable law requires it.
Your rights and choices
Depending on the law that applies to you, you may request:
- confirmation of processing and access to your personal data;
- correction of inaccurate or incomplete information;
- erasure or restriction of processing;
- an objection to processing based on legitimate interests;
- portability of information you provided;
- withdrawal of consent and an end to optional communications;
- human review of a significant automated decision, if one is ever used; and
- a complaint to the competent data protection authority.
Use the dedicated legal request form on this page. To prevent unauthorised disclosure or deletion, we may reasonably verify that the relevant contact or identity belongs to you.
Correspondents and other people’s data
Within an authorised service, Matea may receive another person’s data from a client, a platform or a lawful public source. We limit it to evaluating communications, consistency, safety and a proposed next step; record the source and level of verification; and do not turn it into an independent marketing database.
The client must have authority to provide the information and must avoid unnecessary disclosure. Where applicable law requires notice to the other person, Matea provides it within the required period unless a lawful exception applies and notice would create a disproportionate risk to rights or safety.
Age, contact and changes
The website and service are for adults aged 18 and over. If we learn that we have received a child’s data, processing will stop and the data will be deleted or passed to an appropriate authority where this is required to protect the child or comply with law.
For privacy matters, use the dedicated legal request form on this page. Material changes are published with a new date and, where required, communicated separately to active clients. A new purpose is not applied retroactively without an appropriate legal basis.