Privacy Policy

1The short version

2What we hold about you

• Your account: company name, the name of each person who signs in, their username, email and phone, and a scrambled version of their password. We cannot read a password, even our own.
• Your work: the products you sell, the deals you open, the letters you write, your tasks and your notes.
• Your mailbox settings, so the desk can send your letters from your own address.
• Use of the desk: when you signed in last, and how many buyers, letters and deals the account has. We use this to run the business and to know when someone is stuck.

3What we hold about buyers

The desk holds business contact details for food companies around the world — company name, address, website, a business email or phone, and sometimes the name and job title of the person who buys.

All of it comes from public sources: the exhibitor lists that trade fairs publish themselves, companies’ own websites and their legal notices, and open trade data. We do not buy lists, we do not guess email addresses, and we do not take anything from behind a login.

This is business information about people at work, not private life. Even so, it is still information about a person, and the next two points are why we may hold it and how any of them can have it taken out.

4Why we are allowed to hold it

European law asks us to name the reason that lets us hold each thing. There are two, and they are not the same reason.

• Your account and your work: because we have a contract with you. You asked for a desk, and we cannot give you one without holding your login and what you type into it.
• Business contact details of buyer companies: our legitimate interest, and our customers’, in reaching companies that publish those details precisely so that suppliers can reach them. It is business information, about people at work, published by the company itself.

We do not claim that anyone consented to the buyer directory, because nobody did, and saying otherwise would be the dishonest answer. Legitimate interest is the honest one — and it is not a free pass. The law only allows it while it stays balanced against the rights of the person whose details they are. That balance is the reason we take nothing from behind a login, guess no addresses, buy no lists, hold no private or personal-life data, and remove anybody who asks without asking them why.

If you think that balance is wrong in your case, say so and we will stop — point 5, and the right to object in point 11.

5If you are on a buyer list and want off it

Write to support@treveqio.online with the company name, and we will remove it. No account needed, no reason needed.

Every letter sent from a desk also carries its own way to stop. One click and that address is recorded as not-to-be-written-to, across every desk, permanently. That record is the one thing we keep after a removal, because it is the only way to make sure nobody writes to that address again.

6When a customer writes to you from their desk

The letters go out through that customer’s own mailbox, under their own name, and they choose who to write to and what to say. For those letters they are responsible in their own right, not us — in the language of the law, they are the controller of their own sending.

Our terms bind them to write to a business about business, to identify themselves, and to stop the moment they are asked. If a letter from a desk troubles you, tell us anyway: we can suppress the address across every desk at once, which is faster than arguing with the sender.

7How you pay, and what we see

There is no card payment yet. A subscription is paid by bank transfer or InstaPay, straight into our account, and we mark the desk paid when the money arrives. So there is no card number to see, hold or lose — not because we are careful with it, but because it never exists here at all.

When card payment is switched on, it will be run by a processor licensed by the Central Bank of Egypt, the card number will be typed on their page and never on ours, and their name will appear here and on your statement before the first card is charged.

What we keep either way is the record of what you paid and when, because tax law requires it.

8Where it is kept

On one private server we rent, physically in France — which means your data, and the buyer records, stay inside the European Union and under its rules. Every company has its own separate database file — not a shared table with a column saying whose row it is. One customer cannot read another customer’s desk, and that is tested every time we change the code.

Backups are taken every night, kept on the same server, and checked by restoring them.

9Who else sees it

Two, and no more:

• Your own mailbox provider — because your letters go out through your own email account, exactly as if you had typed them there.
• The company that rents us the server — who host the machine but have no reason to look inside it.

Nobody buys anything from us. We do not sell, rent or trade your details or your work, and there is no advertising on the desk to sell them to.

10How long we keep it

Your work stays while your account exists, and for a while after you stop paying — because most people who pause come back, and losing their year of notes would be unforgivable. Ask us to delete it and we delete it.

Records of payments are kept for as long as tax law requires. The do-not-write-to list is kept for good, for the reason in point 5.

11What you can ask for

At any time, and free:

• A copy of everything we hold about you.
• A correction, if something is wrong.
• Deletion of your account and your work.
• Your work in a file you can take elsewhere — the desk already exports to Excel.
• To object — to tell us to stop holding or using your details at all. For anyone in the buyer directory this is simply point 5: you ask, we remove, and we do not ask why.
• To have us stop while a disagreement is being sorted out.

Ask at support@treveqio.online. We answer within a week, usually the same day. If we get it wrong, you can complain to the data protection authority where you live, and you do not need our permission to do it.

12If something goes wrong

If anyone ever gets at data they should not have, we will tell the people affected and the authorities, quickly, and say plainly what happened and what we did. We would rather tell you about a small thing than be discovered hiding a big one.

13Cookies, and counting visits

The desk sets one cookie, to remember that you signed in. Nothing else. There is no advertising pixel and no third-party analytics, so there is no cookie banner to click through.

This website counts its own visits, so we know how many people read it: which page was opened, where the visitor came from (for example Google, or a link somebody shared), which country the device’s clock is set to, and whether it is a phone or a computer. It sets no cookie and stores nothing in your browser to do this. Your internet address is only used, scrambled, to count one visitor once within a single day; it is never stored, and the key that scrambles it is deleted every day. The counts stay on our own server and are never sent to Google or anybody else. If you then ask for a free trial, your request notes where you first came from — for example Google, or a link somebody shared.

14Children

This is a tool for businesses. It is not for anyone under 18, and we do not knowingly hold anything about a child.