1. Who is responsible for your data?
6 Five AB is the data controller when it decides why and how personal data is processed for MAUDE account administration, subscriptions, security, support, service communications, legal compliance and operation of the public MAUDE websites.
A business using MAUDE may process personal data about its customers, leads, employees, agents, creators and other business contacts. In those situations, that business will normally be the data controller and 6 Five AB will normally act as its data processor under a data processing agreement.
2. Personal data we process
Depending on how MAUDE is used, we may process:
- name, business email, telephone number, job title, company and user role;
- account identifiers, authentication information, access rights and device sessions;
- company, subscription, billing and invoice information;
- customer, lead, CRM, activity, follow-up, territory and route information;
- order, product, quantity, price, discount, payment, shipping, tracking and status information;
- commission rules, eligible orders, adjustments, statements and payout status;
- device type, operating system, app version, IP address, security logs, diagnostics and push-notification tokens;
- camera, barcode, photo, location and file information when a user chooses to use those features;
- Digital Showroom files, creator submissions, annotations, comments and publication settings;
- support requests, communications and website interaction information.
Users should not place sensitive or unnecessary personal information in free-text fields.
3. Why we process personal data
We process personal data to provide and administer MAUDE, authenticate users, enforce permissions, operate ordering and field-sales workflows, provide support, maintain security, prevent fraud, diagnose errors, communicate service information, administer subscriptions and comply with legal obligations.
The applicable legal basis may be performance of a contract, steps before entering a contract, compliance with a legal obligation, consent, or our legitimate interest in operating a secure and reliable business service.
4. AI-assisted processing
MAUDE may use automated tools to assist with product matching, photo-based order interpretation, lead suggestions, categorisation, summaries and workflow recommendations. Automated output may be incomplete or inaccurate and must be reviewed by an authorised user. Unless expressly stated otherwise, MAUDE does not make decisions based solely on automated processing that produce legal or similarly significant effects for an individual.
5. Where data comes from
We may receive information directly from you, from your employer or organisation, from another authorised MAUDE user, from connected integrations, from files you upload, from your device after permission is granted, from service providers, or from public business sources where lawfully used.
6. Who receives personal data
Information may be available to authorised users in the relevant MAUDE organisation. We may also use service providers for hosting, storage, email, notifications, analytics, maps, payments, support, security, app distribution and file processing. Providers may process data only for authorised purposes and subject to appropriate contractual and security obligations.
Information may also be disclosed where required by law, to protect rights or security, to prevent fraud, to obtain professional advice, or as part of a lawful corporate transaction.
7. International transfers
Where personal data is transferred outside the European Economic Area, an appropriate transfer mechanism will be used where required, such as an adequacy decision, approved standard contractual clauses or another lawful safeguard.
8. Security
We use technical and organisational measures designed to protect personal data, including role-based access, encrypted communication, protected local storage where supported, session validation, logging, restricted administration, backup controls and incident procedures. No system can guarantee absolute security, and users must protect their credentials and devices.
9. Retention
Personal data is kept only for as long as needed for the relevant purpose. Account and profile information is normally retained while the relationship remains active and for a limited period afterwards. Customer-controlled data is handled according to the customer agreement and documented instructions.
Device sessions and push tokens are removed or deactivated when no longer needed. Security and support records are kept for a proportionate period. Invoices, accounting information, commission statements and supporting financial records may be retained for the period required under Swedish law, which may be seven years. Deleted data may remain temporarily in protected backups until those backups are overwritten.
10. Your rights
Depending on the circumstances, you may have the right to information, access, correction, deletion, restriction, objection, data portability, withdrawal of consent and protection against certain solely automated decisions. You may object to direct marketing at any time.
Rights are not absolute. Information may need to be retained to comply with law, protect another person, preserve financial records, prevent fraud or establish or defend legal claims. We may verify your identity before acting.
Where 6 Five AB acts only as a processor, your request may be referred to the organisation that controls the data.
11. Account deletion
You may initiate deletion of your individual MAUDE account in the app under More → Account & Privacy or through the public account-deletion page. Deleting an individual login does not automatically delete company orders, invoices, customer records, commission statements or other records controlled by an organisation or retained under law.
12. Children
MAUDE is a business service and is not intended for children. Users must be at least 18 years old or otherwise have legal authority to act for their organisation.
13. Changes and contact
We may update this policy to reflect legal, technical or operational changes. Material changes will be communicated in an appropriate way.