Question 1

Where is my data hosted?

Accepted Answer

The security and location of your data are essential topics. At Mataee, we chose European hosting to guarantee the protection of your information.
Hosting in the European Union
All your data is hosted within the European Union. The detailed list of our subprocessors is available upon request via our contact form.
European jurisdiction
Your data is subject to European law and benefits from the protection offered by the General Data Protection Regulation (GDPR). No data is transferred outside the European Union.
Infrastructure security
Our infrastructure includes advanced security measures:

Data encryption in transit (TLS/HTTPS) and at rest
Regular backups with geographic redundancy
24/7 monitoring of the infrastructure
Strict physical access control to servers

A French company
Mataee is published by a French company, registered in France. This means your contractual relationships are governed by French law, with a local and reachable point of contact.
Why it matters
Unlike some solutions hosted in the United States or other non-EU countries, your data is not subject to foreign legislation such as the Cloud Act. You maintain full control over your professional information.
Transparency
We detail all our data protection practices in our privacy policy. There you will find the security measures we have in place.

Question 2

How do I enable two-factor authentication (2FA)?

Accepted Answer

Two-factor authentication (2FA) adds an extra layer of security to your Mataee account. Even if your password is compromised, no one can access your account without the code generated by your authentication app.
Step 1: Access security settings
Log in to your Mataee workspace, then go to Settings > Profile > Two-factor authentication. This section is accessible to each team member for their own account.
Step 2: Enable 2FA
Click the "Enable two-factor authentication" button. Mataee will then generate a unique QR code linked to your account.
Step 3: Scan the QR code
Open your authentication app on your phone and scan the displayed QR code. Compatible apps include:

Google Authenticator (Android, iOS)
Authy (Android, iOS, Desktop)
Microsoft Authenticator (Android, iOS)
1Password, Bitwarden, and any password manager supporting the TOTP protocol

The app immediately starts generating temporary 6-digit codes, refreshed every 30 seconds.
Step 4: Confirm activation
Enter the code displayed in your authentication app to confirm everything is working correctly. 2FA is then enabled on your account.
Step 5: Save recovery codes
Mataee provides you with single-use recovery codes. These codes allow you to access your account if you lose access to your phone. Store them in a safe place (password manager, safe, printed copy in a secure location).
Logging in with 2FA
For your subsequent logins, after entering your email address and password, Mataee will ask for the 6-digit code generated by your app. Enter it to access your workspace.
We strongly recommend that all users enable 2FA to protect their organization's data.

Question 3

Is Mataee GDPR compliant?

Accepted Answer

Yes, Mataee is fully compliant with the General Data Protection Regulation (GDPR). Protecting your personal and professional data is at the core of our commitments.
European hosting
All your data is hosted in Europe. No data transfers are made outside the European Union, ensuring maximum legal protection.
Data encryption
Your data is protected by encryption in transit (TLS/HTTPS protocol for all communications) and encryption at rest on hosting servers. Passwords are hashed with algorithms that comply with CNIL recommendations.
User rights
Mataee respects all the rights provided by the GDPR:

Right to portability: export all your data at any time in CSV format from the Reports section.
Right to erasure: delete your account and personal data directly from the settings. An anonymization process ensures the effective removal of your information.
Right of access: view the personal data we hold about you at any time.
Right to rectification: edit your personal information from your profile.

Minimal data collection
We apply the principle of data minimization: we only collect information strictly necessary for the operation of the service. No superfluous data is requested or stored.
Audit log
An audit log records sensitive actions performed on your organization (invitations, role changes, deletions), ensuring traceability compliant with GDPR requirements.
Subprocessors
We work with a limited number of subprocessors, all GDPR compliant:

Mollie (Netherlands): payment processing
Brevo (France): transactional email delivery

All of our practices are detailed in our privacy policy.

Question 4

What happens to my data if I delete my account?

Accepted Answer

At Mataee, we guarantee you full control over your data, including when you decide to delete your account. Here is the complete process, step by step.
Step 1: Deletion request
Go to Settings > Organization > Delete organization to initiate the deletion of your account and all associated data. Only the organization owner can perform this action.
Step 2: Email confirmation
A confirmation email is sent to the organization owner's address. You must click the confirmation link to validate your request. This step protects against accidental or unauthorized deletions.
Step 3: 30-day withdrawal period
After confirmation, a 30-day withdrawal period begins. During this period:

Your account remains accessible in read-only mode
You can cancel the deletion at any time from your settings
You can export your data if you haven't done so already
No data is deleted during this period

Step 4: Permanent anonymization
At the end of the 30 days, the anonymization process is triggered irreversibly:

Personal data deleted: first name, last name, email address, password, profile information for all members
Organization data deleted: organization name, address, billing information
Data retained anonymously: time and billing records are kept in anonymized form, with no link to identifiable individuals. This retention meets French accounting and tax legal obligations.

Your rights
This process complies with GDPR and respects your right to erasure. It reconciles the deletion of your personal data with the legal retention obligations to which Mataee is subject as a French company.
To learn more about how your data is processed, see our privacy policy.

Frequently asked questions

Security and data

Can't find your answer?