Privacy Policy
Last updated: July 1, 2026
1. Who We Are
Eureghub is operated by Mefnet. We are the data controller for personal data processed through this platform. Contact: privacy@mefnet.net
2. What Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Account | Email, name, company name | Authentication, document generation |
| Compliance | Supplier names/emails, HS codes, geolocation polygons, substance data | Generating DDS, CBAM, REACH, RoHS documents |
| Payment | Stripe Customer ID, transaction amounts | Processing payments (card details handled by Stripe only) |
| Technical | Timestamps, server logs | Security, debugging, audit trail |
3. Legal Basis for Processing (GDPR Article 6)
- Performance of contract: Providing the Service you requested
- Legal obligation: Retaining compliance documents for regulatory audits
- Legitimate interest: Security, fraud prevention, service improvement
4. Data Retention
- Account data: Until account deletion + 30 days
- Compliance documents: 5 years (required by EU regulations)
- Payment records: 7 years (tax obligations)
- Server logs: 90 days
5. Data Sharing
We share data only with:
- Stripe: Payment processing
- Global Forest Watch API: Deforestation analysis (geolocation data only)
- Hosting infrastructure: Data remains within the EU
We do not sell your data to third parties.
6. Security
- All data stored on EU servers with encryption at rest and in transit (HTTPS/TLS)
- Passwords hashed using PBKDF2-SHA256
- Sessions managed via signed JWT tokens (NextAuth)
7. Your Rights (GDPR)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interest
To exercise these rights: privacy@mefnet.net
8. Cookies
We use only essential cookies for authentication (NextAuth session) and Stripe payment processing. No tracking or advertising cookies are used.
9. Complaints
You have the right to lodge a complaint with your national Data Protection Authority.
10. Contact
Email: privacy@mefnet.net