Privacy / KVKK

This Privacy Policy explains how MarbleMap processes personal data when you use our marketplace, website, and AI assistant connectors. We are committed to protecting your data and complying with the EU General Data Protection Regulation (GDPR) and Türkiye's Law on the Protection of Personal Data No. 6698 (KVKK).

1. Who we are

MarbleMap is a commission-free, sealed-bid B2B marketplace for natural stone, operated by Fusapp OÜ, a company registered in Estonia (the "data controller"). You can reach us at [email protected] for any privacy request.

2. Data we collect

• Account & identity: name, business e-mail, password (stored hashed), preferred language, and role within your company.
• Company & verification (KYB): company name, tax/registration details, country, and documents you provide to verify your business.
• Marketplace content: the requests (RFQs), offers, order details, attachments, and messages you create on the platform.
• Billing: subscription and invoice records. Card payments are handled by our payment processor — we do not store full card numbers.
• Usage, device & log data: IP address, browser/device type, pages viewed, and security logs, used to operate and protect the service.
• Connector data: when you connect MarbleMap to an AI assistant (see §9), the authorization and the requests you make through it.

3. Why we process it, and our legal bases

We process your data to provide and secure the marketplace, verify businesses (KYB), match buyers and suppliers, handle billing, comply with legal and tax obligations, and improve the service. Our legal bases are the performance of our contract with you, our legitimate interests in running a safe marketplace, compliance with legal obligations, and your consent where required (e.g. non-essential cookies).

4. Who we share it with

We never sell your personal data. We share it only with:

• The other party to a deal — a buyer sees the offers on their own request; a supplier sees only their own offer. Under our sealed-bid design, competing offers and the number of offers are never disclosed.
• Service providers (processors) acting on our instructions: payment/billing (FlexPrice and Stripe), cloud hosting (Hetzner, EU), network & security (Cloudflare), and database hosting (MongoDB).
• AI assistant providers — only when you choose to connect MarbleMap to ChatGPT or Claude, and only the data you request through that connector (see §9).
• Authorities where required by law.

5. International transfers

Your data is primarily hosted in the EU. Where a processor is located outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

We keep your data for as long as your account is active and as needed to provide the service. Invoicing and tax records are kept for the period required by law. When data is no longer needed, we delete or anonymize it.

7. How we protect it

Access requires authentication over OAuth 2.0; data is encrypted in transit; access is restricted on a need-to-know basis; and the sealed-bid architecture structurally isolates competing offers so they can never leak between parties.

8. Your rights

Under GDPR and KVKK you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent at any time. You may also lodge a complaint with your data protection authority. To exercise any right, contact [email protected]; we respond within the timeframes required by law.

9. AI assistants & connectors

MarbleMap offers connectors that let you use the marketplace from AI assistants such as ChatGPT and Claude. Connecting is optional and initiated by you through a secure sign-in (OAuth). The assistant can then act on your behalf, accessing only your own company's data through the same permissions and sealed-bid rules as the website — it never sees other companies' offers or reads your unrelated conversations. Your use of the assistant is also subject to that provider's own privacy policy.

10. Cookies

We use essential cookies to run the site and, with your consent, analytics cookies to improve it. See our Cookie Policy for details and choices.

11. Children

MarbleMap is a business-to-business service intended for companies and users aged 18 or over. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page, and the "last updated" date below will change.

Last updated: 13 July 2026 · MarbleMap · Fusapp OÜ · [email protected]