Mercosur TradeFlow
The EU-Mercosur agreement is signed but not yet in force. Tariff timelines shown are projections based on the expected entry-into-force year.

Privacy Policy

Version 1.0 — Effective 1 March 2026

1. Who we are

Mercosur TradeFlow (“we”, “our”, “us”) operates the tariff savings calculator at eu-mercosur-trade.com. We are the data controller for personal data collected through this service.

2. Data we collect

  • Email address — required to create an account.
  • Display name — only when signing in via Google (taken from your Google profile).
  • Session cookie — a functional, httpOnly cookie used solely to keep you signed in. It contains an encrypted session reference and is not used for advertising or analytics.

We do not collect postal addresses, phone numbers, payment details, or demographic data.

3. Why we process your data

Lawful basis: Consent (GDPR Art. 6(1)(a)). You provide explicit consent when you create an account by checking the consent checkbox. You may withdraw consent at any time by deleting your account (see section 6).

We use your email solely to authenticate you and to maintain your account. We do not send marketing emails without separate, explicit opt-in.

4. Data processors

We share data with the following sub-processors under GDPR Art. 28 agreements:

  • Auth0 (Okta, Inc.) — identity and authentication. Data stored in the EU region. Auth0 Privacy Policy: auth0.com/privacy.
  • Vercel Inc. — hosting and edge network. Vercel Privacy Policy: vercel.com/legal/privacy-policy.
  • Resend Inc. — transactional email delivery (magic-link emails). Resend Privacy Policy: resend.com/legal/privacy-policy.

5. Data retention

Your account data is retained for as long as your account is active. If you request deletion, we will erase your data within 30 days.

6. Your rights (GDPR)

You have the right to:

  • Access — view your stored data on your account page.
  • Erasure (right to be forgotten) — email us at privacy@eu-mercosur-trade.com to request deletion. We will process requests within 30 days.
  • Portability — request a copy of your data in machine-readable format.
  • Withdraw consent — contact us to delete your account at any time.

You also have the right to lodge a complaint with your national data protection authority.

7. Age requirement

This service is not intended for users under 16 years of age. By creating an account you confirm you are at least 16 years old.

8. Contact

For privacy enquiries or data subject requests: privacy@eu-mercosur-trade.com