Privacy Policy

Information you provide

• Contact data, such as your name, work email address, company, role, company size, and anything you write when you request early access or ask to talk with us.
• Account data, such as your name, email address, and workspace name when you sign in and create a workspace.
• Communications data from your exchanges with us, such as support requests and email.
• Content and metadata: the files, apps, and other material you publish, and information about them such as names, versions, owners, sharing settings, and activity.
• Data about others: the email addresses of people you share work with or invite. Please share only with people you are permitted to share with.
• Billing data, when paid plans are available: payment details are collected and processed directly by our payment processor; we do not store full card numbers.

Information from third parties

When you sign in with Google or another sign-in provider, we receive your name and email address from that provider, based on your settings there. If you are invited to a workspace, we receive your email address from the person who invited you.

Information collected automatically

When you use the Service, our systems and providers record technical information needed to operate and secure it, such as IP address, browser type, request times, the pages or items requested, and whether access was allowed or denied. The marketing site at matterhall.com does not use analytics, advertising, or tracking tools.

matterhall.com sets no cookies and uses no analytics, pixels, or advertising trackers.

app.matterhall.com and published content use strictly necessary cookies to keep you signed in, protect against cross-site request forgery, and confirm your access to shared work. They are not used for advertising or tracking across other sites. Blocking them prevents sign-in.

We do not respond differently to “Do Not Track” signals, because we do not track you across other sites. We treat Global Privacy Control signals as a request to opt out of sale or sharing, which we do not do.

• To provide the Service: create and run your account and workspace, publish and host your work, enforce the sharing choices you make, and keep version and activity history.
• To keep the Service secure: scan uploads for malware, verify identity and permissions on each request, detect and prevent abuse, fraud, and unauthorized access, and keep security and audit records.
• To communicate with you: respond to early-access and contact requests, send service messages such as sharing notifications and security alerts, and, if you choose, send product updates.
• To improve the Service: understand how features are used, in aggregated or de-identified form. We do not attempt to re-identify de-identified data.
• For compliance and protection: comply with law and legal process, enforce our terms, and protect the rights, privacy, safety, and property of our users, the public, and Matterhall.

We do not sell your personal information, use it for targeted advertising, or use your content to train AI models. Publishing and sharing do not send your content to any AI model.

• Service providers that operate the Service on our behalf under contract: Google Cloud (hosting, storage, and databases in the United States), Cloudflare (website delivery, DNS, and storage of early-access requests), WorkOS (sign-in and identity), and Resend (email delivery). When paid plans are available, Stripe processes payments.
• People you share with. When you share an item, the people you choose can see it and your name as its owner.
• Your workspace. Workspace administrators can see information about items in their workspace, such as owner, access, status, and activity, so they can manage it.
• Professional advisors, such as lawyers, auditors, and insurers, in the course of their services to us.
• Authorities and others when we believe in good faith it is required by law or necessary to protect rights, safety, or property.
• Business transferees in connection with an actual or prospective financing, merger, acquisition, sale of assets, or similar transaction, subject to this Privacy Policy.

You decide what you publish and who can open it. Published content is private by default: only people you share with can open it, after signing in. We access content only as needed to provide and secure the Service (for example, to scan it for malware), to respond to your support requests, or to comply with law. Content you publish may contain personal information about others; you are responsible for having the right to publish and share it.

We keep personal information for as long as needed for the purposes described here, including legal, accounting, and security requirements. Early-access and contact requests are kept until we have responded and no longer need them for that relationship, or until you ask us to delete them. Account data is kept while your account is active. Published content is kept until you or your workspace delete it, or the workspace is closed, subject to limited backup and security records. When we no longer need information, we delete it, de-identify it, or isolate it from further use.

• Access and update: you can review and update account information after signing in, or contact us.
• Delete: you can delete items you own. To delete your account or an early-access request, email admin@matterhall.com.
• Communications: you can opt out of product updates using the unsubscribe link in any such email. Service messages, like security alerts and sharing notifications, will continue while you use the Service.
• Declining to provide information: some information, such as an email address, is required to use the Service.

We use technical, organizational, and physical safeguards designed to protect personal information, including encryption in transit and at rest, separate domains for published content, access checks on every request, and malware scanning. You can read more in our security architecture overview. No system is perfectly secure, and we cannot guarantee the security of your information.

Matterhall is based in the United States. We store Service data in the United States, on Google Cloud in the us-east1 region. Some providers, such as Cloudflare for website delivery, may process limited technical data in other locations as part of operating their networks.

The Service is not intended for anyone under 18. If you believe we have collected personal information from a child, contact us and we will delete it as required by law.

We may update this Privacy Policy. If we make material changes, we will update the effective date and post the new version here, and where appropriate notify you by email or in the Service. Changes take effect when posted unless we say otherwise.

• Email: admin@matterhall.com

This section applies to residents of U.S. states whose privacy laws apply to us (“State Privacy Laws”). Depending on where you live, you may have the right to:

• Know the categories of personal information we collect, its sources, the purposes, and the categories of third parties we disclose it to.
• Access a copy of your personal information.
• Correct inaccurate personal information.
• Delete personal information we collected from you.
• Appeal our decision on your request.

We do not sell personal information or share it for targeted advertising, and we do not use it for profiling that produces legal or similarly significant effects. We do not knowingly collect personal information of consumers under 16, and we do not intentionally collect sensitive personal information.

To make a request, email admin@matterhall.com. We will verify your request by confirming control of the email address associated with your information, and may ask for more detail if needed. You may use an authorized agent; we may ask for proof of their authority and confirm the request with you. We will not discriminate against you for exercising these rights.

Information practices over the past 12 months

We have not sold or shared personal information for cross-context behavioral advertising.

California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing purposes.