Privacy Policy

1. Information We Collect

Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password, and company name when you create an account
• Company Data: Contributor information, equity allocations, contribution logs, and related business data you enter into the platform
• Payment Information: Billing details processed through our third-party payment processor (we do not store full credit card numbers)
• Communications: Information you provide when contacting us for support or inquiries

Information Collected Automatically

When you access our Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent on pages, and interaction patterns
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, and referring URLs
• Cookies: We use cookies and similar technologies to maintain sessions and improve user experience

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to respond to legal process
• Protection of Rights: To protect the rights, property, or safety of Equitymatrix LLC, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

4. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data centers with physical security measures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. After account cancellation:

• Your data remains accessible in read-only mode for 90 days
• You may export your data at any time during this period
• After 90 days, your data is permanently deleted unless required by law

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

How to submit a request

To request access to, deletion of, or transfer of your personal data, email us at support@equitymatrix.io with the subject line "Data Request" and a description of what you need. We will verify your identity and respond to your request within 30 days.

For data deletion requests: we will permanently delete your personal information from our systems within 30 days of verifying your request, except where we are required by law to retain certain records. You will receive confirmation once the deletion is complete.

For data access or portability requests: we will provide a copy of your personal data in a commonly used, machine-readable format (such as CSV or JSON) within 30 days of verifying your request.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

8. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party services we use include:

• Google Analytics (usage analytics)
• Stripe (payment processing)
• Vercel (hosting)
• Anthropic (AI language model for natural language processing of contributions)

AI and language model processing

Certain features of our Service use Anthropic's Claude language model to process user input, such as parsing natural language contribution descriptions submitted through our Slack integration. When you use these features, the text you submit is sent to Anthropic for processing. We do not use your data to train AI models, and Anthropic does not use API inputs for model training. The AI provider processes your input solely to return a structured response to our Service. For more information, see Anthropic's privacy policy.

Slack integration

When you install the Equity Matrix Slack app, we store only the minimum data required to maintain the connection: your workspace identifier, bot access token, bot user identifier, and the linked organization reference. No message content or conversation history is permanently stored. Workspace user profile data (name and email) is used in real time to match Slack identities to Equity Matrix accounts.

All Slack connection data is stored in an encrypted PostgreSQL database hosted on AWS. Data is encrypted in transit via TLS and at rest via AWS encryption.

When a user or workspace administrator requests data deletion, or when the app is uninstalled from a workspace, we remove all stored Slack-related data associated with that workspace, including the bot access token, workspace identifier, and workspace-to-organization link. No Slack data is archived after removal. Deletion is performed promptly upon uninstallation or request.

Equity Matrix account data (contributions, equity records) is managed separately and is not affected by the Slack app uninstallation. To request deletion of your Equity Matrix account data, see Section 6 (Your Rights and Choices) above.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: