Home

Privacy Policy

Last Updated: July 31, 2025

Matrisk (“Matrisk,” “we,” “our,” or “us”) builds AI‑powered tools that help insurance carriers analyze regulatory filings (“Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard information about:

Visitors to our public websites, including matrisk.ai (the “Site”); and
Users who access or test our software—whether under a self‑serve subscription or as an end‑user of a corporate customer.

When Matrisk processes data on behalf of a corporate customer (e.g., data you submit in a paid enterprise workspace), that customer is the controller and Matrisk is the processor. In those cases, the customer’s privacy notice applies. This Policy covers Matrisk’s role as controller.

1. Information We Collect

Identifiers & Contact Data
Examples: Name, email, phone, job title, company, and account ID.
Source: Provided by you (e.g., sign-up forms, events, chat) or by your employer.
Payment Data
Examples: Last four digits of card, billing address, transaction ID (processed via Stripe).
Source: Provided by you; stored by our payment processor.
User Inputs & Outputs
Examples: Prompts, documents uploaded, chat transcripts, and AI-generated responses.
Source: Created or submitted by you while using the Services.
Quality-Assurance Feedback
Examples: Ratings, comments, problem reports.
Source: Provided by you or generated by our support team.
Device & Usage Data
Examples: IP address, browser type, OS, referring page, clickstream, timestamps, error logs.
Source: Collected automatically via cookies, pixels, or server logs.

2. How We Use Information

Provide, secure, and maintain the Services; create your account.
Legal basis: Contract; Legitimate Interests.
Process payments and prevent fraud.
Legal basis: Contract; Legitimate Interests.
Quality assurance and model evaluation (unless you opt-out, we may review Inputs/Outputs and logs to improve accuracy, reliability, and safety).
Legal basis: Legitimate Interests.
Respond to support requests or product feedback.
Legal basis: Legitimate Interests.
Send service-related or administrative messages.
Legal basis: Contract.
Send marketing emails (you can unsubscribe any time).
Legal basis: Consent (where required).
Comply with legal obligations, enforce Terms of Service, protect rights or safety.
Legal basis: Legal Obligation; Legitimate Interests.

We do not use customer Inputs or Outputs to train Matrisk’s foundation models, and we do not sell personal data.

3. Sharing & Disclosure

We share information only as necessary:

Service Providers. Cloud hosting (AWS), database and logging vendors, customer‑support platforms, payment processors, analytics providers—all under contracts that restrict use to our instructions.
Corporate Affiliates. Subsidiaries or future entities under common control, subject to this Policy.
Business Transfers. In connection with a merger, financing, acquisition, or dissolution.
Legal & Safety. To comply with law, court orders, or to protect Matrisk, our users, or the public.
With Consent. At your direction (e.g., if you integrate a third‑party app).

4. Cookies & Similar Technologies

We use first‑ and third‑party cookies for:

Essential operations (authentication, session management)
Analytics (aggregated usage metrics)
Marketing (to measure campaign performance)

You can manage cookies in your browser settings or via the cookie banner on our Site.

5. Your Rights & Choices

U.S. privacy laws give you, subject to verification and certain limitations, the right to:

Know / Access the categories and specific pieces of personal data we collect.
Delete data we collected from you.
Correct inaccurate data about you.
Opt Out of targeted advertising or the sharing of personal data for such purposes.
Limit use of sensitive personal information (we do not collect “sensitive” data as defined by the CPRA).

How to Exercise Your Rights

Email sergey@matrisk.ai with your request. We will verify identity via your account email and respond within the timeframe required by applicable law.

Opt‑out of Quality‑Assurance Review

If you do not want your Inputs/Outputs used for quality assurance, email sergey@matrisk.ai or disable the setting in your account portal. This may limit our ability to resolve certain support issues.

6. Data Security

We employ technical and organizational measures aligned with industry standards (ISO 27001‑inspired controls, encryption in transit and at rest, role‑based access, audit logging). No security method is perfect; we cannot guarantee absolute security.

7. Data Retention

We keep personal data only as long as necessary for the purposes described above:

Account data: while your account is active and up to 90 days after deletion (for audit/backup).
Quality‑assurance logs: up to 30 days unless you opt out or deletion is required sooner.
Billing records: 7 years (tax/legal).

We may anonymize or aggregate data for analytics and keep it indefinitely.

8. International Data Transfers

Our primary servers are in the United States. If you access the Services from outside the U.S., you consent to transferring your information to the U.S. and other jurisdictions where privacy laws may differ. We rely on contractual safeguards (e.g., Standard Contractual Clauses) for limited transfers of EU/UK personal data.

9. Children’s Privacy

The Services are intended for users 18 years or older. We do not knowingly collect information from children. If you believe a child has provided us personal data, contact sergey@matrisk.ai and we will delete it.

10. Changes to This Policy

We may update this Policy periodically. Material changes will be posted on this page with a new “Last Updated” date and, if required, we will notify you via email or in‑app banner.

11. Contact Us

Armatta Equity, Co. 8034 Glenmore Dr. Powell, OH 43065

Privacy & Data Protection Officer Email: sergey@matrisk.ai

By continuing to use our Site or Services after the Effective Date, you acknowledge this Privacy Policy.