How we protect your data.

We collect information you provide directly (account details, billing information, uploaded documents), information generated through your use of the platform (usage events, model prompts and outputs, audit logs), and technical information from your device (IP address, browser type, cookies).

Uploaded matter content is processed under your instructions and is never used to train shared foundation models.

We use personal data to provide and secure the service, deliver customer support, meet legal obligations, prevent abuse, and improve platform quality through aggregated, de-identified analytics.

Where GDPR or UK GDPR applies, we rely on contract performance, legitimate interests (securing and improving the service), compliance with legal obligations, and — where required — your consent.

We share personal data only with vetted subprocessors that support hosting, model inference, error monitoring, analytics, payment processing and customer support. A current subprocessor list is available on request.

When personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses and equivalent safeguards, together with technical measures such as encryption in transit and at rest.

Account data is retained for the life of the account. Matter content is retained per your workspace settings and deleted on request or on termination, subject to legal hold obligations.

We maintain administrative, technical and organizational safeguards aligned with SOC 2 and ISO 27001, including encryption, access controls, continuous monitoring and regular third-party testing.

Depending on your jurisdiction, you may have rights to access, rectify, delete, restrict or port your personal data, and to object to certain processing. To exercise these rights, contact our privacy team.

Questions about this policy can be sent to [email protected].