Privacy Policy

Account information. When you sign up, we collect your email address and the public key of the passkey you register. We never see or store a password. If you join a workspace, we store your role and membership.

Agent and thread data. To run agents, we store the prompts you send, the messages your agents produce, tool inputs and outputs, memory entries, files your agents read and write, schedules, and sandbox execution history.

Integration credentials.When you connect a third-party service (Google, Slack, GitHub, Linear, Notion, or an MCP server you configure), we store the OAuth tokens required to call that service on your agents’ behalf. Tokens are encrypted at rest and never exposed to the model.

Google user data. If you connect Google services, we may process the Google account information and Google Workspace data you authorize, including profile details, email messages, drafts, labels, attachments, calendar events, and Drive file metadata or content. We access this data only for the tools, agents, and workflows you configure.

Usage and diagnostic data. We collect logs, error reports, and usage metrics (requests, token counts, latency) so we can debug, bill, and improve the service. We also keep an audit log of the actions your agents take.

Cookies. The console uses cookies only to keep you signed in. We do not use advertising or third-party tracking cookies.

We use the information we collect to:

• Provide, maintain, and improve the Matrices services.
• Execute the agents, tool calls, and schedules you configure.
• Verify your identity and enforce access controls.
• Send service communications, billing notices, and security alerts.
• Call Google APIs and other connected services on your behalf when an authorized tool or agent action requires it.
• Detect abuse, prevent fraud, and investigate incidents.
• Comply with legal obligations.

We do not sell your data, and we do not use your prompts, messages, or agent outputs to train models — ours or anyone else’s.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, credit decisions, resale, or training generalized AI models.

We share data only with the subprocessors we rely on to deliver the service:

• Amazon Web Services — infrastructure. Our databases, object storage, and agent runtime run inside our AWS VPC, and we deliver email through Amazon SES.
• Vercel — hosting for the web console.
• Anthropic, OpenAI, Google, Fireworks, xAI — model providers. Prompts and context you send to an agent are forwarded to the provider that serves the model you selected, directly or through AWS Bedrock.
• Stripe — billing and payments.
• Sentry — error monitoring.

We may also disclose information when required by law, to enforce our terms, or to protect the rights and safety of our users.

Data is encrypted in transit and at rest. Integration credentials are stored encrypted and are decrypted only at the moment of a tool call — the model never receives raw secrets.

Every agent action is checked against your workspace’s permissions before it runs, sensitive tool calls can require human approval, and we keep a full audit trail of tool invocations. Internal service credentials are minted per request and never persisted.

We retain your data for as long as your account is active and as needed to provide the service. You can delete agents, threads, memory entries, and connections at any time from the console. To close your account, email privacy@matrices.com; we delete your data within 30 days of the request, except where we are required to retain it for legal or compliance reasons.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing.

To exercise any of these rights, email privacy@matrices.com. We will respond within the timeframe required by applicable law.

Matrices is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page and, for material changes, notify you through the service or by email.

Questions about this policy? Email privacy@matrices.com.