Privacy Policy

Last updated 2026-09-28.

This policy describes what MatterWave collects when you use the service, why, and what you can do about it. This is the pre-release privacy policy for MatterWave. It will be updated before general availability.

What we collect

When you sign up: your name, email address, an optional phone number, and the password you choose. The password goes to our identity provider and is never stored by the application. Your email address is the name of your account.

When you use the service: the conversations you have, the model each turn used, token counts and timings, and the API keys your organisation issues (stored hashed, never in the clear).

Why we collect it

To sign you in, to keep your conversations where you left them, to meter usage against your organisation's budget, and to tell you about changes to the service or your account. We do not sell personal data and we do not use your content to train models.

Where it lives

Account and organisation records live in our database. Credentials and verification codes are handled by the identity provider that backs sign-in. If your organisation attaches its own single sign-on provider, that provider sees your sign-in and its own policy applies to it.

Who sees it

The model provider that serves a request sees the content of that request. Administrators of your organisation can see who its members are and what the organisation has spent, not the content of your conversations. Our operators see operational metadata and never log prompt or completion text.

Your controls

Settings lets you export everything stored for your account and delete the account. Deletion removes your conversations and profile; a hash of the email address is kept so the same address cannot be re-registered, and billing records are kept for the period the law requires.

Cookies

The service sets a session cookie that keeps you signed in and a cross-site-request token that protects it. Both are strictly necessary; there is no analytics or advertising cookie.

Changes and contact

When this policy changes we publish it here with a new date. Questions about your data go to the address your organisation was given at signup.