1. Who we are
This Privacy Policy explains how Materi Ltd (“Materi”, “we”, “us” or “our”), a UK company based in London, United Kingdom, handles personal information when you visit getmateri.com, request access, or use app.getmateri.com and our related services (the “Services”).
We are the controller of the personal information described in this policy. When we provide the Services to an organisation under a written agreement that makes us its processor, that organisation controls the content in its workspace, and we process it on its instructions.
You can contact us about privacy at any time at hello@getmateri.com.
2. Information we collect
Information you give us
- Get Access requests: your full name and email address. To prevent abuse of the form, we also use a one-way hash of your IP address.
- Account information: your name, email address and sign-in details, and optional profile details such as a photo, company and role. Passwords are stored only as secure hashes.
- Your content: the files, prompts, messages, comments, documents, spreadsheets and slides you create or upload, the instructions and feedback you give Materi’s workers, and the outputs Materi generates for you.
- Communications: messages you send us, such as support requests and feedback.
Information created when you use Materi
- Usage information: the pages and features you use, actions you take, AI credit usage and when you are active.
- Device and connection information: your IP address, browser, operating system, device type, time zone and approximate location derived from your IP address.
- Technical information: logs, error reports and records of AI agent runs that help us keep Materi reliable and secure.
If you open a shared link without an account, we create a temporary anonymous session so that you can view the shared content.
Information from others
- Google sign-in: if you sign in with Google, Google shares your name, email address and profile picture with us.
- Connected services: if you connect a service such as email, cloud storage, a CRM or an HR system, we receive the data you authorise under the permissions you grant. Some of this data, such as recent emails and files, is synced and stored in Materi so that agents can search it. This data can include information about other people, such as names and email addresses. You can disconnect a service at any time.
- Paddle: when you buy a subscription, Paddle shares details of your purchase with us, such as your name, email address, plan, subscription status and billing period, and customer and transaction references.
- Collaborators: people who invite you to a workspace or share a document with you give us your name or email address.
3. How we use information
We use personal information for the purposes below. Where UK or EU data protection law applies, we rely on the legal basis shown for each purpose.
| Purpose | Legal basis |
|---|---|
| Provide Materi: your account, workspaces, AI features, collaboration and connected services | Performing our contract with you |
| Review Get Access requests and send invitations | Our legitimate interest in managing access, or steps you ask us to take before a contract |
| Manage subscriptions, AI credit allowances and billing records with Paddle | Performing our contract with you, and complying with tax and accounting law |
| Send service messages, such as sign-in codes, invitations, security notices and changes to our terms | Performing our contract with you |
| Send product updates, which you can unsubscribe from at any time | Our legitimate interest in telling you about Materi, or your consent where the law requires it |
| Keep Materi secure, prevent fraud and misuse, and diagnose and fix problems | Our legitimate interest in protecting and maintaining Materi |
| Understand how the website and product are used and improve them | Our legitimate interest in improving Materi |
| Comply with the law, respond to lawful requests and enforce our terms | Complying with legal obligations, and our legitimate interest in protecting our rights |
We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
4. AI and your content
Materi’s agents work on your content to answer questions and produce outputs. To do that, we send the relevant parts of your content, prompts and connected data to the AI model providers listed below. They process it to return results to us, under commercial terms that do not allow them to use it to train their models.
We do not use your content to train AI models. Workers are Materi agents that you teach to carry out a recurring task. When a worker learns from your reviews and corrections, that learning is stored with your workspace and used only for your work.
We also check conversations automatically to detect misuse and protect confidential information. Our team accesses your content only where needed to give you support you ask for, diagnose and fix problems, keep the Services secure, investigate misuse, or comply with the law.
5. Payments
Paid plans are sold by Paddle.com, our online reseller and Merchant of Record. Paddle collects and processes your payment details, billing address and tax information as an independent controller under its own privacy notice. We never receive or store your full payment card details.
We keep the subscription and transaction information we need to provide your plan and meet our accounting obligations. We do not use information we receive from Paddle for marketing without your consent.
7. International transfers
Our application servers are in London, and we and our service providers also process information in the European Union, the United States and other countries. When we transfer personal information out of the UK or the European Economic Area, we use safeguards recognised by data protection law, such as adequacy decisions, the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses.
8. How long we keep information
We keep personal information only for as long as we need it for the purposes in this policy:
- Account information and content are kept while your account is open. When your account is closed, whether you ask us to close it or we end your access, we delete them from our active systems within 30 days, and copies in backups expire within a further 90 days.
- Data synced from connected services is kept while the service is connected. It stays in Materi if you disconnect with “Disconnect account”, and is deleted if you choose “Disconnect and wipe” or when your account is closed.
- Get Access requests are kept while we review them and, if you are approved, until you create your account. We delete a request when you ask us to, and within 24 months at the latest.
- Billing records are kept for as long as tax and accounting law requires, usually up to 7 years.
- Logs, agent run records, session recordings, analytics and error reports are kept for up to 24 months, including after your account is closed. Agent run records and session recordings can include content from your work.
We may keep information for longer where the law requires it, or to resolve disputes and enforce our agreements.
9. Security
We protect personal information with technical and organisational measures, including encryption in transit and at rest, access controls enforced at the database level, and separation between workspaces. No system is completely secure, so we cannot guarantee absolute security. Our Security page explains more about how we protect Materi.
10. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that is inaccurate or incomplete;
- delete your information;
- restrict or object to how we use it, including for direct marketing;
- receive your information in a portable format; and
- withdraw consent where we rely on it, without affecting processing that happened before.
To use these rights, email hello@getmateri.com. We may need to verify your identity first. We will respond within one month, or within the time your local law requires. You can also unsubscribe from product emails using the link in each email.
If you live in a US state with a consumer privacy law, such as California, you have the right to know what personal information we collect and how we use it, and to access, correct and delete it. We do not sell or share personal information for targeted advertising, and we will not discriminate against you for using your rights. You may use an authorised agent to make a request.
If you are in the UK, you can complain to the Information Commissioner’s Office. If you are in the European Economic Area, you can complain to your local data protection authority. We would appreciate the chance to address your concern first.
12. Children
Materi is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you think a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will post the updated policy on this page and change the date above. If we make a material change, we will tell you by email or in the Services before it takes effect.
14. Contact us
If you have questions about this policy or how we handle your information, contact us:
Materi LtdLondon, United Kingdomhello@getmateri.com