1. Scope
This Privacy Policy covers personal data processed by MatrixNet Technologies Pvt. Ltd. (Kathmandu, Nepal) when you visit our website or use MatrixNet CMS. For data your company enters about its own staff, vendors, or clients, your company is the data controller and we act as a processor on its instructions.
2. What we collect
- Account data — name, email address, role, company name, and password (stored as a salted hash, never in plain text).
- Workspace content — the projects, tasks, materials, invoices, workforce and payroll records your team enters to use the product.
- Billing data — handled by our merchant of record, Paddle. We receive subscription status, plan, and billing country; we never receive or store your full card details.
- Technical data — IP address, browser type, device information, and log data (such as login timestamps) collected automatically for security and reliability.
- Support communications — emails you send us.
3. Why we process it
- To provide, secure, and improve the Service (performance of contract / legitimate interest).
- To authenticate logins and maintain audit logs of significant account actions (security).
- To process subscriptions and comply with tax and accounting obligations (legal obligation).
- To respond to support requests and send service-related notices. We do not sell personal data, and we do not use your workspace content for advertising.
4. Cookies
We use strictly necessary cookies and local storage to keep you signed in and remember preferences. We do not run third-party advertising trackers on the application.
5. Where data is stored
Customer data is hosted on secured virtual private servers, with access restricted to authorised personnel, encrypted transport (HTTPS/TLS), and routine backups. Payment processing takes place on Paddle's infrastructure under Paddle's own privacy terms.
6. Sharing
We share personal data only with: (a) Paddle, for payments; (b) infrastructure providers that host the Service; (c) AI processing providers, only for features you actively invoke (such as report summaries), limited to the content needed for the feature; and (d) authorities where required by law. All processors are bound by contractual confidentiality and data-protection obligations.
7. Retention
We keep account and workspace data for the life of your subscription and up to 60 days after closure (for recovery), after which it is deleted from active systems. Billing records are retained as required by tax law. Security logs are retained for up to 12 months.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. To exercise these rights, email us — we respond within 30 days. If you are in the EU/UK, you may also lodge a complaint with your supervisory authority.
9. Children
The Service is for business use and not directed at anyone under 18. We do not knowingly collect data from children.
10. Changes and contact
We will post updates to this policy here and announce material changes in the Service or by email.
Data protection contact: info@matrixnet.com.np · MatrixNet Technologies Pvt. Ltd., Kathmandu, Nepal.