Matyns Privacy Policy

Effective date: June 30, 2026

Last updated: June 30, 2026

Matyns ("Matyns," "we," "us") is a service operated by Matyns LLC, 159 1st Ave N, Unit 158, Franklin, TN 37064. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It covers our marketing site at matyns.com and our application at app.matyns.com (together, the "Services").

Questions? Contact us at privacy@matyns.com.

The short version

• Matyns connects to document storage you already use (such as Dropbox and Google Drive), reads your files, and turns them into structured, searchable data.
• We use AI (Anthropic's Claude models via API) to extract that data. Anthropic does not train its models on your content, and that content is processed under Anthropic's Data Processing Addendum.
• Sensitive identifiers such as Social Security numbers are automatically masked during processing.
• We don't sell your personal information.
• You can disconnect a source or ask us to delete your data. After account termination we delete customer documents and extracted data within 30 days.

This summary is for convenience only; the full policy below governs.

1. Who this policy applies to

Matyns is a business-to-business service intended for organizations and their authorized users. The Services are not directed to children and are not intended for anyone under 18. We do not knowingly collect personal information directly from children. Note that customer documents processed through Matyns may themselves contain personal information about third parties (for example, a borrower's dependents); we process that information solely as a service provider / processor on behalf of our customer, as described in Section 5.

2. Information we collect

a. Account and contact information. Name, email address, organization, and role of the people we create accounts for, plus authentication data managed through our auth provider.

b. Customer documents and extracted data. When you connect a storage source, we access the files in the folders you authorize and generate structured data and searchable text from them. These documents and their extracted data are "Customer Content." Customer Content frequently contains sensitive information — financial records, tax returns, contracts, and identifiers — see Section 4 on how we handle it.

c. Connector credentials. OAuth tokens that let us read the specific storage locations you authorize. These are stored encrypted and are scoped to only the folders/accounts you connect.

d. Usage and technical data. Logs of actions taken in the Services (an audit log scoped to your organization), plus standard technical data such as timestamps and error information needed to operate and secure the Services.

e. Communications. If you email us or fill in a contact link, we receive what you send.

The marketing site (matyns.com) uses no analytics or tracking cookies. If we add analytics or other tracking in the future, we will update this policy and provide a cookie notice where required.

3. How we use information

We use the information above to: provide and operate the Services (ingest, extract, organize, and let you query your documents); secure the Services and maintain the audit log; respond to your requests and support you; comply with law; and communicate with you about the Services (for example, transactional email).

We do not sell personal information, and we do not use Customer Content to advertise.

4. AI processing, PII masking, and high-risk decisions

AI processing. We use Anthropic's Claude models through the Anthropic API to read documents and extract structured data. Under Anthropic's Commercial Terms, Anthropic does not train its models on data submitted through the API, and such data is processed under Anthropic's Data Processing Addendum. Anthropic is one of our subprocessors (Section 6).

PII masking. Matyns is built to reduce exposure of sensitive identifiers. Social Security numbers are automatically masked (reduced to the last four digits) during processing. This runs in two independent layers: the extraction step is instructed never to return a full identifier, and a separate programmatic check masks any identifier pattern before data is stored — applied to both the structured fields and the raw extracted text.

Human review of high-risk decisions. Where Matyns output could inform decisions in sensitive areas — in particular lending, creditworthiness, or other financial eligibility determinations — Matyns output is decision-support only. A qualified person must review before any such decision is finalized, and where AI-assisted output is presented to an affected individual, its use of AI is disclosed. See the Terms of Service for the binding version of this commitment.

5. Our role: processor vs. controller

For account and contact data about your users, Matyns generally acts as a controller. For the Customer Content we process on your behalf, Matyns acts as a processor / service provider — we handle it under your instruction to provide the Services, not for our own purposes. Business customers that need a Data Processing Agreement (DPA) can request one at legal@matyns.com.

6. How we share information — subprocessors

We don't sell your data. We share it only with service providers ("subprocessors") that help us run the Services, each under contractual confidentiality and data-protection obligations, and with authorities where required by law. Current subprocessors:

7. Data retention

We retain Customer Content for as long as your account is active and you keep a source connected. When you disconnect a source, you can choose to keep or remove the documents from that source. After your account is terminated (by you or us), we delete Customer Content and extracted data within 30 days, except where we must retain limited records to comply with law or resolve disputes. Account and audit records may be retained for up to 12 months after termination for security and legal purposes.

8. Security

We use administrative and technical safeguards appropriate to the sensitivity of the data, including: per-tenant isolation enforced at the database layer (row-level security), so one customer's data is not accessible to another; encryption of connector tokens at rest; least-privilege, scoped connector access (we only read the folders you authorize); a read-only default posture for automated actions; and a per-organization audit log. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Where data is processed

The Services and our subprocessors process and store data in the United States. The Services are intended for U.S.-based customers. If you access the Services from outside the United States, you understand that your information will be processed in the United States.

10. Your choices and rights

You can access or update account information, disconnect any connected source at any time, and request deletion of your data. Depending on where you or your customers are located, additional rights may apply (for example, access, correction, deletion, or portability under laws such as the CCPA or GDPR). To make a request, contact privacy@matyns.com. Because much Customer Content is processed on behalf of our business customers, we may direct certain requests to the relevant customer (the controller).

11. Changes to this policy

We may update this policy. If we make material changes we'll update the effective date and, where appropriate, notify you. Continued use of the Services after changes take effect means you accept the updated policy.

12. Contact

Matyns LLC
159 1st Ave N, Unit 158, Franklin, TN 37064
privacy@matyns.com