Legal
Privacy Policy
Effective May 4, 2026
Matador Solutions (“Matador,” “we,” “us”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to the Matador websites, applications, and APIs (collectively, the “Service”).
1. Information We Collect
1.1 Information you provide
- Account & profile data: name, email, phone, organization, role, avatar, and authentication identifiers from Clerk.
- Customer Data: contacts, opportunities, proposals, tasks, financial snapshots, valuations, documents, and other content you or your team upload or generate.
- Billing data: processed by our payment partners; we store the last four digits of cards and billing address only.
- Support communications: messages you send to us via email, forms, or chat.
1.2 Information from integrations you authorize
When you connect an integration (Google Workspace, GoHighLevel, Slack, Meta, QuickBooks, Twilio, Anthropic, etc.) we access only the data needed to provide the feature you enabled — for example, reading documents from Google Drive, syncing contacts from GHL, or sending messages via Slack. OAuth tokens are stored encrypted and refreshed as needed.
1.3 Information collected automatically
- Usage data: log entries, API requests, feature interactions, and performance metrics used to operate and improve the Service.
- Device data: IP address, browser type, operating system, and device identifiers.
- Cookies & similar technologies: session cookies for authentication and limited first-party analytics. We do not sell data to advertisers.
2. How We Use Information
We use personal information to:
- Provide, maintain, secure, and improve the Service;
- Authenticate users and enforce multi-tenant data isolation;
- Run AI agents on your behalf using providers such as Anthropic;
- Process payments and manage subscriptions;
- Send transactional emails (receipts, security alerts, product updates);
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms;
- Comply with legal obligations and respond to lawful requests.
3. AI & Automated Processing
Matador uses third-party large language models (currently Anthropic Claude) to power agent execution and content generation. When you trigger an agent, relevant Customer Data may be transmitted to the LLM provider to fulfill the request. We do not allow provider use of your Customer Data for model training, and we configure shared API keys to restrict cross-tenant access.
4. How We Share Information
We share personal information only as described below:
- Subprocessors & service providers: hosting (Vercel), database (Supabase / PostgreSQL), authentication (Clerk), email (Resend), webhooks (Svix), AI providers (Anthropic), and the integrations you authorize.
- Within your organization: data you submit is visible to other users in your tenant according to their role and permissions, and — for sub-accounts — to the agency that provisioned your tenant.
- Legal & safety: when required by law, subpoena, or to protect rights, property, or safety.
- Business transfers: in connection with a merger, acquisition, or asset sale, with notice to affected customers.
We do not sell personal information.
5. Data Retention
We retain Customer Data for the duration of your subscription and for a limited period afterward to allow recovery and meet legal obligations. Upon termination, you may export your data; thereafter we will delete it within 90 days unless retention is required by law. Aggregated, de-identified data may be retained for analytics.
6. Security
We implement administrative, technical, and physical safeguards including encryption in transit (TLS), encryption at rest, role-based access controls, PostgreSQL Row-Level Security for tenant isolation, secret rotation, audit logging, and least-privilege production access. No system is perfectly secure; please report vulnerabilities to security@matador.solutions.
7. Your Rights & Choices
Depending on your location (including the EU/EEA, UK, and California), you may have the right to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent. To exercise these rights, contact privacy@matador.solutions. We will respond within the timeframe required by applicable law.
If your data is held by Matador on behalf of an organization (your employer or agency), please direct rights requests to that organization; we will support them in responding.
8. International Transfers
Matador is based in the United States, and our subprocessors may process data in the US and other countries. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced by email or in-app notice. The “Effective” date at the top of this page indicates when the latest version took effect.
11. Contact Us
Questions or requests? Email privacy@matador.solutions. For general support, use support@matador.solutions.