Who we are
myAImatch is operated by [TODO: legal entity name], with an address at [TODO: legal entity address]. In this policy, “myAImatch,” “we,” “us,” and “our” refer to that entity.
These policies are under legal review. The bracketed TODOs must be completed before final approval.
Privacy
Privacy policy
Effective July 30, 2026. This policy explains how myAImatch collects, uses, shares, and protects personal information across our website, AI Match Free Assessment, AI Tool Vault, MAI, AI Navigator, account features, emails, and consulting services.
Information you provide
We collect information you submit directly, including your name, email address, account details, role, goals, budget, workflow, current tools, assessment answers, support requests, consulting inquiries, and feedback. If you use MAI, we store your conversations and the profile or recommendations created from them. If you use AI Navigator, we collect the workflow signals and reports needed to provide that service.
Accounts and authentication
When you create or access an account, we process your email address, authentication identifiers, sign-in activity, and security records. Authentication may use a one-time passcode or Google OAuth. Google provides us with the account information you authorize, such as your email address and basic profile details.
Payments
Stripe processes payments for MAI credits and other paid products or services. We receive transaction details such as the customer and payment identifiers, amount, status, receipt information, and the product purchased. We do not receive or store your full payment card number.
Information collected automatically
We may collect IP address, device and browser details, pages viewed, referring pages, timestamps, product events, consent choices, search and filter activity, tool-profile visits, and affiliate-link clicks. Klaviyo may record email delivery, opens, and clicks. AI Navigator may collect app, domain, session, and activity signals needed to prepare its reports.
How we use information
We use personal information to operate and secure the site; authenticate accounts; deliver assessments, recommendations, MAI replies, Navigator reports, purchases, and consulting services; personalize your experience; send service messages and marketing you requested; measure site and campaign performance; improve product quality; prevent fraud and abuse; enforce our terms; and meet legal obligations.
Legal bases
Where the GDPR or UK GDPR applies, we process personal information as needed to perform a contract with you, take steps you request before entering a contract, comply with legal obligations, and pursue legitimate interests such as securing and improving our services. We rely on consent for optional analytics, advertising technologies, and marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.
How we share information
We share information with providers that help us run the service, including Vercel for hosting, Supabase for database and authentication infrastructure, Stripe for payments, Klaviyo for email, and analytics or security providers enabled through your privacy choices. We may also share information with professional advisers, contractors supporting a consulting engagement, authorities when legally required, or a buyer in a merger, financing, or sale, subject to appropriate safeguards.
Cookies and similar technologies
Necessary storage supports authentication, security, and core site functions. Optional analytics and advertising technologies stay off unless you enable them through our privacy controls. You can reopen those controls to change your choices. Your browser may also let you block or delete cookies, although some account features may then stop working.
Retention
We keep personal information only as long as reasonably needed for the purpose collected, including providing your account and purchases, maintaining recommendation history, resolving disputes, meeting tax or accounting obligations, preventing fraud, and enforcing agreements. Retention periods vary by data type. We delete or anonymize information when it is no longer needed, subject to lawful backup and recordkeeping periods.
Your privacy rights
Depending on where you live, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal information, or object to certain processing. You may withdraw consent and complain to your local data protection authority. California residents may also have rights to know, correct, delete, opt out of sale or sharing for cross-context behavioral advertising, limit certain uses of sensitive information, and receive equal service. We do not sell personal information. Use our privacy controls for optional advertising technologies or contact us to exercise a right. We may verify your identity before completing a request.
International transfers
Our providers and team may process information in countries other than your own, including the United States. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.
Security
We use technical and organizational measures designed to protect personal information, including access controls, encrypted connections, authentication safeguards, logging, and restricted administrative access. No online service can guarantee absolute security, so you should use a secure device and protect your account credentials.
Children
Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so we can review and delete it where required.
Changes to this policy
We may update this policy when our services or legal obligations change. We will post the revised version with a new effective date and provide additional notice when the change is material and the law requires it.
Contact
For privacy questions or requests, email [TODO: privacy and legal request email]. You may also write to [TODO: legal entity name and address].