1. Data controller
The data controller for your personal data is the owner of MatrixAI Studio, based in Spain. You can contact us through the form available at matrixaistudio.org/contact.
2. Data we collect
We collect only the data necessary to provide the service:
- Registration data: username and email address to create and maintain your account.
- Usage data: interactions with Studio, simulations run, downloads and licence activations. Not your models, your datasets or your training traces: the Studio runs on your machine and none of that reaches our servers.
- Technical data: IP address, browser type and operating system, collected automatically for security and diagnostic purposes.
- Contact data: name, email and message when you write to us via the contact form.
We do not collect payment data, biometric data or special-category personal data.
3. Purpose of processing
3.1 Service delivery
We use your data to provide access to MatrixAI Studio, manage your models and artefacts, and allow you to train, evaluate and serve AI systems within the platform.
3.2 Security and audit
Usage and technical data are used to detect unauthorised access, ensure the integrity of training traces and comply with the system's audit requirements.
3.3 Service communications
Your email may be used to notify you of important service changes, security updates or responses to your enquiries. We do not send commercial communications without your explicit consent.
4. Legal basis for processing
- Performance of the service contract accepted upon registration.
- Compliance with applicable legal obligations.
- Legitimate interest in ensuring the security and integrity of the system.
- Your explicit consent where required.
5. Data retention
We retain your data for as long as your account is active. After account deletion, personal data is erased within a maximum of 30 days, unless applicable law requires a longer retention period.
Training traces and model artefacts generated within the system are retained for the lifetime of the account and deleted together with it.
6. Data sharing
We do not sell or share your personal data with third parties for commercial purposes. Data is shared only in the following cases:
- With technical infrastructure providers necessary for operating the service (EU-based servers), under confidentiality and data protection agreements.
- When required by law or court order.
7. International transfers
Data is processed primarily on servers located in the European Union. If a necessary service ever required a transfer outside the EEA, it would be carried out under GDPR safeguards (standard contractual clauses or European Commission adequacy decisions).
8. Your rights
As a data subject, you have the right to:
- Access the data we hold about you.
- Rectify inaccurate or incomplete data.
- Request erasure of your data when it is no longer necessary.
- Object to processing or request its restriction.
- Request portability of your data in a structured format.
To exercise any of these rights, contact us via the contact form. We will respond within 30 days.
If you believe the processing of your data violates applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency at aepd.es.
9. Security
We apply technical and organisational measures to protect your data: encryption in transit (SSL/TLS), role-based access control, access logging and regular backups. Model traces include cryptographic signatures to guarantee their integrity.
10. Minors
MatrixAI Studio is not directed at persons under 16. We do not knowingly collect data from minors. If you believe a minor has provided data without authorisation, please contact us so we can delete it.
11. Changes to this policy
We reserve the right to update this privacy policy. When changes are significant, we will notify you by email or via a prominent notice on the platform. The date of the last update will always be visible at the top of this document.