Privacy Policy

We may modify this Privacy Policy from time to time, in which case we will update the “Last revised” date at the top of this page. If we make material changes to how we use or disclose the information we collect, we will use reasonable efforts to notify you, such as by emailing the last email address you provided us, and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

In addition to the specific uses described below, we may use the information we collect to provide, develop, and improve the Services. That includes understanding your requests, planning and completing tasks on your behalf (which may include engaging third parties on your behalf), generating responses, and offering suggestions based on the context of your interactions and your prior experience with the Services. We also use this information to communicate with you, to measure and analyze performance, to improve the safety and security of the Services, to comply with applicable legal obligations, and to protect our rights and the rights of our employees and others. We do not sell your information, and we do not disclose your information to registered data brokers or to third parties who resell your information to others.

Information you directly provide us

Some features of the Services require you to provide information about yourself directly. You may choose not to provide it, but doing so may prevent you from using those features. Information you submit directly includes:

• Contact details, such as your name, address, phone number, and email address. We use this to create and maintain your account, to provide the Services, and to communicate with you, including about products or services that may interest you.
• Payment information, such as credit or debit card details and billing address, which we collect through a third-party payment processor. We use this to process your payment and provide the Services.
• Any other information you include in communications with us, for example when you text Matilda over iMessage, SMS, or WhatsApp to engage the Services. We use this to provide the Services.

Information collected through your use of the Services

The Services include an autonomous assistant that acts on your behalf, should you choose to engage it. The assistant thinks, plans, and acts to help you complete everyday work: tracking deals and transactions, keeping a CRM current, following up with leads, and handling tenant, landlord, and vendor correspondence.

To perform those duties, the assistant is designed to be available when engaged and, depending on the permissions you grant, may have access to information you share with it and make available to it. This may include information from applications and services you have connected, text and documents you transmit, and other text or data made available to us through your connected integrations and accounts. It may include the contents of messages, emails, listing and lease documents, or other private communications and materials that you choose to make accessible to the assistant. The Services may also collect audio and voice data if you enable those features.

Depending on the permissions you grant and how you interact with the assistant, it may have access to information considered sensitive. For example, you may give the assistant payment information so it can settle a vendor invoice on your behalf, or credentials for a third-party account such as a CRM or a multiple listing service so the assistant can sign in for you. You may also use the assistant to handle information about third parties, including clients, tenants, and applicants, such as the contents of an email from a prospective tenant or a maintenance request describing a medical need. You are responsible for having the rights and permissions necessary to share that information with us.

As described above, we use certain information collected through your use of the Services to develop and improve our products and technologies, including to evaluate, fine-tune, and train the AI models that power them. If you do not want us to use your information to train AI models, you can opt out by emailing hello@matildahq.com. Even if you opt out, we may still use your information for AI model training where that information is flagged for safety review, so that we can improve our ability to detect harmful content, enforce our policies, and advance our safety research. The opt out applies going forward, and applies only to model training, not to other improvements to the Services. Opting out may limit the ability of the Services to address your specific use case. We may continue to use AI models that were trained, fine-tuned, or improved on your information before you opted out. We do not use information received directly from Google Workspace to evaluate, fine-tune, train, or improve AI models, as described below.

Please note that the Services and the assistant are not a professional advisor. You should not rely on them for actions requiring legal, financial, tax, brokerage, or other professional advice or judgment.

Matilda Worker for iPhone

Matilda Worker for iPhone is a companion to the Matilda Worker Mac app. It pairs with one Mac by scanning a code the Mac shows, and from then on the Mac and the iPhone exchange updates through a relay on our servers. Those updates are encrypted end to end with a key that exists only on your two devices; the relay carries them but cannot read them, and it does not store them.

To make the pairing work, the iPhone app sends us the name of your iPhone (so the Mac can show which phone is paired) and, if you allow notifications, the Apple push token for the app (so alerts from your Mac can reach the phone while the app is closed). We keep both for as long as the phone stays paired and delete them when you unpair, from either device. The iPhone app contains no advertising or analytics code and does not track you.

Information collected from Google Workspace

If you choose to link your Google Workspace to the Services, we receive access to your Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets, Google Slides, and Google Tasks, along with related file metadata, message metadata, calendar event details, and other content that Google shares with us about your account and your use of Google's products through the Google Workspace APIs. We use information collected from Google Workspace to provide the Services, including so the assistant can take actions on your behalf, and to personalize your use of the Services.

Our use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use information received from Google Workspace APIs to evaluate, fine-tune, train, or improve AI models, or to serve ads, including retargeting and personalized or interest-based advertising. Where third parties process Google Workspace information on our behalf, including third-party AI model providers, we permit them to process it only on our behalf and only to help us provide the Services, along with certain legally permissible purposes such as maintaining security and complying with law. In particular, we do not disclose raw or derived Workspace API user data to third-party AI services, including third-party AI model providers, for model training or other secondary purposes.

You may revoke our access to your Google Workspace at any time and request deletion of information collected through the Google Workspace APIs. You can revoke access by asking Matilda directly, by disconnecting the integration in your Matilda settings, or through your Google Account permissions page. You may also delete the information we previously collected from Google Workspace by deleting your Matilda account, or by emailing hello@matildahq.com.

Information we collect automatically about your interaction with the Services

We automatically collect certain information about your interaction with the Services (“Usage Data”). We use Usage Data to tailor features and content to you, to develop and improve our products and technology, including to evaluate, fine-tune, and train the AI models behind them, to run analytics, and to better understand how people use the Services.

• Usage information, such as clickstream information (keystrokes, clicks, cursor position, time spent on a page) and other information about how you use and interact with the Services.
• Location information, such as your precise geolocation, if you choose to share it.
• Log, network, and device information, including IP address, device type, operating system, browser type and version, time zone setting, and date and time stamps. In addition to the uses above, we may review this information for safety and security purposes when you report a bug.

Information collected from other sources

We may obtain information about you from outside sources, including information we collect directly from third parties and information from third parties that you choose to share with us.

In particular, the Services may obtain information about you when you give them access to third-party applications. For example, linking your Google Workspace gives us access to the Google products described above, and connecting a CRM or transaction management system gives us access to the records it holds. We may also receive information from login integrations such as Google OAuth, including your profile and email address. Where we receive information through Google OAuth, you may revoke our access at any time by asking Matilda directly or by disconnecting the integration in your settings. Disconnecting a third-party integration does not automatically delete the data already collected from it. To delete data indexed from external sources, email hello@matildahq.com.

Any information we receive from outside sources is treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided to us by third parties, nor for any third party's policies or practices. See the section on third-party websites and links below.

Deidentified information

We may deidentify or anonymize your information so that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”), or we may collect information that has already been deidentified, and we may use deidentified information for any purpose. Where we hold or process deidentified information, we will maintain and use it in deidentified form and will not attempt to re-identify it, except to determine whether our deidentification process satisfies legal requirements.

We and third parties automatically collect certain Usage Data about your interactions with our Website, including through cookies, pixels, and other tracking technologies. We collect this information to tailor your experience with the Services, to present offers or promotions, and to run analytics. Most browsers accept cookies automatically, but you may be able to control how your devices permit their use. You can block or delete our cookies from your browser, though doing so may cause parts of the Services to work incorrectly. If you have questions about the specific information we process or retain, or about your choices regarding our collection and use practices, please contact us using the details below.

Your browser settings may allow you to transmit a signal expressing your choice about the collection or processing of your information as you visit websites. Our Website is not currently designed to respond to such signals.

We may disclose your information to third parties subject to this Privacy Policy, including the following categories:

• Our affiliates and others within our corporate group.
• Vendors and other service providers who help us provide the Services, including for system administration, hosting, payment processing, security, and analytics.
• Third-party business partners who may use the information for their own purposes. We provide this data on an aggregated or anonymized basis, or otherwise in accordance with applicable law, including with your consent where required. We do not provide information collected from Google Workspace to third-party business partners for their own purposes.
• Third-party AI model providers who help support the Services.
• Third parties the Services interact with on your behalf, including autonomously, for example when the assistant contacts a vendor to schedule a repair at one of your properties.
• Third parties to whom you ask or direct us to disclose information, such as through connected integrations or a login integration.
• Third parties in connection with, or in anticipation of, a business transaction such as a merger or acquisition.
• Professional advisors, such as auditors, law firms, and accounting firms.

We may also disclose your information for legal and security reasons and to protect our Services and business, including to cooperate with law enforcement and regulatory inquiries, to detect and prevent fraudulent or illegal activity, to exercise or defend legal claims, and to ensure the safety and security of our business and our employees.

We may provide links to third-party websites or platforms. If you follow a link to a site or platform we do not control and are not affiliated with, you should review its privacy policy, policies, and other terms. We are not responsible for the privacy or security of, or the information found on, those sites or platforms. Information you provide in public or semi-public venues, such as third-party social networking platforms, may be viewable by other users of the Services or of those platforms without limitation as to its use. Our inclusion of a link does not by itself imply any endorsement of the content, its owners, or its operators.

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular a child under 13 years of age, we will make commercially reasonable efforts to delete it from our systems. If you are the parent or guardian of a child under 13 who has provided us with personal information, you may contact us using the details below to request that it be deleted.

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee perfect security. Autonomous AI agent features such as our assistant may present additional privacy and security considerations, because they can perform tasks and take actions independently on your behalf based on the permissions you grant.

As with any technology that acts on your behalf, there are inherent considerations to be aware of. These include the possibility of unintended actions, such as unintended payments or communications to outside parties, incorrect or incomplete outputs, and interactions with third parties who may include misleading instructions intended to influence autonomous agents. We encourage you to review the actions the assistant takes, to stay attentive while using the Services, and to keep these considerations in mind.

Any information you send us electronically, whether through the Services or otherwise, may not be secure while in transit. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Usage Data is generally retained for shorter periods, unless we need it to maintain the security of the Services, to improve functionality, or to comply with applicable law. When information is no longer needed, we securely delete or deidentify it.

Your information may be processed and stored at our operating offices and in other jurisdictions where our service providers are located, which may have data protection laws that differ from those where you live. By submitting information to us, you consent to its transfer to and processing in those jurisdictions. We take reasonable measures to ensure your information is treated securely and in accordance with this Privacy Policy, including putting adequate safeguards in place where they are required.

You may request access to, correction of, or deletion of the personal information we hold about you. Some information can be updated or deleted directly in your settings; for anything else, email us using the details below. We will act on a deletion request within 30 days, subject to the retention obligations described above. We may need to retain certain information where we have a legal obligation, a legitimate business interest, or a need to prevent fraud and abuse.

Depending on where you live, you may have additional rights, including access and portability, correction, deletion, restriction of or objection to processing, and the right to opt out of targeted advertising or profiling. You may also have the right to appeal a decision we make about your request, or to lodge a complaint with your supervisory authority. We will not discriminate against you for exercising these rights.

Where the GDPR or UK GDPR applies, we process personal information on the following legal bases: performance of a contract, in order to provide the Services; our legitimate interests, such as security, fraud prevention, product improvement, and communications about similar services; your consent, where it is required; and compliance with our legal obligations.

If we become aware of a security incident affecting your information, we will investigate and, where required by law, notify you or the relevant regulators without undue delay, including information about steps you can take to reduce potential harm.

If you have questions about our privacy practices or this Privacy Policy, email us at hello@matildahq.com.