Privacy Policy
This policy explains what information mattae.com collects, how we use it, and the choices you have. It applies to mattae.com, mattae.com/thevault, and any other page on this domain. Throughout this policy, "we" and "us" refer to Mattae, the operator running this site.
1 · What we collect
Information you give us directly
- Email address when you sign up for the Vault, the newsletter, or any free content (Module 1, etc.).
- Payment information when you purchase the One Day Avatar System or pay for the Concierge. Payment is processed by Stripe. We do not store your card number; Stripe handles that.
- Application data when you submit a Concierge application (name, role, company, and the other fields on the form).
- Anything you put in an email you send us at hello@mattae.com.
Information we collect automatically
- Browsing data via our analytics provider (currently Plausible or similar privacy-respecting analytics). This includes page views, referring URLs, country (not city), browser type, and screen size. We do not collect IP addresses in a personally identifiable way.
- Marketing pixels from Meta (Facebook) if you visit from a paid ad. These help us understand which ads drive results. You can opt out of Meta tracking via your Meta Accounts Center.
- localStorage data stored in your browser to remember your Vault tier (anonymous, free, or paid). This stays on your device. We do not access it remotely.
2 · How we use your information
- To deliver the product you signed up for (Module 1, the System, the Concierge).
- To send you the welcome sequence and other emails you opted into. Every email has an unsubscribe link.
- To process payments through Stripe.
- To respond when you email us.
- To understand how the site performs (anonymized analytics).
- To improve the product, the content, and the experience.
3 · Who we share information with
We share data only with the tools required to run the business:
- Stripe for payment processing. Stripe's privacy policy.
- ConvertKit (Kit) for email delivery and list management. ConvertKit's privacy policy.
- Vercel for site hosting. Vercel's privacy policy.
- Plausible / Meta for analytics and ads (where applicable). Linked above.
We do not sell your personal data. Ever. We also do not share your data with third parties for their marketing purposes.
4 · How long we keep your data
- Email subscribers: until you unsubscribe, then we remove you from the active list within 30 days. We may retain unsubscribed records in a suppression list to honor your opt-out.
- Customers (System / Concierge): we keep purchase records for as long as legally required (typically 7 years for tax purposes in the US).
- Concierge applicants who did not buy: applications stay in our queue for 90 days, then are archived.
- Analytics data: aggregated and anonymized; specific session data is retained 12 months at most.
5 · Your rights
You have the right to:
- Access the data we have on you. Email hello@mattae.com and we will respond within 30 days.
- Delete your data. Email hello@mattae.com and we will remove you from the email list and delete identifying records (except where legally required to retain, such as tax records for purchases).
- Correct inaccurate data. Same process: email us.
- Opt out of marketing emails at any time. Every email has an unsubscribe link. We process unsubscribes within 24 hours.
- Export your data in a portable format. Email us.
If you are in the EU, UK, or California, you also have rights under GDPR / UK GDPR / CCPA. Email us to exercise any of them.
6 · Cookies and browser storage
We use the following client-side storage:
- localStorage for Vault tier (anonymous / free / paid) and captured email. This is set after you submit a form. It stays on your device until you clear it or use private browsing.
- Cookies set by Stripe during checkout. Required for payment.
- Cookies set by Meta Pixel if you visited from a paid ad. You can block these in your browser.
We do not use cookies for ads ourselves. We do not have a cookie banner because the site does not set third-party tracking cookies on first visit; only essential cookies (for checkout, etc.).
7 · Security
We use industry-standard security practices: HTTPS everywhere, secrets stored in environment variables, no plaintext passwords (we do not use passwords), no on-disk storage of payment information (Stripe handles that). We are a small operation, not a Fortune 500. We do our best.
If we ever experience a data breach affecting your information, we will notify you within 72 hours of discovery, per applicable law.
8 · Children
This site is not intended for anyone under 13. We do not knowingly collect data from children under 13. If you believe we have, email hello@mattae.com and we will delete it.
9 · Third-party links
The site contains links to other sites (Stripe, ConvertKit, USPTO, etc.). We are not responsible for their privacy practices. Their policies are linked where relevant.
10 · International transfers
We operate out of the United States. If you access the site from outside the US, your data may be transferred to and processed in the US. By using the site, you consent to this transfer.
11 · Changes to this policy
We may update this policy as the business evolves. Material changes will be flagged in the "Last updated" date at the top. If we make a significant change (e.g., adding a new third-party data processor), we will email anyone on the list.
12 · Contact
For any privacy questions, requests, or concerns: hello@mattae.com. We respond within 30 days for formal requests, typically within 48 hours for general questions.