Privacy Policy

This Privacy Policy describes how V MATRIX TECHNOLOGIES LLC ("V MATRIX," "we," "us," or "our") collects, uses, and discloses information when you visit vmatrix.io (the "Site") or engage us for services. We are committed to handling your information with care, minimizing what we collect, and being transparent about why we collect it.

1. Who We Are

V MATRIX TECHNOLOGIES LLC is a limited liability company organized under the laws of the State of Florida, United States.

Business address:

Contact for privacy matters: info@vmatrix.io

For the purposes of the EU General Data Protection Regulation (GDPR), V MATRIX is the data controller for personal data collected through the Site. When we provide services to clients, we typically act as a data processor on behalf of the client (governed by a separate Data Processing Agreement).

2. Information We Collect

We collect the following categories of information:

Information you provide directly:

• Contact information when you email us (your name, email address, message content)
• Booking information when you schedule a call through Cal.com (your name, email, time zone, optional notes)
• Any information you choose to include in correspondence with us

Information collected automatically:

• Analytics events (page views, clicks, time on page) via PostHog and Vercel Analytics, configured to avoid persistent identifiers where possible
• Approximate location derived from IP address (country/region level only)
• Browser type, device type, operating system, referrer URL
• Performance metrics (Core Web Vitals) via Vercel Speed Insights

What we do NOT collect:

• We do not use tracking cookies for advertising
• We do not sell personal information
• We do not collect payment card information directly (Cal.com handles any scheduling; we invoice separately)
• We do not collect sensitive categories (health, biometric, precise location, sexual orientation, religious beliefs, etc.) through the Site

3. How We Use Information

We use information for the following purposes:

• Responding to inquiries and providing requested information
• Scheduling and conducting discovery calls
• Negotiating, executing, and performing service engagements
• Improving the Site's content, performance, and security
• Complying with legal obligations (tax, accounting, dispute resolution)
• Protecting our rights and the security of the Site

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data are:

• Consent — for any optional features that require it
• Contract — when processing is necessary to enter into or perform a service contract
• Legitimate interests — for site analytics, security, and responding to inquiries, balanced against your rights
• Legal obligation — when we must process data to comply with applicable law

You have the right to withdraw consent at any time where consent is the legal basis.

5. Information Sharing

We share information only with the following categories of recipients:

Service providers (data processors) acting on our behalf:

• Vercel Inc. — hosting and content delivery (United States, DPF-certified)
• PostHog Inc. — product analytics (United States, GDPR-compliant configuration)
• Cal.com Inc. — meeting scheduling (United States/EU)
• Microsoft Corporation — business email via Microsoft 365 (United States, DPF-certified)
• GoDaddy Operating Company, LLC — domain registration (United States)

Each processor is bound by a Data Processing Agreement requiring security, confidentiality, and use limited to our instructions.

Legal disclosures: We may disclose information if required by law, subpoena, court order, or to protect our rights, property, or safety, or that of others.

Business transfers: If V MATRIX is involved in a merger, acquisition, or asset sale, personal data may be transferred to the successor entity, subject to this policy or its successor.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. International Data Transfers

V MATRIX is based in the United States. If you access the Site from outside the United States, your information will be transferred to, stored in, and processed in the United States.

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland, we rely on:

• EU-U.S. Data Privacy Framework (DPF) and UK Extension to the DPF where our processors are certified
• Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
• Additional safeguards as required by Schrems II case law

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Contact inquiries: up to 24 months, unless we enter into an engagement
• Engagement-related data: for the duration of the engagement plus 7 years for tax and legal records
• Analytics data: up to 14 months at PostHog; aggregated metrics may be retained longer
• Email correspondence: up to 7 years for business records

When retention periods expire, we delete or anonymize the data.

8. Your Rights

Depending on your location, you may have the following rights:

Under GDPR (EU/UK/Switzerland residents):

• Access to your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Right to lodge a complaint with a supervisory authority

Under CCPA/CPRA (California residents):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing (we do neither)
• Right to non-discrimination for exercising rights

Under Florida Information Protection Act and other U.S. state laws:

• Right to notification of data breaches affecting your personal information
• Other rights as provided by applicable state law

To exercise any right, email info@vmatrix.io. We will verify your identity reasonably and respond within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

9. Children's Privacy

The Site is directed to business users and is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact info@vmatrix.io and we will delete it.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including:

• TLS 1.3 encryption in transit
• Encryption at rest where data is persistently stored
• Multi-factor authentication for administrative access
• Access controls limiting data access to those who need it
• Regular review of subprocessor security postures

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Site and the "Last updated" date will be revised. Continued use of the Site after changes constitutes acceptance.

12. Contact Us

For any privacy-related question, request, or complaint: