Privacy Policy

1. Who We Are

Matus is operated by OPENLINK PTE. LTD., a Singapore company with UEN202448659R and registered office at 1 Kaki Bukit Road 1, #03-15, Enterprise One, Singapore 415934. This Privacy Policy explains how we collect, use, disclose, protect, retain, and delete personal data in connection with Matus at https://matus.life.

2. Personal Data We May Collect

• Account information such as name, email address, login credentials, and profile details.
• Workspace information such as organization name, member roles, invitations, audit logs, and settings.
• Billing information such as subscription plan, payment order, invoice, AI Credits transaction, and payment callback records.
• Content and materials uploaded or created in Matus, including prompts, drafts, reports, files, metadata, and extracted text.
• Third-party authorization data such as OAuth identifiers, access tokens, refresh tokens, scopes, expiry times, and connected platform account records.
• Usage and technical data such as model provider, task type, usage logs, device/browser information, IP address, timestamps, error logs, and security events.

3. How We Use Personal Data

• To provide, operate, secure, maintain, and improve Matus.
• To manage user accounts, workspaces, permissions, subscriptions, AI Credits, invoices, and support requests.
• To process payments through payment processors such as Stripe.
• To connect authorized third-party platforms when users explicitly authorize those connections.
• To generate AI-assisted content, analytics, reports, and workflow outputs requested by users.
• To prevent abuse, detect security incidents, enforce policies, and comply with legal obligations.

4. Legal and Regulatory Basis

We aim to handle personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA), including obligations relating to consent, purpose limitation, notification, access, correction, protection, retention, transfer limitation, and accountability.

5. Disclosure to Third Parties

We may disclose personal data to service providers and processors that support Matus, including hosting providers, payment processors, analytics or logging tools, AI model providers, communication tools, and third-party platforms authorized by users. We do not sell personal data.

6. International Transfers

Matus may use infrastructure and service providers outside Singapore. Where personal data is transferred internationally, we take reasonable steps to ensure that transferred personal data receives a standard of protection comparable to the protection under Singapore law, where required by applicable law.

7. Security and Retention

We use reasonable administrative, technical, and organizational safeguards to protect personal data. Sensitive credentials are intended to be encrypted at rest and not exposed in the user interface. We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, legal requirements, dispute resolution, security, accounting, and audit.

8. Access, Correction, and Deletion Requests

Users may request access to, correction of, or deletion of personal data where applicable. Some data may need to be retained for legal, accounting, security, anti-fraud, or dispute resolution purposes.

9. Contact

For privacy or data protection questions, contact us at tuqinghong@gmail.com.