Privacy Policy

Our Commitment to Privacy

At MATA AI, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or engage with our creative services.

Information We Collect

Contact Information

When you reach out to us through contact forms or direct communication, we collect:

• Your name and email address
• Company name and professional details (when provided)
• Project descriptions and creative requirements
• Communication preferences and contact history

Website Analytics

We use privacy-focused analytics (Plausible) to understand website usage, including:

• Page views and session duration
• General geographic location (country/city level)
• Device and browser information
• Referral sources and navigation patterns

What We Don't Collect

We do not use invasive tracking technologies. We explicitly avoid:

• Personal cookies or tracking pixels
• Precise location data or GPS coordinates
• Sensitive personal information
• Financial or payment information
• Social media tracking or cross-site profiling

How We Use Your Information

We use collected information to:

• Respond to Inquiries: Provide project consultations and professional communication
• Service Delivery: Manage creative projects and client relationships
• Website Improvement: Optimize user experience and technical performance
• Professional Development: Understand industry trends and client needs
• Legal Compliance: Maintain records as required by applicable laws

Data Protection and Compliance

Legal Framework

Our privacy practices comply with applicable data protection regulations, including:

• GDPR: European Union General Data Protection Regulation
• CCPA: California Consumer Privacy Act
• LFPDPPP: Mexican Federal Data Protection Law
• Local Regulations: Privacy laws in jurisdictions where we operate

Data Controller

Third-Party Services

We work with carefully selected service providers that maintain high privacy standards:

• Formspree: Secure contact form processing with GDPR compliance
• Plausible Analytics: Privacy-focused website analytics without personal tracking
• Netlify: Secure website hosting with enterprise-grade protection
• Google Workspace: Professional email and collaboration tools

All service providers operate under appropriate data protection agreements and security standards.

Data Security and Retention

Security Measures

We implement comprehensive security protections:

• SSL/TLS encryption for all data transmission
• Secure hosting infrastructure with regular backups
• Access controls and authentication protocols
• Regular security audits and updates

Retention Periods

We retain personal data only as long as necessary:

• Project Inquiries: 3 years for business development and follow-up
• Client Communications: 7 years for legal and business compliance
• Website Analytics: 26 months in anonymized form
• Marketing Communications: Until unsubscribe or 5 years of inactivity

Your Privacy Rights

General Rights

You have the right to:

• Access: Request copies of personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request removal of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent for data processing

Regional Rights

EU/EEA Residents: Additional GDPR rights including data processing restriction and automated decision-making protections.

California Residents: CCPA rights including the right to know about data collection and opt-out of data sale (note: we do not sell personal data).

Mexican Residents: ARCO rights (Access, Rectification, Cancellation, Opposition) under LFPDPPP.

International Data Transfers

As a creative studio operating internationally, your data may be processed in Mexico, Germany, United States, or other jurisdictions where our service providers operate. We ensure adequate protection through:

• Standard contractual clauses for international transfers
• Adequacy decisions for recognized safe jurisdictions
• Service provider compliance with international privacy standards
• Regular assessment of transfer safeguards and protections

Creative Industry Considerations

Portfolio Documentation

As a creative professional, we may document project processes and outcomes for portfolio purposes. We ensure:

• Client confidentiality through appropriate anonymization
• Removal of sensitive business information from portfolio materials
• Explicit consent before using client names or proprietary information
• Respect for non-disclosure agreements and confidentiality requirements

Professional References

Industry context and project categories may be referenced for portfolio organization and professional development, always with appropriate discretion and privacy protection.

Contact and Privacy Requests

Privacy Inquiries

For privacy-related questions or to exercise your data rights:

Data Protection Authorities

If you believe your privacy rights have been violated, you may contact relevant supervisory authorities:

• EU: Your local Data Protection Authority
• Mexico: INAI (National Institute for Transparency, Access to Information and Personal Data Protection)
• California: California Attorney General's Office

Policy Updates

We may update this Privacy Policy to reflect:

• Changes in data protection laws or regulations
• Evolution of our business practices or services
• Implementation of enhanced privacy protections
• Technical improvements to our data handling systems

Material changes will be communicated through website notice and, where appropriate, direct notification to affected users. We encourage periodic review of this policy for updates.

Professional Compliance

MATA AI maintains high standards for data protection and privacy compliance as part of our professional practice. We regularly review and update our privacy procedures to ensure continued protection of personal information and compliance with evolving legal requirements.