Privacy Policy

1. Who this policy applies to

This policy applies to personal data we process about:

• website visitors
• people who contact us
• account holders and users of MaturIQ
• representatives of customer organisations
• people who request demos, trials, or support

MaturIQ is a business tool and is not intended for children.

2. The personal data we collect

We may collect and process the following categories of personal data:

3. How we collect personal data

We collect personal data:

• directly from you when you create an account, complete forms, or contact us
• from your organisation where an administrator invites you to use MaturIQ
• automatically through your use of the website or platform
• from service providers involved in authentication, hosting, billing, communications, and security

4. How we use personal data

We use personal data to:

• provide and operate MaturIQ
• create and manage user accounts and organisation workspaces
• authenticate users and maintain platform security
• process enquiries, support requests, and communications
• manage subscriptions, billing status, and service access
• maintain service performance, reliability, and auditability
• understand how visitors use the website to improve content and performance
• detect, prevent, and investigate fraud, abuse, and security incidents
• comply with legal, regulatory, tax, and accounting obligations
• enforce our terms and protect our rights

We use Vercel Web Analytics to understand overall website usage. This analytics tooling is privacy-focused, does not set browser cookies, and does not track individual users. Where we add further analytics or product usage tools in future, we will update this policy and, where required by law, ask for consent.

5. Our lawful bases for processing

Depending on the context, we rely on one or more of the following lawful bases:

• contract: where processing is needed to provide MaturIQ and related services
• legitimate interests: to run, secure, support, and improve our business software service
• legal obligation: where we need to keep records or comply with legal or regulatory duties
• consent: where required, for example for non-essential cookies or certain optional communications

6. How we share personal data

We may share personal data with trusted service providers that help us run MaturIQ. These currently include providers for:

• hosting and infrastructure
• authentication and database services
• billing and subscription management
• email delivery and support communications
• bot and abuse protection
• analytics and performance measurement

Our current main providers include:

• Supabase
• Vercel
• Paddle
• Brevo
• Cloudflare Turnstile

We may also disclose personal data:

• where required by law
• to respond to legal claims or lawful requests
• to protect the rights, security, and integrity of MaturIQ, our users, or others
• as part of a business sale, merger, reorganisation, or investment transaction

7. International transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we take steps to use appropriate safeguards where required under applicable data protection law. These may include contractual safeguards, adequacy mechanisms, or other lawful transfer tools used by our providers.

8. Data retention

We keep personal data only for as long as needed for the purposes set out in this policy.

As a general rule:

• we keep customer account and platform data while the relevant subscription or service relationship is active
• if a subscription ends, we will usually delete or anonymise customer content within 30 days
• we may keep certain information for longer where needed for legal or regulatory compliance, tax and accounting records, fraud prevention, dispute resolution, enforcement of our agreements, or backup processes

Where deletion is not immediately possible, we will securely isolate the data and delete it as soon as reasonably practicable.

9. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us if you believe your account has been compromised.

10. Your rights

Depending on applicable law, you may have rights to:

• access your personal data
• correct inaccurate personal data
• request deletion of your personal data
• restrict or object to certain processing
• request transfer of your personal data
• withdraw consent where processing relies on consent
• complain to the UK Information Commissioner's Office

To exercise your rights, contact privacy@maturiq.ai.

We may need to verify your identity before responding.

11. Third-party services

MaturIQ may link to or integrate with third-party services. We are not responsible for the privacy practices of third-party websites or services except where we act as controller for the relevant processing. You should review their own privacy notices where relevant.

12. Business customers and administrators

Where MaturIQ is provided to an organisation, that organisation may control certain workspace, account, and user management decisions, including invitations, access permissions, and service configuration.

If you use MaturIQ through your employer or organisation, that organisation may also act as a controller of certain personal data processed in connection with your use of the service.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the effective date above. If the changes are material, we may also provide a more prominent notice where appropriate.

14. Contact us