Privacy Policy

• Account data. When you register or sign in: name, email address, authentication identifiers and similar account details.
• Intent text and journey data. The goals, prompts and other content you type into the Platform, and the journeys, plans and outputs generated from them.
• Usage events. Interactions with the Platform such as pages viewed, features used and aggregate events (for example, that a journey was started) — used to operate and improve the product.
• Contact submissions. Name, email, company and message content you send through our contact and investor-relations forms.
• Technical data. IP address, device and browser type, and similar telemetry collected automatically when you visit.

We do not collect or store private keys, seed phrases or wallet credentials. The Platform is non-custodial.

• to provide, operate and maintain the Platform;
• to generate guided journeys and AI-assisted outputs you request;
• to respond to inquiries, including investor relations;
• to secure the Platform, prevent abuse and enforce our Terms;
• to analyze usage in aggregate and improve features, content and performance;
• to comply with legal obligations.

The Platform uses large language models and other AI systems to interpret your intent and generate journeys, plans and content. When you submit intent text, it is processed by these systems — including third-party AI providers acting as our sub-processors — solely to produce the output you requested and to operate the service.

Your data is not used to train third-party models. We configure our AI sub-processors, or select their offerings, so that prompts and content submitted through the Platform are not used to train or improve their general-purpose models, subject to each provider’s standard API terms.

AI-generated output may be incomplete, outdated or incorrect, is not professional advice, and must be independently verified before you act on it. See our Terms of Service.

We use a limited set of service providers to operate the Platform. Categories and current providers include:

• Cloud, database and authentication — our managed cloud backend (Lovable Cloud, built on Supabase) hosts application data and authentication.
• Email delivery — Resend delivers transactional email, including notifications for contact-form submissions.
• AI providers — large-language-model providers process intent text to generate outputs, as described above.
• Hosting and CDN — infrastructure providers that serve the site and its assets.

Sub-processors may process data only on our instructions and for the purposes described in this Policy, and are bound by their own security and confidentiality obligations.

We retain personal data for as long as your account is active or as needed to provide the Platform, respond to your requests, comply with legal obligations, resolve disputes and enforce agreements. Contact-form submissions are retained for as long as needed to handle your inquiry and maintain reasonable business records. You may request deletion as described below.

Depending on your jurisdiction, you may have rights to access, correct, export, restrict or object to the processing of your personal data, and to request its deletion. To exercise any of these rights, email shoval@metatron.systems. We will respond within a reasonable time and in accordance with applicable law. We may need to verify your identity before acting on a request, and certain data may be retained where required by law or for legitimate security purposes.

The Platform uses cookies and similar technologies that are necessary to operate the site (for example, authentication and security). Where we use analytics, we use them to understand aggregate usage — such as which features are used — not to build advertising profiles, and we do not sell personal data. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We and our sub-processors may process data in countries other than your own, including the United States and other jurisdictions where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms provided by our sub-processors.

We apply reasonable technical and organizational measures designed to protect personal data, including encryption in transit, access controls and managed infrastructure. No method of transmission or storage is completely secure; if you believe your interaction with us is no longer secure, contact us immediately.

The Platform is not directed to children, and we do not knowingly collect personal data from anyone under the age required by applicable law to use such services. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. The current version is posted on this page with its effective date. Material changes will be announced through the Platform or by other reasonable means.

Questions, requests or concerns about privacy: shoval@metatron.systems.