Legal

Privacy Policy

Effective Date: April 2, 2026  ·  Last Updated: April 2, 2026

Matby5 (“we,” “our,” or “us”) operates the website at www.matby5.com and provides digital services including custom software development, web applications, mobile apps, AI automations, and API integrations. This Privacy Policy explains what personal information we collect, how we use and protect it, and the rights you have over your data.

By using our website or submitting any form, you agree to the practices described in this policy. If you do not agree, please do not use our website or submit your information.

1. Information We Collect

We collect personal information only when you voluntarily provide it through our website forms. We do not collect data through cookies, analytics trackers, or passive monitoring.

1.1 Contact Form

When you submit the Contact Form (/contact), we collect:

FieldRequiredPurpose
Full NameYesIdentify and address you
Email AddressYesRespond to your inquiry
Company / BusinessNoUnderstand your organizational context
Service of InterestNoRoute your inquiry appropriately
Project DescriptionYesUnderstand your needs

1.2 Booking Form

When you submit the Booking Form (/booking), we collect:

FieldRequiredPurpose
Full NameYesIdentify and address you
Email AddressYesSend booking confirmation and follow-up
Phone NumberNoSchedule discovery calls
Company / BusinessNoUnderstand your organizational context
Service NeededYesPrepare for the discovery call
Budget RangeYesQualify and scope the engagement
Desired TimelineNoAssess scheduling feasibility
Project DetailsYesPrepare a relevant discussion

1.3 Technical and Usage Data

We do not currently use analytics tools (such as Google Analytics, Posthog, or similar), advertising trackers, or third-party marketing pixels. We do not set non-essential cookies.

Standard server-side logs (request timestamps, IP addresses, browser type) may be generated by our hosting infrastructure (Vercel) as part of normal web server operation. These logs are not actively reviewed unless required for security or technical troubleshooting.

1.4 Client Project Data

If you become a client, we may additionally collect and process information necessary to deliver our services, including technical credentials, brand assets, API keys, and business information shared during project discovery and delivery. This data handling is governed by the individual service agreement signed between Matby5 and the client.

2. How We Use Your Information

We use the information you provide exclusively for the following purposes:

  • Responding to inquiries — we use your contact details to respond to your message or confirm your booking.
  • Sales and qualification — we use your project details, service interest, and budget to evaluate fit and prepare a proposal.
  • Communication and follow-up — scheduling discovery calls, sending proposals, and project status updates.
  • Service delivery — delivering agreed services, coordinating with our team, and managing the client relationship.
  • Business records — internal operations including accounting and legal compliance.

We do not use your information for unsolicited marketing, selling or renting to third parties, automated decision-making, or advertising targeting.

3. How We Share Your Information

We do not sell, trade, or rent your personal information. We share your data only with the following service providers, which are necessary for our business operations:

3.1 GoHighLevel (GHL)

We use GoHighLevelas our CRM platform. When you submit a form, your contact information and inquiry details are transmitted to GoHighLevel's servers. GoHighLevel acts as a data processor subject to its own Privacy Policy.

3.2 Supabase

We use Supabase(PostgreSQL-based cloud database) to store contact and lead records. Data is stored on servers in the United States. Supabase's practices are governed by its Privacy Policy.

3.3 Vercel

Our website is hosted on Vercel, which may process request data as part of serving our website. Vercel's practices are governed by its Privacy Policy.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Matby5, our clients, or the public.

4. Data Retention

Data TypeRetention Period
Inquiry and lead recordsUp to 3 years from last contact, or until deletion is requested
Active client recordsDuration of engagement + up to 5 years for legal/accounting compliance
Supabase / GHL contact recordsUntil you request deletion
Server logs (Vercel)Per Vercel's standard retention (typically 30 days)

After the applicable retention period, we will delete or anonymize your personal information. You may request earlier deletion at any time (see Section 6).

5. Data Security

We implement reasonable technical and organizational security measures, including:

  • Encrypted connections (HTTPS/TLS) across our website
  • Access controls limiting who within Matby5 can access your data
  • Environment variables and secrets management — no credentials stored in source code
  • Secure API authentication with all service providers
  • Regular review of access permissions for internal systems

No method of internet transmission is 100% secure. In the event of a data breach posing risk to your rights, we will notify you and relevant authorities as required by applicable law.

6. Your Rights

6.1 For All Users

  • Access — request a copy of the personal data we hold about you.
  • Correction — request that we correct inaccurate or incomplete information.
  • Deletion — request that we delete your personal information, subject to legal obligations.
  • Opt-out of communications — unsubscribe from any follow-up messages at any time by replying "unsubscribe" or contacting us directly.

6.2 EEA and UK Residents — GDPR

If you are located in the European Economic Area or UK, you additionally have the right to:

  • Restriction — request that we restrict processing of your data in certain circumstances.
  • Data portability — request your data in a structured, machine-readable format.
  • Object — object to processing based on our legitimate interests.
  • Withdraw consent — where processing is consent-based, withdraw at any time without affecting prior lawful processing.

Legal basis for processing (GDPR): We process your data based on (i) your consent when you submit a form, (ii) our legitimate interests in operating our business, and (iii) the performance of a contract when providing services. You have the right to lodge a complaint with your local supervisory authority.

6.3 California Residents — CCPA

If you are a California resident, under the CCPA you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of your personal information.
  • Opt out of the sale of your personal information. We do not sell personal information.
  • Non-discrimination for exercising your CCPA rights.

To exercise any of these rights, contact us at info@matby5.com.

7. Cookies

Our website does not currently use tracking cookies, advertising cookies, or analytics cookies. We may use strictly necessary session-related browser storage for basic website functionality only.

If we introduce cookies in the future, we will update this policy and implement a cookie consent mechanism.

8. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

9. International Data Transfers

Matby5 is based in the United States. If you are located outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By submitting your information, you consent to this transfer.

For transfers from the EEA/UK, we rely on Standard Contractual Clauses or other appropriate safeguards where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us. We will respond within 30 days.