Privacy Policy

Effective Date: January 1, 2025 | Last Updated:

At Matcha, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.

1. Information We Collect

Personal Information

We collect information you provide directly to us, such as:

  • Name and email address
  • Account credentials
  • Payment information (processed securely through Stripe)
  • Educational institution affiliation
  • Content preferences and settings
Usage Information

We automatically collect certain information about your device and usage, including:

  • IP address and browser type
  • Device information
  • Pages visited and features used
  • Time spent on the platform
  • Content generation history
Educational Content

We process and store:

  • Uploaded educational materials
  • Generated presentations and content
  • Media library selections
  • Learning objectives and preferences

2. How We Use Your Information

We use the collected information to:

  • Provide and maintain our services
  • Generate personalized educational content
  • Process transactions and manage subscriptions
  • Improve our AI models and content quality
  • Send service updates and educational resources
  • Ensure platform security and prevent fraud
  • Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information:

  • With Service Providers: Third-party services that help us operate our platform (e.g., Stripe for payments, cloud hosting providers)
  • For Legal Requirements: When required by law or to protect rights and safety
  • With Consent: When you explicitly agree to sharing
  • School Accounts: Administrators may access usage statistics for their institution

4. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • SSL/TLS encryption for data transmission
  • Encrypted storage for sensitive information
  • Regular security audits and updates
  • Access controls and authentication
  • Secure payment processing through PCI-compliant providers

5. Your Rights and Choices

You have the right to:

  • Access: Request copies of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Export your content and data
  • Opt-out: Unsubscribe from marketing communications
  • Restriction: Limit how we use your information

To exercise these rights, contact us at privacy@matcha.edu

6. Children's Privacy (COPPA Compliance)

Matcha is designed for use by educators and students. For users under 13:

  • Parental or school consent is required
  • We collect minimal personal information
  • No behavioral advertising or tracking
  • Parents can review and delete their child's information

7. Data Retention

We retain your information for as long as necessary to provide our services:

  • Active account data: Retained while account is active
  • Generated content: 90 days after deletion by user
  • Payment records: As required by tax and accounting laws
  • Usage logs: 12 months for security and analytics

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Analyze platform usage and performance
  • Provide security features

You can control cookies through your browser settings, though some features may not function properly without them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or platform notification. Continued use of Matcha after changes constitutes acceptance of the updated policy.

11. Contact Information

Data Protection Officer

Matcha Education Platform

Email: privacy@matcha.edu

Support: Contact Form

Response Time: Within 48 hours

12. Jurisdiction-Specific Rights

European Union (GDPR)

EU residents have additional rights under GDPR, including the right to object to processing and lodge complaints with supervisory authorities.

California (CCPA)

California residents have additional rights under CCPA, including the right to know what personal information is collected and the right to non-discrimination.