This policy explains how Imagineering Studios (we, us) handles personal
information in connection with Matrix and this website. We comply with the Privacy Act 1988 (Cth)
and the Australian Privacy Principles. If you're in the European Economic Area or the United Kingdom, see
also our GDPR statement.
Two kinds of information
- Information about you as a user of Matrix or a visitor to this website. We decide how it
is used, and this policy covers it.
- Information your business records in Matrix — customers, suppliers, employees,
transactions. Your business controls that information and decides how it is used; we process it on your
behalf, only to provide the service.
What we collect
- Account details: your name, email address, sign-in credentials (passwords are stored
only as secure hashes; passkeys never leave your device), and your preferences such as time zone and
colour scheme.
- Business details: business names, ABNs, addresses and tax settings you enter.
- Billing details: your plan and billing history. Card details are collected and held by
our payment provider, Stripe; we never see or store your full card number.
- Usage and security information: pages viewed, how long they took to load, your IP
address and the approximate location derived from it, your browser's user agent, and sign-in and
security events. We use this to keep Matrix secure, find faults and improve performance.
- Messages you send us: through the contact form, by email or by text message.
How we use it
- to provide, operate and support Matrix;
- to bill your subscription and send tax invoices;
- to keep accounts secure, detect misuse and investigate faults;
- to send service messages, such as invoices you ask us to send, reminders and security notices;
- to reply when you contact us;
- to meet our legal obligations.
We don't sell personal information, and we don't use your business's data to advertise to you.
Where it is stored
Matrix stores your business's records in Australia. Some trusted service providers process limited
information elsewhere to deliver parts of the service:
- Stripe — card payments;
- SendGrid (Twilio) — email delivery;
- Twilio — text messages, where used;
- Sentry — error monitoring, configured not to send personal information such as names,
email addresses or request contents.
We require these providers to protect the information and use it only to provide their services to us.
Cookies
Matrix uses cookies that are necessary to sign you in, keep your session secure and protect forms against
forgery. We don't use advertising cookies.
How long we keep it
We keep account and business records for as long as your account is active and afterwards for as long as
the law requires (Australian tax law generally requires business records to be kept for five years). We keep
security and usage records to protect the service and investigate incidents.
We keep messages you send us, including text messages, so we have a record of our correspondence with you.
Security
We protect information with encryption in transit, strict separation between customers' data, passkeys and
multi-factor sign-in, and an audit trail of security events. No system is perfectly secure; if a data breach
is likely to cause you serious harm, we'll notify you and the Office of the Australian Information
Commissioner as the law requires.
Your choices and rights
- You can see and update your profile at any time in Matrix.
- You can ask us for access to, or correction of, the personal information we hold about you.
- If your information is held in a business's books in Matrix, contact that business first; we'll help
them respond.
Complaints
If you have a concern about how we've handled your information, contact
us and choose "Privacy". We'll respond within 30 days. If you're not satisfied, you can complain to the
Office of the Australian Information Commissioner at oaic.gov.au.