Privacy Policy

Last updated: December 2025

1. Identification of the Data Controller

In compliance with Regulation (EU) 2016/679 and Spanish Organic Law 3/2018, the data controller is identified as:

MATIL SOLUTIONS, S.L.
Tax ID (NIF): B22500485
Address: Avenida Primado Reig 82, Door 7, 46010, Valencia (Spain)
Contact: privacy@matil.ai

2. Personal Data We Process

2.1 Identification and Contact Data

Name, surname, email address, phone number, professional position, company name, and postal address.

2.2 Billing Data

Tax ID (NIF/CIF), fiscal address, bank or payment card details (managed through Stripe as a PCI-DSS certified payment processor).

2.3 Technical and Usage Data

IP address, browser type, operating system, platform access logs, device identifiers, and browsing data.

2.4 Processed Documents

Documents uploaded by the Client to the platform for processing may contain personal data of third parties.

3. Purposes of Data Processing

The purposes of data processing include:

  • Contractual management and provision of the service via API
  • User account management, billing, and payment collection
  • Customer service and technical support
  • Commercial communications about products and updates
  • Legal, fiscal, and accounting compliance
  • Fraud detection and security measures
  • Service improvement through statistical analysis

4. Legal Basis for Processing

Legal bases for processing in accordance with Article 6 of the GDPR:

  • Contractual performance (6.1.b)
  • User consent for commercial communications (6.1.a)
  • Legitimate interest in fraud prevention and service improvement (6.1.f)
  • Legal compliance obligations (6.1.c)

5. Disclosure of Data to Third Parties

MATIL does not sell, rent, or trade personal data. Data may be shared with:

  • Technology service providers: AWS, Google Cloud Platform, Stripe, OpenAI
  • Public authorities upon legal requirement or court order
  • Professional advisors: auditors, lawyers, consultants

All data processors maintain data processing agreements in accordance with Article 28 of the GDPR.

6. International Data Transfers

International transfers are made to:

  • United Kingdom (AWS London): The EU adequacy decision applies
  • USA (OpenAI, Stripe): Standard Contractual Clauses and/or EU-US Data Privacy Framework

7. Retention Periods

  • Active client data: Duration of the contract plus 5 years of legal statute of limitations
  • Billing data: 6 years in accordance with commercial and tax regulations
  • Processed documents: 12 months after processing
  • Browsing logs: 12 months for security and auditing purposes

8. Security Measures

Technical and organizational measures include:

  • Data encryption in transit (TLS 1.3) and at rest (AES-256)
  • Role-based access control and multi-factor authentication
  • Continuous system monitoring and intrusion detection
  • Periodic backups with disaster recovery
  • Staff training in data protection
  • Periodic security assessments and penetration testing

9. Rights of Data Subjects

Rights under the GDPR:

  • Right of access: Obtain confirmation of whether your data is being processed and access to it
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request the deletion of data when it is no longer necessary
  • Right to restriction of processing: Restrict processing in specific circumstances
  • Right to data portability: Receive data in a structured and standard format
  • Right to object: Object to processing based on legitimate interest or direct marketing
  • Right against automated decisions: Not be subject to decisions that produce legal effects

To exercise these rights, the data subject may contact privacy@matil.ai enclosing a copy of their identity document. Response period: one month maximum.

Right to lodge a complaint available before the Spanish Data Protection Agency (www.aepd.es).

10. Cookie Policy

The website uses first-party and third-party cookies. Detailed information is available in the Cookie Policy section.

11. Policy Modifications

The company reserves the right to modify this policy. Substantial changes will be notified by email. Periodic review is recommended.

12. Contact

For inquiries about data processing:
Email: privacy@matil.ai
Address: MATIL SOLUTIONS, S.L., Avenida Primado Reig 82, Door 7, 46010, Valencia (Spain)

© 2026 Matil