Important: This Privacy Policy explains how Materiality Engine collects, uses, and protects your personal data when you use our services.

1. Information We Collect

We collect information necessary to provide and improve our services, including:

Personal Information

• Full name and contact details
• Company and business information
• Email address
• Payment information (processed by our payment provider)
• Professional credentials

Financial Documents

• Financial statements (PDF, Excel, Word)
• Balance sheets and income statements
• Tax-related documents (supported formats)
• Other documents required for materiality calculations

Usage & Technical Data

• IP address and browser type
• Device and operating system information
• Pages visited and usage behavior
• Performance and diagnostic data

2. How We Use Your Information

• Provide and maintain our services
• Perform materiality calculations
• Improve platform functionality and user experience
• Communicate updates, support, and service notices
• Comply with legal and regulatory obligations
• Prevent fraud and ensure platform security

3. Data Security

• All data is processed on EU-based servers (Germany)
• Encryption for data in transit
• Regular security audits and vulnerability assessments
• Role-based access controls and authentication
• Automatic document deletion based on retention rules

4. Data Retention

Data Type	Retention Period	Details
Uploaded Documents	30–365 days	Deleted automatically based on your plan
Account Information	While account is active	Deleted upon account closure
Usage Data	Up to 24 months	Anonymized after 12 months
Payment Information	As required by law	Handled by our payment provider

5. Your Rights (GDPR)

• Access your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data
• Restrict or object to processing
• Receive your data in a portable format

6. Third-Party Services

• Microsoft Azure – Cloud infrastructure and OCR
• Stripe – Payment processing
• Google Analytics – Anonymized usage analytics
• Customer.io – Email communications

All third-party providers operate under GDPR-compliant Data Processing Agreements.