Privacy Policy

Matrix CR Studio is a security research and automation studio operating at matrixcr.ai. We provide post-quantum cryptographic infrastructure, smart contract auditing, security research, and automated intelligence services. Contact: [email protected]

We collect only what is necessary to provide our services: • Contact information you provide voluntarily (name, email address) via our contact form or direct correspondence. • Usage data collected automatically when you visit matrixcr.ai, including IP address, browser type, pages visited, and time of visit, via standard server logs and analytics. • Information you provide when engaging our services, including project details and technical specifications required to perform an engagement. We do not collect sensitive personal data, financial data, or data from minors.

We use collected information solely to: • Respond to inquiries and deliver services you have requested. • Send service-related communications (engagement status, deliverables, follow-ups). • Improve our website and service quality through aggregated, anonymized analytics. • Comply with applicable legal obligations. We do not sell, rent, or share your personal information with third parties for marketing purposes.

For visitors in the European Economic Area, we process personal data under the following lawful bases (GDPR Art. 6): • Contractual necessity: to perform services you have engaged us for. • Legitimate interests: to operate and improve our website and services. • Consent: for any optional communications you explicitly opt into. For visitors in Brazil, processing is conducted in accordance with Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018) under the same bases above. For visitors in Chile, processing is conducted in accordance with Ley 19.628 sobre Protección de la Vida Privada and, as it enters into force on December 1, 2026, Law 21.719 on personal data protection. You may withdraw consent at any time by contacting [email protected].

We retain personal data only as long as necessary for the purposes described above or as required by law. Contact inquiry data is retained for up to 24 months. Engagement data is retained for the duration of the engagement plus 3 years for legal and audit purposes.

Our website and services may interact with the following third-party processors: • Vercel: website hosting and edge delivery. • Ghost (self-hosted): blog content management, hosted on our own infrastructure. • Standard analytics tooling: anonymized, aggregated usage metrics only. Each third party is bound by their own privacy policies. We do not share identifiable personal data with these providers beyond what is technically necessary for service delivery.

We apply post-quantum cryptographic controls to all internal infrastructure: ML-KEM-768 key encapsulation wrapping AES-256-GCM encryption for internal payloads and data at rest. While no system is perfectly secure, we take the protection of your information seriously and apply appropriate technical and organizational measures.

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data. • Object to or restrict processing. • Data portability. To exercise any of these rights, contact [email protected]. We will respond within 30 days.

matrixcr.ai uses only technically necessary cookies required for site functionality. We do not use advertising or tracking cookies. You may disable cookies in your browser settings; this will not affect your ability to use the site.

We may update this policy to reflect changes in our services or applicable law. Material changes will be noted with an updated effective date below. Continued use of our services after changes constitutes acceptance of the revised policy.

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Costa Rica. Any dispute arising from or relating to this Policy shall be subject to the exclusive jurisdiction of the courts of San José, Costa Rica, except where mandatory data-protection or consumer laws in your jurisdiction require otherwise.

For any privacy-related questions or requests: Matrix CR Studio [email protected] matrixcr.ai