Data protection and security

Our Commitment

At matriXO, protecting your personal data, skill profiles, and learning information is a top priority. This policy outlines how we collect, store, protect, and manage your data across our platform — including SkillDNA™ profiles, event registrations, career assessments, and account information.

1. Data We Collect

We collect the following categories of data to deliver our services:

• Account Information: Name, email address, phone number, college/university, and profile photo.
• Skill & Assessment Data: SkillDNA™ profiles, skill scores, cognitive assessments, behavioral traits, and learning preferences.
• Event Data: Registration details, attendance records, ticket purchases, and event participation history.
• Payment Information: Transaction IDs and payment confirmations (processed securely via Razorpay — we do not store card details).
• Usage Data: Platform interaction patterns, feature usage, and analytics data to improve our services.

2. How We Protect Your Data

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols.
• Secure Infrastructure: We use Firebase (Google Cloud) for authentication, database, and storage — benefiting from Google's enterprise-grade security infrastructure.
• Access Control: Role-based access ensures only authorized team members can access specific data. Employee access is logged and monitored.
• Authentication Security: We support secure sign-in via Google, GitHub, and email with Firebase Authentication, including multi-factor authentication support.
• Payment Security: All payments are processed through Razorpay, which is PCI DSS compliant. We never store your credit/debit card details on our servers.

3. Data Storage & Retention

• Storage Location: Your data is stored on Firebase (Google Cloud) servers with regional compliance.
• Retention Period: Account data is retained as long as your account is active. Event data is retained for record-keeping purposes for up to 3 years after event completion.
• SkillDNA™ Profiles: Your skill genome data is retained until you request deletion or delete your account.
• Deletion Requests: You may request complete data deletion at any time by contacting us at hello@matrixo.in.

4. Your Rights

As a matriXO user, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Update or correct any inaccurate personal information through your profile settings.
• Deletion: Request complete deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.
• Objection: Opt out of marketing communications at any time.
• Restriction: Request that we limit how your data is processed.

5. Third-Party Services

We use the following trusted third-party services:

• Firebase (Google): Authentication, database, cloud storage, and hosting.
• Razorpay: Secure payment processing for event registrations.
• Google Analytics: Anonymous usage analytics to improve our platform.
• Resend: Transactional email delivery for registration confirmations and notifications.

Each service maintains its own privacy and security standards. We only share the minimum data necessary for each service to function.

6. Data Breach Protocol

In the unlikely event of a data breach:

• Affected users will be notified within 72 hours of discovery.
• We will provide clear information about what data was affected and what actions you should take.
• Immediate remediation steps will be taken to secure the platform.
• Relevant regulatory authorities will be notified as required by applicable law.

7. Cookies & Tracking

• Essential Cookies: Required for authentication and session management.
• Analytics Cookies: Help us understand platform usage (anonymized).
• No Advertising Cookies: We do not use cookies for targeted advertising or sell your data to advertisers.

8. Children's Data

Our platform is designed for college students and professionals (typically 17+). We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

9. Updates to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of matriXO after changes constitutes acceptance of the updated policy.

10. Contact Us

For questions about data protection, to exercise your rights, or to report a security concern:

• Email: hello@matrixo.in
• Address: KPRISE Incubation Center, KPRES, Ghanpur, Hyderabad, Telangana - 500088