Privacy Policy

This Privacy Policy explains how Expand Matrix, s.r.o., Příčná 1892/4, 110 00 Prague, Company ID No.: 23530596 ("Provider"), collects, uses, and protects personal data.

It applies to all services, including consulting, custom AI solutions, training, web development, and community platforms.

Identification data: name, surname, invoicing details.

Contact data: email, phone.

Payment data: bank account details, payment information (via bank transfer, PayPal, Stripe).

Technical data: IP addresses, cookies, login data, analytics.

Operational data: client-provided documents, project inputs, chatbot interactions.

Contract performance (service provision, payments).

Legal obligations (accounting, taxation).

Legitimate interest (service improvement, fraud prevention, security).

Consent (marketing communication).

Accounting and tax records: 10 years.

Contractual and project documentation: for the duration of cooperation + 3 years.

Marketing data: until consent is withdrawn.

The Provider may engage trusted processors and service providers for purposes such as technical support, payments, hosting, or analytics. We ensure these partners provide an adequate level of protection and sign data processing agreements. A current list of processors is available upon request.

If data is transferred outside the EU (e.g. to the USA – OpenAI, Stripe, Google), we use Standard Contractual Clauses and other GDPR safeguards.

You have the right to access, rectify, delete, restrict processing, object, and data portability. To exercise your rights, contact [email protected].

We implement encryption, access control, secret vaults (1Password/Vault), anonymization of test data, and access audits.

For inquiries: [email protected].

You have the right to lodge a complaint with the Czech Data Protection Authority: www.uoou.cz.