Privacy policy

01

Introduction

Mato (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI podcast platform and related services.

This policy applies to information we collect through our website, platform, and any related services, sales, marketing, or events. By using our services, you agree to the collection and use of information in accordance with this policy.

02

Information we collect

Account information

When you create an account or request a demo, we collect information such as:

• Name and email address
• Company name and job title
• Phone number (optional)
• Account credentials

Usage data

We automatically collect information about how you interact with our platform:

• Features used and actions taken
• Time spent on various sections
• Device type, browser, and operating system
• IP address and general location

Audio content

When you use our platform to create podcasts, we process and store:

• Audio recordings of interviews and episodes
• Transcripts generated from audio
• Show notes and metadata
• Guest information you provide

SMS & Q&A submissions

When you text a show’s Q&A phone number to submit a question, we collect:

• Your mobile phone number
• The content of your SMS messages (your question and any follow-up messages)
• Your opt-in confirmation (reply YES to the confirmation message)

Participating in the Q&A SMS program is entirely voluntary and is not required to use the Mato platform or listen to any show. Message frequency varies based on your submissions and whether your question is reviewed, answered, or featured. Message and data rates may apply. You can opt out at any time by replying STOP or get help by replying HELP.

Mato is operated by Hey Mato, Inc. The Mato Q&A SMS program is offered under the Mato brand at heymato.com.

Payment information

Payment processing is handled by third-party payment processors. We do not directly collect or store your full credit card numbers or bank account details. Our payment processors may collect billing address and payment card information as necessary to process your transactions.

03

How we use your information

We use the information we collect to:

• Provide and maintain our services: including creating and hosting your podcast content, processing interviews, and generating deliverables.
• Process transactions: including billing, invoicing, and subscription management.
• Send service communications: such as account notifications, technical updates, security alerts, and support messages.
• Improve our platform: through analytics, research, and development to enhance features and user experience.
• Provide customer support: to respond to your inquiries and resolve issues.
• Send SMS notifications: when you opt in to the Q&A SMS program, we use your phone number to send an opt-in confirmation message, verify your consent (reply YES required), and notify you when your question is reviewed, answered, or featured in a podcast episode. Message frequency varies and message and data rates may apply. We do not use your phone number for unrelated marketing. You can opt out at any time by replying STOP.
• Send marketing communications: with your consent, we may send promotional content about our services. You can opt out at any time.

04

Data sharing

Service providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Analytics and monitoring services
• Microsoft Clarity heatmaps and session insights after analytics consent, with ad storage denied
• Payment processors
• Customer support tools
• Email service providers
• Twilio (SMS delivery): we use Twilio to send and receive SMS messages for our Q&A feature. Twilio processes your phone number and message content solely to deliver messages on our behalf. Mobile opt-in data, phone numbers, and SMS consent are not shared with third parties or affiliates for marketing or promotional purposes.

These providers are contractually obligated to protect your information and only use it for the purposes we specify.

Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business transfers

If Mato is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

05

Data retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Account data: retained while your account is active and for a reasonable period afterward to comply with legal obligations.
• Audio content: retained according to your account settings and subscription plan. You may delete content at any time through your dashboard.
• Usage logs: generally retained for 12 months for analytics and security purposes.
• Marketing preferences: retained until you withdraw consent or request deletion.

06

Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to certain exceptions.
• Export: request a portable copy of your data in a commonly used format.
• Opt-out: unsubscribe from marketing communications at any time using the link in our emails. To opt out of SMS messages, reply STOP to any message from us. Reply HELP for assistance.
• Restriction: request that we limit the processing of your information in certain circumstances.

To exercise any of these rights, please contact us at privacy@heymato.com.

07

Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: data is encrypted in transit using TLS and at rest using industry-standard encryption.
• Access controls: we limit access to personal information to employees and contractors who need it to perform their job functions.
• Security audits: we conduct regular security assessments and penetration testing.
• SOC 2 compliance: we are working toward SOC 2 Type II certification to demonstrate our commitment to security best practices.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

08

Cookies

We use cookies and similar tracking technologies to collect information and improve our services. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

09

International transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

For EU/EEA users

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection laws as determined by the European Commission
• Other lawful transfer mechanisms as permitted by GDPR

10

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page with an updated “Last Updated” date
• Sending you an email notification (for material changes)
• Displaying a notice in our platform

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11

Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.