LEGAL

Privacy policy

EFFECTIVE 1 SEPTEMBER 2026

This policy explains what data Mātr collects, why, and what we never do with it. The controller is ZWAG AI Ltd (DIFC, UAE). The principles are simple: we collect what the service needs to work, we never sell your data, and we never use your text to train AI models.

What we collect

Account data. Your email address, sign-in and session records, and your plan and subscription state.

Translation content. The text you submit, the translations produced, and the correction details shown to you, stored as your translation history so you can revisit and export it. Glossary terms you pin are stored with your account.

Usage records. Characters processed, request counts, and the processing cost of your requests, kept per billing period for metering, billing integrity, and abuse prevention.

Forms you submit. Demo requests from the contact page (name, email, organisation, interest, message) and contributor applications (name, email, languages, role, affiliation, links). Greetings added to the homepage map are anonymous: just the greeting text, language, and the map position you choose.

Anonymous demo. The free demo counts usage per browser and network address so the daily limit can be enforced. It is not linked to any identity.

How we use it

To run the service you asked for: producing and correcting translations, keeping your history and glossary available to you, metering plans and processing payments, answering your messages, preventing abuse, and understanding aggregate load and cost. That list is exhaustive.

What we never do

We do not sell or rent your data. We do not use your text, your translations, or your glossary to train AI models, ours or anyone else's. We do not run advertising trackers or sell audience data; the only cookies we set are the functional ones described below.

AI processing

To translate, your submitted text is sent to a third-party AI model provider under commercial API terms that exclude its use for model training. Mātr's own structural scoring and correction happen on our own systems. Your text reaches the model provider only for the purpose of producing your translation, and we will name our current provider to customers who ask.

Where your data lives, and for how long

Your data is processed and stored on cloud infrastructure in Singapore. Translation history is kept according to your plan: roughly a day on the trial, 30 days on Essential, and 12 months on Professional. When a plan ends, its history is kept for at most 30 days more and then deleted. An account whose email address is never confirmed is deleted after 7 days; other account data lasts until you ask us to delete your account. Billing and usage records are kept as long as accounting rules require.

Contact and contributor submissions are kept while we are in conversation with you and deleted on request.

Who processes data for us

We use a small set of service providers, each receiving only what their job needs: our cloud host (infrastructure and email delivery), our AI model provider (the text submitted for translation), Stripe (payments; they receive your email address, and your card details go to Stripe directly and never reach us), and the services that store website form submissions and carry our team email. We do not share your data with anyone else unless the law requires it. The current list of providers is available to customers on request.

Cookies

Two, both strictly functional: one that keeps you signed in, and one that enforces the free demo's daily limit. No advertising or cross-site tracking cookies.

Your rights

You can access your data (your history is visible in the product, and exportable on plans that include it), correct it, or have your account and its data deleted by writing to hello@zwag.ai from your account email. We honour the data protection rights that apply to you, including under the DIFC Data Protection Law and, where it applies, the GDPR. If you believe we have handled your data wrongly, contact us first and we will fix it; you also have the right to complain to your data protection authority.

Security

All traffic is encrypted in transit. Sign-in codes and session tokens are never stored in a form that could be reused to impersonate you. Internal access follows least-privilege principles, and no payment card data ever reaches our systems.

Children

The service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, tell us and we will delete it.

Changes and contact

If this policy changes materially we will notify account holders before the change takes effect; the date above always reflects the current version. Questions to hello@zwag.ai or the contact page. ZWAG AI Ltd, Dubai International Financial Centre, Dubai, UAE.