Privacy Notice

Who this notice covers

This Privacy Notice explains how personal data is handled in connection with matternorth.com, its public development preview and correspondence sent to MatterNorth. “MatterNorth”, “we”, “us” and “our” refer to the operator of this website using the MatterNorth brand. Contact us at privacy@matternorth.com or at the office address below.

This notice concerns the current preview. It does not describe a live marketplace, seller account, payment service or production Manufacturing OS. Before introducing materially different processing, we will provide the relevant notice and obtain consent where required. A privacy notice is an explanation of processing; reading or browsing it is not consent to unrelated marketing.

Your data, at a glance

• You can explore this website without registering for an account.
• The preview search filters examples in your browser. It does not submit your requirement to live AI or supplier matching.
• The launch-interest form prepares a draft locally. Closing it clears its fields and prepared links; a clear button is also provided. MatterNorth does not receive it merely because you type or prepare it.
• Opening Gmail passes draft details to Google; opening an email app passes them to that app. Sending the message delivers it to us.
• Optional Google Analytics loads only after you choose “Allow analytics”. Rejecting optional analytics leaves the site usable. Advertising tracking and automatic form capture are disabled. Hosting and security infrastructure may process technical connection information.
• Use the privacy request draft tool or contact route below to ask about, correct or request deletion of information you have sent us. A prepared request is not a received request.

What information is involved

Do not put passwords, identity-document numbers, payment-card details, health information or confidential technical drawings in the launch-interest form. There is no document-upload facility in this preview. If a future business discussion requires confidential material, agree a suitable secure channel first.

How we use information

We use information for the purpose associated with your action: operating the preview, responding to correspondence, discussing participation in the launch, preventing misuse, resolving complaints and meeting applicable legal obligations. Where you separately request launch updates, we may use your contact details to provide those updates. The draft form’s optional updates checkbox is off by default; an ordinary enquiry is not treated as an ongoing updates subscription. You can ask us to stop at any time.

We do not sell personal data or use this preview to make automated decisions determining eligibility for credit, employment or other consequential services. Search text in this preview is not sent to an AI model. Information is not submitted to an AI training service by this website code.

Consent and your choices

Where consent is required, processing must relate to a specified purpose and an informed, voluntary choice. We do not treat acceptance of Website Terms as blanket consent for personal-data processing. Some processing may instead be permitted or required by applicable law, including handling voluntarily supplied information for its specified purpose and complying with lawful obligations.

To withdraw consent or stop launch updates, email privacy@matternorth.com from the address you used, with “Withdraw consent” or “Stop launch updates” in the subject. You do not need an account. Withdrawal does not retrospectively invalidate processing already lawfully carried out. We may retain information where continued retention is legally required or necessary to resolve a dispute; we will explain any relevant limit.

Providers and disclosure

Infrastructure and communication providers may process information necessary for their functions. The current setup uses Vercel for website hosting; Cloudflare for domain/DNS services and security or traffic handling where enabled; Google Workspace for business email; and Google Analytics for optional visit measurement only after your permission. If you choose Gmail or another email application to prepare or send a draft, that provider handles the information under its own terms and privacy practices.

Access to correspondence may be given to authorised people handling the enquiry, professional advisers where necessary, and providers supporting the relevant systems. We may disclose information where legally required, to respond to valid legal process or to protect rights and security. We do not make launch-interest details public or distribute them as supplier leads through this preview. Any corporate transaction involving personal data would require appropriate safeguards and notice where required.

Cookies, storage and external email tools

Use “Privacy choices” in the footer to allow or reject optional Google Analytics. The site works with either choice. No Google Analytics script is requested by this site code before permission or after a saved rejection. Earlier dismissal of our informational notice is not treated as analytics consent.

Your current choice is stored on your device in localStorage under mn.privacy.v2 for up to 180 days. It records the choice, notice/purpose version, device-clock choice time and expiry, not your form entries, search text or identity. Earlier choices without the current purpose version are not treated as a new analytics allowance. If storage is unavailable, the choice may apply only to the current page. Expired or unreadable choices default to analytics off. Expiry is checked during the visit and when the page becomes visible again. Withdrawal or clearing in another open tab is synchronised through this browser’s storage events; the active Analytics page reloads to stop its SDK. Global Privacy Control, where supplied by your browser, keeps optional analytics off.

If you allow analytics, Google Analytics may process technical visit information and set _ga and _ga_* cookies for up to 180 days without extending that configured lifetime on each page load. We measure page visits and the fixed interactions “launch interest opened”, “draft prepared” and “email client opened”. A prepared draft is not a received enquiry, subscription, account or order. We do not send form contents, names, work emails, company text, search text, URL query strings or fragments as event parameters. Page titles and page paths are restricted to seven allowlisted public canonical routes; referrer information is limited to the origin. Google signals, advertising personalisation and enhanced automatic measurement are disabled in this setup.

You can withdraw permission at any time by reopening “Privacy choices” and selecting “Reject optional”. This disables measurement, removes this site's accessible Google Analytics cookies and reloads the page without loading Analytics. Withdrawal does not itself erase data already processed by Google; contact us about a data request. Browser controls can remove site data, and Google's Analytics opt-out tool provides an additional choice. See how Google uses information from sites that use its services.

Hosting/security providers may use essential technical measures for their services. Interactive form values remain in page memory, although browsers may independently retain autofill values, restored forms or history. “Open Gmail” includes your prepared subject and message in Google's compose URL; your browser and Google handle that URL and draft. “Open email app” passes it to your configured handler. “Copy message” writes it to the clipboard. Choose an action only if you want that transfer. Nothing is sent to MatterNorth automatically by preparing a draft.

Retention and deletion

For the user- and event-level Analytics data controlled by the property retention settings, we have selected two months, with reset on new user activity switched off. Google states that setting changes can take 24 hours to apply and do not affect most standard aggregated reporting. These settings are not a universal deadline for deletion of every Google record. Browser cookies and local privacy preferences have their separate lifetimes described above.

We retain enquiry correspondence while reasonably needed to respond, maintain the requested business discussion or launch updates, resolve disputes and meet applicable record-keeping obligations. Retention is assessed by purpose, sensitivity, the status of the relationship and legal requirements. It is not indefinite permission to reuse data for unrelated purposes.

You can request deletion using the contact route below. Where a record cannot yet be erased because of a legal obligation or an unresolved claim, we will explain the reason and limit further use where appropriate. Copies in provider backups may remain until their normal secure expiry. Technical logs are subject to provider settings, security needs and applicable retention requirements; this notice does not promise a uniform deletion interval across independent providers.

Security and incidents

The site uses HTTPS and browser security headers. The current form is designed to minimise collection by preparing drafts locally. Access to information received by email should be limited to people who need it for the relevant work. These measures reduce risk; no website, communication channel or storage system can be guaranteed completely secure.

If an incident affects personal data for which we are responsible, we will assess and contain it and provide notifications to affected individuals and competent authorities where required by applicable law, within the applicable time limits. Report suspected misuse or exposure to privacy@matternorth.com. Do not exploit an issue or disclose another person's data when reporting it.

International processing

Infrastructure, email routing, support or storage may involve processing outside India. This notice does not represent that all data remains in India. Applicable contractual protections, legal restrictions and any government conditions on transfers must be respected. Contact us if you need information about a particular processing location before sending material.

Requests, rights and grievances

Contact privacy@matternorth.com, addressed to the MatterNorth privacy contact, to request information about your personal data, correction or updating, deletion, withdrawal of consent or review of a grievance. Explain the relevant interaction and what you want us to do. We may seek proportionate verification to avoid disclosing data to the wrong person; do not send identity documents unless specifically necessary and a suitable channel is agreed.

We will review requests and explain the action taken or any lawful restriction. We aim to acknowledge privacy grievances within seven working days and resolve them within 30 days; where a matter requires longer, we will explain progress and observe the legally applicable maximum, including the DPDP grievance period when applicable. These are handling targets, not a restriction on your legal remedies.

As applicable DPDP provisions commence, statutory rights include access to prescribed processing information, correction and erasure, grievance redressal and nomination of another individual to exercise rights in the circumstances provided by law. Nomination requests can be initiated through the same contact route. Where available, you may approach the Data Protection Board of India after using the required grievance process. This notice does not waive rights or remedies under applicable law.

India’s DPDP framework

The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 use “Data Principal” for the individual concerned and “Data Fiduciary” for the person determining the purposes and means of processing. The framework has phased commencement. As at 25 October 2026, not all substantive duties and rights have commenced. We apply obligations as they become legally applicable; this notice does not claim certification or that every provision is already in force.

The notified implementation provides an initial phase, a one-year phase for specified Consent Manager-related provisions, and an eighteen-month phase for most substantive processing duties and individual rights. Read the official commencement notification and notified Rules, together with applicable amendments and corrigenda.

We will review collection notices, purpose and consent controls, rights handling, provider arrangements, retention and incident response before launching new data-intensive functions. A future account, live AI submission or transaction will need notices that explain that particular processing. Those functions are not enabled by this policy alone.

Children and information about others

This is a business-oriented preview intended for adults aged 18 or above. It does not offer child accounts or invite children to submit information. If you believe a child has sent us personal data, contact us so we can assess and remove it where appropriate. Any future processing requiring parental or lawful-guardian consent will need appropriate safeguards before it begins.

Share another person's business contact details only where you have a lawful basis to do so, and tell them where appropriate. Do not submit unrelated personal information about colleagues, customers or employees.

Changes and contact

We may update this notice to reflect actual functionality, providers or law. The date and version at the top identify the current notice. Material changes will be explained prominently where appropriate; a new notice will not be treated as retrospective consent for an incompatible purpose.

Privacy enquiries and grievances: privacy@matternorth.com, for the attention of the MatterNorth privacy contact.

Please use this address for correspondence concerning this notice.