Mattercite
Privacy policy
This policy describes how Kardev One LLC ("we"), the Minnesota company that operates Mattercite, handles information when you use the hosted service at mattercite.com. Any separately executed data processing agreement also governs the processing covered by that agreement.
What we collect
- Account data: email, name, password hash, session cookies.
- Workspace content you upload or generate: documents, questionnaires, answers, citations, branding (logo and PDF header), and activity records.
- Usage counters (questions and pages in a billing month) and basic request logs from the host (IP, user agent, timestamps) needed to run and secure the service.
- Billing data, if you subscribe: our payment processor, Stripe, collects and stores your card details and billing address. We receive the billing contact, plan, invoice history, and payment status. We never see or store the card number.
How we use it
To provide the workspace you signed up for: store your files, draft answers from those files, export questionnaires, and keep workspaces isolated from each other. We do not sell personal data. We do not use your documents or answers to train foundation models.
Where it lives
The application runs on Amazon Web Services in us-east-1. The public site and TLS termination in front of the app run on Cloudflare. Original uploads are stored in a private S3 bucket with encryption at rest. Extracted text and answers are stored in Postgres. Answer generation on the hosted service uses Amazon Bedrock over a knowledge base filtered to your workspace. See subprocessors.
Cookies
A single HTTP-only session cookie (ddqa_session) keeps you signed in. It is marked Secure on HTTPS. We do not use advertising cookies.
On the public website, our own first-party measurement sets mc_vid, a random visitor identifier (one year); mc_utm, the campaign tags of your first visit (90 days); and mc_cta, the page whose free-trial link you clicked (one day). They are read only by mattercite.com, to count page visits and trial starts and attribute a signup to the page and campaign that led to it. They contain no name, email or page content.
Advertising
We advertise on Google Search. When you arrive from one of our ads, Google adds a click identifier to the link (gclid, or gbraid/wbraid on some Apple devices). Our first-party measurement stores it in a cookie, mc_gclid, for 90 days. If you start a free trial or later subscribe, we report that conversion to Google Ads using only the click identifier and the time of the conversion, so we can see which ads work. We do not send Google your name, email address, documents or workspace content, and we do not use advertising cookies for remarketing or ad personalization.
Public website analytics
Google Analytics measures public website visits and trial-start clicks using analytics cookies, browser/device information and page information. We do not install it in the application or send it your documents, questionnaire answers or workspace activity. Our configured page URLs exclude fragments and every query parameter except standard campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content and utm_id), and referrers include only the originating site. Advertising features remain disabled.
We do not display an analytics consent popup. You can block Google Analytics with a browser extension or your browser's tracker blocking, and you can opt out of all Google Analytics measurement with Google's browser add-on. Analytics cookies are configured to expire after 90 days without renewal; you can remove existing cookies through your browser settings. These controls do not disable operational logs, Cloudflare traffic statistics or the first-party measurement described above, which are used to operate and improve the service.
Who can access your information
We use the service providers listed on our Subprocessors page to operate Mattercite. Each provider processes information for the purposes described there; not every provider receives your uploaded documents or answers. People you invite to your workspace can access its shared content. We may also disclose information when required by law.
Retention and deletion
We keep account and workspace data while the workspace is active. Deleting a document removes the stored file, its extracted text, and its search index entries, and later answers cannot cite it. When a subscription ends or a trial expires, the workspace stays read-only for 12 months from the end of the paid period, then is deleted permanently, including uploaded documents, extracted text, search indexes, questionnaires, answers, knowledge pairs, members, and the account. The workspace owner gets an email 30 days before that happens. An owner can delete the workspace at any time from Configuration, and you can email us to delete it sooner. Backups of the database are kept for 7 days and expire on their own. Request logs are kept for 30 days.
Contact
Questions about this policy, or a deletion request: hello@mattercite.com. Kardev One LLC, 202 N Cedar Ave Ste #1, Owatonna, MN 55060, USA.