Privacy Notice

1. Who we are

Nkonad (trading as sharematrX) decides how and why your personal data is processed and is therefore the data controller. You can reach us at support@sharematrx.com.

2. Personal data we collect and why

• Account data — name, email address, login credentials and authentication identifiers (including Google sign-in). Used to create and secure your account and provide the service. Legal basis: performance of a contract.
• Plan and credit data — plan tier, credit balance, credit usage history and report identifiers. Used to deliver reports, apply plan limits and support billing queries. Legal basis: performance of a contract.
• Report inputs — the industries, locations, retailers and brands you select. Used to generate your reports and improve the product. Legal basis: contract and legitimate interests.
• Support messages — the content of emails and support requests. Used to answer you. Legal basis: legitimate interests.
• Usage, device and log data — IP address, device and browser identifiers, pages viewed, timestamps and error logs. Used for security, fraud prevention, reliability and product improvement. Legal basis: legitimate interests.
• Marketing and service emails — email address and delivery events, for transactional notices (receipts, low-credit alerts) and, where you opt in, product updates. Legal basis: contract and consent.

3. Who we share data with

• Service providers and subprocessors: cloud hosting, database, analytics and email delivery providers.
• Paddle.com, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting advisers, where necessary.
• Authorities and regulators where we are legally required to disclose.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account, plan and credit-usage data for as long as your account is active and for up to 24 months after closure, and billing records for as long as tax and accounting law requires. Log data is kept for a shorter period. When data is no longer needed it is deleted or anonymised.

6. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. Under the UK/EU GDPR you may also complain to your supervisory authority; under South Africa's POPIA you may complain to the Information Regulator. Email support@sharematrx.com and we will respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, restricted administrative access and audit logging.

8. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in, to hold your session and to track free-trial report usage for visitors who have not signed up. Where we use analytics cookies they are used only to understand aggregate product usage. You can clear or block cookies in your browser settings, though essential functionality may stop working.

9. Changes

We may update this notice; material changes will be reflected in the "last updated" date above.