Privacy Policy

Last updated: 6 October 2026.

ArborealMatrix ("we", "us", "our") provides a web application for creating, editing, and sharing graph-based content such as family trees and skill trees at arborealmatrix.com and related subdomains. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

Who is responsible for your data

ArborealMatrix is the service operator responsible for processing personal information described in this policy. For privacy requests, contact us at privacy@arborealmatrix.com.

Information we collect

We collect information in these categories:

• Account and identity. When you sign in, we receive information from your chosen sign-in method: for example your email address and, if your provider supplies it, your name and profile image. We support passwordless sign-in via magic link and sign-in with third-party providers (such as Google or GitHub, when enabled).
• Graph content you create. Data you store in ArborealMatrix, including graph titles, node labels, relationship data, dates, places, living-person flags, and similar fields. If you import a GEDCOM file, we process the contents to build your graph.
• Share links. If you create a read-only share link, we store link settings (such as tokens and redaction options) and serve a server-generated snapshot to visitors. Visitors do not need an account to open a share link.
• Technical and usage data. Our hosting providers process standard request metadata (such as IP address, user agent, and timestamps) in server and application logs needed to operate, secure, and debug the service.

Information about other people in your graphs

Family trees and similar graphs often contain personal information about relatives or other individuals. You choose what to enter and whether to share it. You are responsible for having a lawful basis to collect and upload that information and for respecting others' privacy. When you use read-only share links for family graphs, we apply server-side redaction so nodes marked as living are omitted from the public snapshot unless you preview otherwise as the owner.

How we use information

We use personal information to:

• Provide, maintain, and improve ArborealMatrix;
• Authenticate you and keep your session secure;
• Send transactional email (for example magic-link sign-in);
• Enforce our Terms of Service and protect against abuse;
• Comply with law and respond to lawful requests.

We do not sell your personal information.

Legal bases (EEA, UK, and similar laws)

Where applicable, we rely on: performance of a contract (providing the service you signed up for); legitimate interests (security, fraud prevention, and improving the product in a way that respects your rights); consent where required (for example if we add optional analytics that need consent); and legal obligation.

How we share information

We share personal information only with service providers that process data on our behalf to run the product, or when required by law. Current categories of providers include:

• Hosting and infrastructure (for example Vercel for the web application, Neon for the database, Cloudflare for DNS and related network services);
• Email delivery (Resend, for magic-link and other transactional messages we send);
• Authentication providers (for example Google or GitHub when you choose those sign-in options).

We may update this list as our stack changes; material changes will be reflected in an updated version of this policy.

International transfers

We and our providers may process data in countries other than where you live, including the United States. Where required, we use appropriate safeguards for cross-border transfers.

Retention

We keep account and graph data while your account is active. If you delete your account or ask us to delete your data, we delete or anonymize personal information within a reasonable period, except where we must retain limited records for security, legal compliance, or resolving disputes. Server logs are kept for a limited operational period.

Security

We use technical and organizational measures appropriate to the nature of the data, including encryption in transit and access controls on production systems. No method of transmission or storage is completely secure.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, email privacy@arborealmatrix.com. We may need to verify your identity. For general product help (not privacy-specific requests), you can also reach us at support@arborealmatrix.com.

Children

ArborealMatrix is not directed at children under 13 (or the minimum age in your country to consent to online services). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@arborealmatrix.com.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of the service after changes take effect constitutes acceptance of the updated policy where permitted by law.

Contact

Privacy questions and data subject requests: privacy@arborealmatrix.com.