This Privacy Policy explains how MetaTaxonomy Inc.(“MetaTaxonomy,” “we,” “us”) collects, uses, shares, and protects information when you use the MetaTaxonomy websites, applications, and related services (the “Service”). It applies to account holders and visitors.
Information we collect
- Account information. Your email address, used for magic-link sign-in and service messages. We do not collect or store passwords.
- Content you submit. Domains, nodes, contributions, comments, and prompts you create, and any repository or other data source you connect or submit for documentation. Public content is visible to anyone on the internet; private and link-only content is restricted by access rules you control.
- Payment information. If you subscribe, payments are processed by our payment processor (Stripe). We receive and store your subscription status, plan, and billing identifiers — we never receive or store full card numbers. The processor's handling of your payment details is governed by its own privacy policy.
- AI usage records. When you use AI features (chat, routing, document generation, agents), we log the request and response, token counts, cost, and which prompt version was used, for debugging, abuse prevention, and enforcing usage limits.
- Audit log. Administrative actions on your domains (create, rename, invite, accept, and similar) are recorded for accountability.
- Usage and device data. We use Vercel Web Analytics and Speed Insights to collect aggregate page views and performance metrics. These are cookieless and do not track you across other sites. We also keep standard server logs (IP address, browser type, timestamps) for security and reliability.
- Cookies. We use the cookies needed to run the Service — chiefly your sign-in session and preferences. When we run advertising campaigns, our advertising partner (Reddit) sets a measurement cookie on our site so we can tell whether ad clicks lead to signups or purchases; we report those conversion events (never your browsing history or content) to Reddit. We do not use any other advertising or cross-site tracking cookies.
How we use information
- To provide and operate the Service: sign you in, store and render your content, generate documentation, and run the AI features you invoke.
- To bill subscriptions, administer Credits, and enforce plan and spending limits.
- To secure the Service: debugging, abuse and fraud prevention, and enforcing our Terms of Service.
- To communicate with you about the Service (sign-in links, receipts, service and policy notices, and product updates you can opt out of).
- We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not use your private content to train AI models. Our AI providers process content to generate responses; under our API agreements with them, they do not use that content to train their models.
Legal bases (EEA/UK)
Where GDPR or UK GDPR applies, we process personal data: to perform our contract with you (operating the Service); for our legitimate interests (security, abuse prevention, improving the Service) — balanced against your rights; with your consent where we ask for it; and to comply with legal obligations.
How we share information
We share personal data only with the service providers below (our sub-processors), each bound to process it solely to provide their service to us; with authorities where required by law; and, if we are involved in a merger, acquisition, or asset sale, with the parties to that transaction under confidentiality obligations. We will notify you of a change in ownership that affects your data.
- Vercel — hosting, function execution, cookieless analytics
- Neon — Postgres database (US region)
- Upstash — Redis rate limiting and caching
- Resend — transactional email (magic links, notices)
- Anthropic — AI inference
- Voyage AI — embeddings
- Stripe — payment processing and billing portal
- Reddit — advertising measurement (ad-conversion events)
- Inngest — background jobs
- Sentry — error monitoring
If you connect a repository hosted by a third party (e.g., GitHub), we access it under the permissions you grant there, and your use of that platform remains subject to its terms.
Retention
- Content you delete is removed from the product immediately and recoverable for 30 days; permanent erasure is available on request.
- Audit-log entries are retained for 12 months.
- AI-usage cost records are retained for billing audit; billing records are retained as required for tax and accounting.
- Account data is deleted or de-identified within a reasonable period after account deletion, except records we must keep by law.
Security
We protect data using industry-standard measures: encryption in transit, encrypted storage with our providers, scoped access controls, and audit logging. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal data, we will notify you and regulators as required by law.
International transfers
We are a U.S. company and process data in the United States. If you use the Service from outside the U.S., your data is transferred to and processed in the U.S. Where required, we rely on appropriate safeguards (such as our providers' standard contractual clauses) for those transfers.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal data, and to object to or restrict certain processing. U.S. state privacy laws also provide a right to opt out of “sales,” “sharing,” and targeted advertising — we do none of these, so there is nothing to opt out of, but you may still submit a request. Where GDPR applies, you may also lodge a complaint with your supervisory authority.
To exercise any right, email hello@metataxonomy.comfrom your account email address. We will verify the request, respond within the period required by your jurisdiction's law (and in any case aim for 30 days), and will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our decision, and we will re-review it.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has provided us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service evolves. For material changes, we will provide notice (for example, by email or an in-product notice) before the change takes effect; the “last updated” date above will reflect the change.
Contact
MetaTaxonomy Inc.
244 Madison Avenue #1179, New York, NY 10016
hello@metataxonomy.com