Privacy Policy

Last updated: 24 September 2026

1. Who We Are

Subject Matter is a digital platform that helps users practice product management through AI-assisted workflows.

For the purposes of data protection law, Subject Matter acts as the data controller of your personal data.

If you have any questions, you can contact us at: hello@subjectmatter.io.

2. What Data We Collect

We may collect the following types of personal data:

Account Information

  • Name
  • Email address
  • Login credentials (including social authentication providers)

Usage Data

  • IP address
  • Device and browser type
  • Pages visited and interactions within the platform

Payment Information

  • Billing details (processed securely via third-party providers such as Stripe)
  • We do not store full payment details

User Content

  • Any information, text, or materials you submit within the platform
  • Product descriptions, tasks, comments, and related data

3. How We Use Your Data

We use your data to:

  • Provide, operate, and maintain Subject Matter
  • Manage your account and authenticate users
  • Generate AI-based outputs and recommendations
  • Process payments and subscriptions
  • Improve performance, functionality, and user experience
  • Communicate with you (including service updates and optional newsletters)
  • Detect, prevent, and address fraud or misuse

4. Legal Basis for Processing (GDPR)

We process your personal data based on one or more of the following legal grounds:

  • Performance of a contract — to provide the service you signed up for
  • Legitimate interests — to improve, secure, and operate the platform
  • Consent — for optional marketing communications and non-essential cookies
  • Legal obligations — where required by law

5. Use of AI and Automated Processing

Subject Matter uses artificial intelligence to generate recommendations, tasks, and content based on user input.

Your data may be processed by automated systems to:

  • Generate outputs
  • Improve system performance
  • Provide core functionality

This may include processing by third-party AI providers (such as OpenAI).

AI-generated outputs may not always be accurate, complete, or suitable for every situation.

6. Sharing Your Data

We do not sell your personal data.

We may share your data with trusted third-party service providers, including:

  • Infrastructure and hosting providers (e.g. Supabase)
  • Payment processors (e.g. Stripe)
  • Analytics providers (e.g. Google Analytics)
  • AI service providers (e.g. OpenAI)

We may also disclose data:

  • If required by law
  • To protect our legal rights

All third-party providers process data in accordance with applicable data protection laws.

7. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA).

When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission

8. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential functionality (required for the service to work)
  • Analytics (e.g. Google Analytics), only with your consent

You can manage your cookie preferences at any time.

9. Data Retention

We retain personal data only as long as necessary to:

  • Provide the service
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

Information submitted through the early access form is retained for 12 months from the date of submission, after which it is deleted.

You may request deletion of your data at any time (see Section 10).

10. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)

To exercise your rights, contact us at: hello@subjectmatter.io

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption (HTTPS)
  • Secure infrastructure
  • Access controls

However, no system can be guaranteed to be completely secure.

12. Children’s Data

Subject Matter is not intended for individuals under the age of 16.

We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If changes are significant, we will notify users. Continued use of the service means you accept the updated policy.

14. Contact

If you have any questions about this Privacy Policy or your data, you can contact us at: hello@subjectmatter.io.