00Legal

PrivacyPolicy.

Last updated: August 10, 2026

This Policy explains what personal information Ematrics handles, why, and what rights you have over it.

One distinction matters throughout. For the call content our business customers put through the platform, we act on their instructions and they decide what is collected and kept. For our own account and website data, we decide. Section 01 sets out which is which.

01

Scope and our role

This Policy explains how Ematrics handles personal information in connection with the Ematrics platform, including AI training simulations, real-time call assistance, post-call analytics and team reporting.

Two different roles

For call content submitted by a business customer, Ematrics acts as a processor or service provider on that customer's instructions. The customer is the controller and decides what is recorded, on what legal basis, and for how long it is kept.

For our own account, billing, website and marketing data, Ematrics acts as a controller.

If you were a participant on a call processed through Ematrics and want to exercise a right over that recording, the organisation that ran the call is the right place to start. We will assist that organisation in responding, but we cannot act on its data without instruction. Contact details are in the final section.

02

Information we collect

Information you provide

  • Account and profile data: name, business email, telephone number, employer, job title, credentials.
  • Billing data: billing contact, address and transaction records. Card details are handled by our payment processor and are not stored by us.
  • Support and correspondence: messages you send us, and records of our responses.

Call and conversation data

  • Audio processed during live assistance and training simulations.
  • Recordings, where the customer has enabled recording.
  • Transcripts and speaker attribution.
  • Derived analytics: call scores, sentiment readings, talk ratios, objection classifications, coaching notes and recommended actions.

Information collected automatically

  • Usage data: features accessed, session times, actions taken in the product.
  • Device and connection data: IP address, browser type, operating system, device identifiers.
  • Cookies and similar technologies, as described below.

Information from integrations

Where a customer connects a CRM, calendar, communications or sales engagement tool, we receive data from that system as configured by the customer, and may write call records and outcomes back to it. What is exchanged is determined by the customer, not by us.

03

Voice and biometric data

Voice recordings may constitute biometric or sensitive personal information under certain laws, including in Illinois, Texas and Washington, and under the GDPR where used to identify an individual.

Ematrics processes call audio to transcribe conversations and to generate coaching analytics. Where our processing of voice data falls within these regimes, the customer that captured the audio is responsible for providing the required notices and obtaining the required written consent before any recording takes place.

We do not sell voice data, do not use it to identify individuals across customers, and do not disclose it other than as described in this Policy.

04

How we use information

  • To provide, operate, maintain and secure the Service.
  • To transcribe and analyse conversations and generate Outputs, on our customer's instructions.
  • To authenticate users, administer accounts and process payments.
  • To provide support and respond to enquiries.
  • To monitor performance, diagnose faults and prevent abuse, fraud and security incidents.
  • To improve and develop our products, using aggregated and de-identified data as described below.
  • To send service communications, and marketing communications where permitted, with an opt-out in every marketing message.
  • To comply with law and to establish, exercise or defend legal claims.

Aggregated and de-identified data

We generate aggregated and de-identified data from use of the Service and use it to operate, benchmark and improve our products and models. This data does not identify any individual, customer or call participant, and we do not attempt to re-identify it.

We do not use identifiable customer call content to train models for the benefit of other customers.

05

Legal bases for processing

Where the GDPR or UK GDPR applies and we act as a controller, we rely on the following bases:

  • Performance of a contract, to provide the Service and administer accounts.
  • Legitimate interests, to secure the Service, prevent abuse, and develop our products, where those interests are not overridden by your rights.
  • Consent, for marketing where required and for non-essential cookies. Consent may be withdrawn at any time.
  • Legal obligation, to meet tax, accounting and regulatory duties.

Where we act as a processor, the legal basis for processing call content is determined by the customer acting as controller.

06

Disclosure of information

We do not sell personal information. We disclose it only as follows:

  • Sub-processors and service providers: cloud hosting, speech-to-text and AI model providers, analytics, payment processing and support tooling, each bound by contract to process only on our instructions and to maintain appropriate safeguards.
  • The customer that controls the data: administrators of a customer account can access calls, transcripts and analytics generated by their Authorised Users.
  • Integration partners: where a customer directs us to exchange data with a connected system.
  • Legal and safety: where required by law, legal process or regulator, or to protect the rights, property or safety of Ematrics, our customers or the public.
  • Corporate transactions: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy continuing to apply.

A current list of sub-processors is available on request to info@ematrics.com.

07

International transfers

Ematrics is based in the United States and information may be processed there and in other countries where we or our sub-processors operate. Those countries may not provide the same level of protection as your own.

Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on an approved transfer mechanism, including the Standard Contractual Clauses, together with supplementary measures where appropriate. A copy of the relevant mechanism is available on request.

08

Retention

For call content, retention is configured by the customer. We retain it for as long as the customer's account remains active or as its settings specify, and delete or de-identify it after the applicable period.

Account and billing records are kept for the life of the account and for as long afterwards as needed to meet legal, tax and accounting obligations, and to resolve disputes.

On termination we make customer data available for export for thirty days, after which it may be deleted from active systems. Residual copies may persist in backups for a limited period before being overwritten.

09

Security

We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption of data in transit and at rest, access controls and least-privilege permissions, logging and monitoring, and periodic review of our practices and those of our sub-processors.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Customers are responsible for configuring their own account correctly, managing which of their users has access, and safeguarding credentials.

Where a personal data breach occurs, we will notify affected customers and, where required, regulators and data subjects, within the timeframes applicable law requires. Nothing in this Policy or in our Terms limits any obligation of notification that applies to us by law.

10

Your rights

Rights under the GDPR and UK GDPR

  • Access to the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure, in the circumstances the law provides.
  • Restriction of processing, and objection to processing based on legitimate interests.
  • Portability of data you provided to us.
  • Withdrawal of consent, without affecting prior lawful processing.
  • Complaint to your supervisory authority.

Rights under California law

  • To know what personal information is collected, used, disclosed and, if applicable, sold or shared.
  • To delete personal information, subject to exceptions.
  • To correct inaccurate personal information.
  • To opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA as amended.
  • To limit use of sensitive personal information.
  • Not to be discriminated against for exercising any of these rights.

To exercise a right over data we hold as a controller, contact info@ematrics.com. We will verify your identity before responding and will respond within the period the applicable law requires.

Where the request concerns data we process on a customer's behalf, we will refer you to that customer, who is the controller, and support them in responding.

11

Cookies

We use strictly necessary cookies to operate the site and keep sessions secure, and may use analytics cookies to understand usage. Non-essential cookies are used only where consent is required and given.

Most browsers allow cookies to be blocked or deleted. Blocking strictly necessary cookies may prevent parts of the Service from working.

12

Children

The Service is a business product and is not directed to anyone under eighteen. We do not knowingly collect personal information from children. If we learn we have done so, we will delete it. Contact us if you believe a child has provided us with information.

13

Changes to this policy

We may update this Policy from time to time. The date above shows the most recent revision. Where changes are material we will provide additional notice, by email or in the product, before they take effect. Continued use after that point constitutes acceptance.

14

Contact

Ematrics, Cornelius, North Carolina, United States.

Privacy enquiries and rights requests: info@ematrics.com.