Privacy Policy
We collect what the platform needs to run your workspace and keep it secure. We do not sell your information, we do not train AI models on your content, and Google and Microsoft data you connect is used only for the features you use.
Who we are and what this covers
A2A Matrix ("A2A Matrix", "we", "us") operates this website and the hosted A2A Matrix platform at console.a2amatrix.com and app.a2amatrix.com. This policy explains what we collect when you use them, why, and the choices you have. Questions go to support@a2amatrix.com.
If your organisation runs A2A Matrix in its own infrastructure, your organisation decides how that deployment handles data, and its own policy applies to it.
What we collect
- Account details — your name, email address and company name. When you sign in with Google or Microsoft, we receive your name, email address and profile picture from that account, and nothing else at sign-in.
- What you put into your workspace — instructions to assistants, documents and files you upload, knowledge collections, agent and workflow configuration, and approval decisions.
- Data from services you choose to connect — for example Gmail, Google Drive, Outlook or OneDrive — read only when you, or an assistant acting for you, use that connection.
- Records needed to run and protect the service — an audit record of actions in your workspace, AI usage and cost records, and security logs that include IP addresses and browser details.
- Cookies needed to keep you signed in and to protect forms. We do not use advertising cookies. This website loads its fonts from Google Fonts.
How we use it
To provide the platform: running your assistants, agents and workflows, sending each AI request to the provider your workspace is configured to use, and delivering service emails such as sign-up codes, invitations and approval requests. To keep it secure: authentication, rate limits, abuse prevention and the audit record. To support you, and to meet legal obligations.
We do not sell your information. We do not use your content to train AI models — ours or anyone else’s.
AI model providers
When an assistant or agent calls an AI model, the text needed for that request is sent to the provider configured for your workspace: one you connect with your own account — for example Anthropic, Google, OpenAI, Groq or OpenRouter — or one the platform provides. Your workspace’s data-exposure settings decide what may be sent. What a provider does with a request is governed by its own terms and any agreement you hold with it.
Google user data
Sign in with Google uses only your basic profile: your name, email address and profile picture.
If you connect a Google account to use Gmail or Google Drive, A2A Matrix accesses that data only to provide the feature you use — for example reading the messages or files you ask an assistant to work with — and only while the connection exists.
A2A Matrix’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not use Google user data for advertising, and we do not sell it.
- We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
- People at A2A Matrix do not read Google user data unless you give consent for specific items, it is necessary for security — such as investigating abuse — or to comply with the law.
- The access you grant is kept encrypted in our secrets vault, never in the database, and you can remove it at any time: disconnect it in A2A Matrix, or at myaccount.google.com/permissions.
Microsoft user data
Sign in with Microsoft uses only your basic profile. If you connect Outlook or OneDrive, the same rules apply as for Google: the data is used only for the feature you use, never for advertising or to train AI models, the access is kept encrypted in our vault, and you can remove it in A2A Matrix or in your Microsoft account at any time.
Who we share it with
Service providers that run the platform for us — the infrastructure that hosts it and the provider that delivers our emails — and the services you choose: the identity provider you sign in with, the AI model providers your workspace uses, and the services you connect. Each receives only what its part of the service needs. We disclose information when the law requires it, or to protect the rights and safety of our users and the platform.
How we protect it
No system is perfectly secure; if we learn of an incident affecting your data, we will tell you as the law requires.
- Encryption in transit for every connection to the platform.
- Credentials kept in a secrets vault; the database holds only where a secret is, never the secret itself.
- Each company’s data separated in the database itself, by row-level security, not only in application code.
- An append-only, hash-chained audit record of what was done in each workspace, and by whom.
How long we keep it
We keep your workspace data while your account is active. Audit records follow your company’s retention settings. When you ask us to delete your account or your company, we delete the data we hold for it, except where the law requires us to keep something; backups expire on their own schedule.
Your choices and rights
You can ask to access, correct, export or delete your information, and you can disconnect any connected service at any time. Depending on where you live — for example under the GDPR in the EU and UK, the CCPA in California or the DPDP Act in India — you may have further rights, including to object to or restrict processing and to complain to a regulator. Write to support@a2amatrix.com from the email address on your account; we answer within the time the law sets.
Children
The platform is for businesses and is not directed to children under 16. We do not knowingly collect their information.
International processing
Your information may be processed in countries other than yours, including by the AI providers and service providers your workspace uses. Where the law requires it, we use the safeguards it provides for such transfers.
Changes to this policy
We change this policy when the service changes. The date at the top says when it last did; for a significant change, we tell account holders before it takes effect.