Privacy Policy

This Privacy Policy explains how Cimbro LLC ("Cimbro," "we," "us," or "our"), the company behind UniMatrix (the "Service," accessible at deployunimatrix.com), collects, uses, stores, shares, and protects information when you use UniMatrix. UniMatrix is a persistent, privacy-first, vendor-independent memory layer for large language models (LLMs), allowing users and applications to store, retrieve, and manage contextual memory across AI systems.

By creating an account, signing in with Google, or otherwise using UniMatrix, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, please do not use the Service.

1. Who We Are

UniMatrix is a product of Cimbro LLC, a company based in Washington, DC, United States. Cimbro LLC is the data controller responsible for the personal information described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide via Google Sign-In (Google OAuth)

UniMatrix uses Google OAuthto let you securely sign in without creating a separate password. When you choose to sign in with Google, and only after you explicitly grant permission on Google's consent screen, we receive the following information from your Google Account:

• Name — your first and last name, as registered with your Google Account.
• Email address — used to identify your account, send essential service communications, and provide account recovery.
• Profile picture — used to personalize your account display within the UniMatrix interface.

We do not request or receive your Google password. We do not request access to your Gmail, Google Drive, Google Contacts, or any other Google service beyond the basic profile and email information described above, unless a specific additional feature is introduced and separately disclosed and consented to in advance.

2.2 Memory and Session Data

The core function of UniMatrix is to store and retrieve "memory" that allows LLMs to maintain context and continuity across interactions. When you or an application acting on your behalf uses UniMatrix, we collect and store:

• LLM interaction events — records of prompts, responses, tool calls, and related metadata (e.g., timestamps, source application, session identifiers) that are submitted to UniMatrix for memory extraction and retrieval.
• Entities — structured representations of people, places, concepts, preferences, or facts extracted from interaction events to build a persistent memory graph.
• Relations — structured associations between entities (e.g., "works at," "prefers," "is related to") that allow memory to be organized and queried contextually.
• Usage and diagnostic data — API request logs, error logs, performance metrics, IP address, browser/user agent, and timestamps, used for security, debugging, and service reliability.

Memory data may include content you or a connected application chooses to submit, which can include personal information you provide in the course of your interactions with connected LLMs and AI agents. You and any application you authorize are responsible for the content submitted to UniMatrix.

2.3 Information from Cookies and Similar Technologies

We may use strictly necessary cookies or local storage to maintain login sessions and secure authentication tokens. We do not use third-party advertising cookies or trackers.

3. How We Use Your Information

We use the information we collect solely to operate, maintain, secure, and improve UniMatrix. Specifically, we use your information to:

• Create, authenticate, and manage your UniMatrix account via Google OAuth;
• Provide, personalize, and maintain the persistent memory service, including storing and retrieving entities, relations, and interaction events on your behalf;
• Enable vendor-independent memory continuity across different LLMs and AI applications that you choose to connect;
• Display your name and profile picture within your own account interface;
• Communicate with you about your account, service updates, and security notices;
• Monitor, debug, and improve the performance, reliability, and security of the Service;
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service;
• Comply with applicable legal obligations.

4. How We Store and Secure Your Data

UniMatrix stores account and memory data using Neon (Neon Postgres), a managed, cloud-hosted PostgreSQL database provider. Data stored includes account profile information (name, email, profile picture URL), memory graph data (entities and relations), and interaction event logs necessary to power the memory layer.

• Encryption: Data is encrypted in transit (TLS) between your client, UniMatrix servers, and our database provider. Data at rest is encrypted using our database provider's storage-level encryption.
• Access controls: Access to production data is restricted to authorized Cimbro LLC personnel on a need-to-know basis and is protected by authentication and audit logging.
• Data location: Data is hosted on cloud infrastructure provided by our database and hosting vendors, which may process and store data in the United States or other regions where our infrastructure providers operate.
• Retention: We retain your account and memory data for as long as your account remains active, or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data and memory data within 30 days, except where retention is required for legal, security, or fraud-prevention purposes.

5. How We Share Your Information

We may share information only in the following limited circumstances:

• Service providers ("subprocessors"): We share data with vetted infrastructure and service providers who process data on our behalf under contractual confidentiality and data protection obligations — for example, Neon (database hosting), our application hosting provider, and email delivery providers used solely to operate the Service.
• Connected applications you authorize: If you explicitly connect a third-party LLM application or AI agent to UniMatrix to read or write memory on your behalf, that application will access the memory data you authorize it to access. You control which applications are connected and can revoke access at any time.
• Legal compliance: We may disclose information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
• Business transfers: If Cimbro LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any resulting change in ownership or use of your data.

6. Use of Google API Services and Limited Use Disclosure

UniMatrix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data (name, email address, profile picture) to provide and improve user-facing features of UniMatrix that you have directly requested — namely, authentication and account personalization.
• We do not use Google user data to serve advertisements of any kind, including retargeting, personalized, or interest-based advertising.
• We do not allow humans to read Google user data unless: (a) we have your affirmative consent for specific messages; (b) it is necessary for security purposes, to comply with applicable law, or to investigate abuse; or (c) the data has been aggregated and anonymized.
• We do not transfer Google user data to third parties except as necessary to provide or improve UniMatrix's user-facing features (e.g., our database provider Neon, strictly as a data processor), to comply with the law, as part of a merger or acquisition subject to continued policy commitments, or with your explicit consent.
• We do not sell Google user data.

7. Your Rights and Choices

You have the following rights regarding your personal information. To exercise any of these rights, contact us at privacy@deployunimatrix.com.

Depending on your jurisdiction (for example, under the EU/UK GDPR or the California Consumer Privacy Act), you may have additional rights, including the right to restrict or object to processing, lodge a complaint with a supervisory authority, or not be discriminated against for exercising your privacy rights. We will honor applicable rights requests consistent with the law of your jurisdiction.

8. Children's Privacy

UniMatrix is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16 without verified parental consent, we will delete that information promptly.

9. International Data Transfers

Cimbro LLC is based in the United States, and the infrastructure providers we use (including Neon) may process and store data in the United States or other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect personal information transferred internationally.

10. Data Security Incidents

We take reasonable administrative, technical, and physical measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

11. Third-Party Services and Links

UniMatrix may allow you to connect third-party LLM applications or AI agents. This Privacy Policy does not cover the privacy practices of those third-party applications. We encourage you to review the privacy policies of any third-party service you connect to UniMatrix.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email and/or through a prominent notice on the Service prior to the change taking effect, and — where required, such as when we intend to use previously collected Google user data for a new purpose — we will obtain your renewed consent before doing so. The "Effective Date" at the top of this policy indicates when it was last revised.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Cimbro LLC
Washington, DC, United States
Email: privacy@deployunimatrix.com
Alternate contact: tim@cimbro.com