Privacy Policy

Effective date: June 15, 2026

Mathesar Cloud is operated by Mathesar Foundation Inc ("Mathesar," "we," "us," or "our"). This Privacy Policy explains how we handle information when you use Mathesar Cloud and the Mathesar Cloud website.

This Privacy Policy applies to mathesar.cloud, Mathesar Cloud signup and login, the hosted service, contact and mailing-list forms, optional feedback and surveys, and support or sales communications with Mathesar.

This Privacy Policy does not apply to self-hosted open-source Mathesar deployments, except when you interact with Foundation-hosted websites, forms, mailing lists, support channels, or other services. Additional terms may apply to some offerings or agreements.

Information We Collect

We collect information needed to create, authenticate, secure, and manage your Mathesar Cloud account, such as your name, email address, username, settings, preferences, sign-in provider information from Google, GitHub, or another supported provider, and direct login credentials where offered.

When you use Mathesar Cloud, we process information you submit, upload, import, create, connect, manage, or share through the service ("Customer Content"). Customer Content may include database data, form submissions, files, metadata, exports, and related content.

If you contact us, join the Mathesar Foundation mailing list, request support, submit in-product feedback, or answer an optional survey, we collect what you provide, such as your name, email address, message, survey responses, mailing-list preferences, unsubscribe status, and related delivery, engagement, or communications information. You can unsubscribe from mailing-list communications through email links or by contacting us; we may still send service, security, legal, or administrative communications when needed.

Please do not include highly sensitive or regulated information in contact messages, feedback, surveys, or other optional communications unless we ask you to provide it or agree otherwise in writing.

We collect limited technical, usage, and diagnostic information to operate, secure, analyze, and improve Mathesar Cloud and our website, such as login timestamps, session identifiers, security events, pages visited, links clicked, form submission events, browser and device information, IP address, referrer information, timestamps, and logs.

How We Use Information

We use information to:

provide, operate, secure, troubleshoot, and support Mathesar Cloud;
create, authenticate, and manage accounts;
respond to questions, support requests, feedback, sales inquiries, and communications you request;
analyze website and service usage and improve Mathesar Cloud, subject to the Customer Content limits below;
debug issues, prevent abuse, investigate security events, comply with legal obligations, enforce agreements, and protect legal rights.

Customer Content

You are responsible for the Customer Content you choose to submit, upload, import, create, connect, manage, or share through Mathesar Cloud, and for ensuring that you have the rights and permissions needed to use that Customer Content with the service.

We process Customer Content to provide, secure, maintain, troubleshoot, support, and operate Mathesar Cloud; respond to your requests; prevent abuse; comply with law; and as otherwise directed by you through your use of the service or our agreements with you.

We do not use Customer Content for advertising, retargeting, cross-site behavioral advertising, or AI model training. We may use aggregated or de-identified usage, diagnostic, and technical information that does not identify you or any individual to understand and improve Mathesar Cloud.

Unless we agree otherwise in writing, you should not use Mathesar Cloud for information that requires special legal, contractual, or regulatory handling, such as protected health information, payment card data, government identifiers, children's data, or similarly regulated information.

Customer Content may be accessible to people you invite, authorize, or share it with through Mathesar Cloud. If you create, publish, or share forms, links, files, databases, exports, or other shared surfaces, people with access may be able to view or submit information according to the settings you choose. Some forms may be public by link.

If you submit information through a form or shared surface controlled by another Mathesar Cloud user, that user may be able to access and use the information you submit under their own policies or practices. Where owner, administrator, collaborator, or similar controls are available, authorized users may be able to access, manage, export, modify, or delete Customer Content associated with the account or database they control.

We may disclose information to service providers and subprocessors; sign-in providers such as Google or GitHub; authorized Mathesar personnel; legal, safety, or security recipients when required or reasonably necessary; transaction parties; and other recipients with your consent or direction.

We share Customer Content with service providers only as needed to provide, secure, maintain, troubleshoot, support, or operate Mathesar Cloud, or as directed by you through your use of the service.

Current providers include Microsoft Azure for hosting, infrastructure, database, storage, and Cloud operations; Google Cloud Platform for migration infrastructure and certain Mathesar feedback, survey, and analytics systems; Google Workspace for support, contact, and administrative email; Formspree for form collection and routing; MailerLite for Mathesar Foundation mailing-list communications; Simple Analytics for website analytics; GitHub for sign-in where used and public repository information such as star counts; and Google for sign-in where used and optional Google Forms surveys.

If you use a third-party identity provider, form, survey, or external service, that provider may process information under its own privacy policy.

Analytics And Cookies

We use cookies and similar technologies that are necessary to operate Mathesar Cloud, such as keeping you signed in, maintaining sessions, securing the service, preventing abuse, and remembering settings.

We use privacy-focused analytics to understand website and service usage. Our current website analytics provider is Simple Analytics, which is designed not to use cookies or track visitors across websites. We may collect limited event information, such as page views, link clicks, and form submissions, to understand and improve our website and services.

Mathesar Cloud may offer optional in-product feedback and usage data collection features. Feedback may include the message you choose to send and basic product context. Usage data, when enabled, is limited to product and installation-level statistics such as counts of users, databases, schemas, tables, records, forms, and similar feature usage.

We do not track visitors across third-party websites for targeted advertising or sell or share personal information for cross-context behavioral advertising. Because we do not engage in those practices, browser Do Not Track or universal opt-out signals do not change our behavior. If this changes, we will update this policy and provide any required choices.

Legal Bases Where Required

Where law requires a legal basis, we rely on performance of a contract to provide and manage Mathesar Cloud; legitimate interests to secure, maintain, analyze, improve, and protect our services; consent where required for optional communications or features; and legal obligations to comply with law, respond to lawful requests, or protect legal rights. We do not use automated decision-making, including profiling, to make decisions with legal or similarly significant effects.

Retention, Deletion, And Export

We retain information for as long as needed to provide, secure, maintain, troubleshoot, support, and improve Mathesar Cloud; comply with legal obligations; resolve disputes; enforce agreements; prevent abuse; and protect rights and safety.

Customer Content is generally retained while the relevant account, database, or feature remains active or until it is deleted, subject to backups, logs, legal, security, abuse-prevention, and operational exceptions. Mathesar Cloud may provide product features that allow you to export or delete certain Customer Content directly. You may also contact us at support@mathesar.cloud to request access to, correction of, export of, or deletion of your account information or Customer Content.

Deleted information may remain in backups, logs, or archival copies for a limited period according to our normal backup, security, and retention practices, unless we need to retain it longer for legal, security, abuse-prevention, or operational reasons. We retain contact, support, feedback, survey, and mailing-list information for as long as needed to respond to you, manage communications, analyze feedback, or comply with our obligations.

Security And Support Access

We use administrative, technical, and organizational measures designed to protect information, including access controls intended to limit access to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Authorized Mathesar personnel may include employees, contractors, volunteers, maintainers, officers, or other people working with Mathesar Foundation who are authorized to help operate or support Mathesar Cloud. They may access account information, technical data, and Customer Content when reasonably necessary to provide, secure, troubleshoot, maintain, or support Mathesar Cloud; respond to user requests; investigate abuse or security issues; or comply with legal obligations. We limit access to authorized personnel who have a need to know for the purposes described in this Privacy Policy.

If you contact us for support, we may use the information you provide and relevant account, technical, or Customer Content information to investigate and respond. If we become aware of a security incident affecting personal information, we will notify affected users or regulators when required by applicable law.

International Processing

Mathesar Foundation and our service providers may process information in the United States and other locations where we or they operate. Those locations may have different data protection laws. Where required, we use appropriate safeguards for international transfers, and you may contact us for more information.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information we maintain about you; object to or restrict certain processing; withdraw consent; or lodge a complaint with a data protection authority.

You may contact us at support@mathesar.cloud to make a privacy request. We may verify your identity and will respond as required by law. If your information is in Customer Content controlled by another user, we may refer your request to that user or help that user respond, as appropriate.

Mathesar Foundation Inc is a nonprofit organization. Some privacy laws, including the California Consumer Privacy Act, may not apply to nonprofit organizations in the same way they apply to for-profit businesses. Regardless, we do not sell personal information or share personal information for cross-context behavioral advertising.

Children

Mathesar Cloud is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us at support@mathesar.cloud if you believe a child has provided personal information to us. Do not use Mathesar Cloud to knowingly collect personal information from children unless you have the legal authority to do so and we have agreed in writing to support that use. If we learn that we collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it or otherwise handle it as required by law.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate, such as by posting the updated policy on this page or by sending notice through Mathesar Cloud or email.

Contact Us

If you have questions or requests about this Privacy Policy, contact us at support@mathesar.cloud.