Privacy policy

Matrix Fellows operates this website and its member dashboard. This policy covers information we receive through the site, membership forms, accounts, research tools, and connected services. The dashboard is intended for adults; school participation is a separate workflow and individual programs retain their own eligibility requirements.

We use information to run the society and support members’ work, not to sell personal information or target advertising. External sites and services have their own privacy policies.

Accounts contain your email address, authentication identity, and information you choose to add. Google or Microsoft sign-in supplies basic identity information such as your name and email; signing in does not give us access to your inbox.

The dashboard can store interests, skills, availability, location or travel preferences, work samples, profile claims, saved opportunities, applications, activities, tasks, schedules, contributions, and artifacts. Research tools can store target evidence, proposals, drafts, relationship records, and sending status. Include only information you are authorized to share.

A verified account may prefill its private research profile from a matching membership response using only name, interests, goals and self-reported experience. Administrative school and guardian fields are excluded from research enrichment and sharing. The school membership form is a separate workflow. It requests name, student email, grade, student ID, interests, experience, goals, parent or guardian name and email, and a confirmation of parent permission; optional feedback may also be collected. That confirmation is a member’s attestation, not an independently verified parent signature.

Essential cookies support secure sessions and sign-in or mailbox authorization flows. Browser storage can retain saved opportunity identifiers and form preferences or drafts. These are functional features, not advertising cookies. Clearing browser storage may remove device-only saves or sign you out.

Our hosting and security services may process IP addresses, browser information, request timestamps, and diagnostic logs to deliver the site and prevent abuse. The membership-form rate limiter uses short-lived hashed identifiers rather than storing raw IP addresses in its rate-limit records.

We use information to authenticate accounts, manage participation, personalize research and opportunity work, maintain plans and evidence, save drafts, carry out actions you review, and respond to support or privacy requests. We also use necessary operational information to investigate errors, protect accounts, and meet applicable legal obligations.

A saved opportunity does not authorize an application or an inquiry. Sharing a relationship record does not authorize sharing someone’s private profile, draft, or mailbox content.

Account-linked dashboard records are private unless a feature or your explicit action shares them. Assigned research targets and permitted coordination information may be visible to relevant members or officers. Membership-form responses are available to authorized organizers and may be synchronized to a restricted organizer Google Sheet. Sponsor summaries exclude individual responses and sensitive membership fields.

We use Supabase for authentication and data storage and Cloudflare for hosting and delivery. Google or Microsoft may process identity information when you choose their login. A configured Google Sheets integration processes organizer membership records. Other connected services process the information required for the actions you authorize; their policies govern their own processing.

We may disclose information when required by law or reasonably necessary to address fraud, security, or safety. We do not make your private records public merely because you join the society.

Drafts, AI outreach and new mailbox connections are restricted to appointed officers and administrators. Connecting a mailbox is separate from signing in. The connection screen identifies the permissions requested. When you review and authorize sending, the selected provider receives the sender, recipient, subject, message, and any supported attachments needed for that action. Connection credentials are held encrypted on the server, not exposed to other members.

Sending permission does not imply permission to read replies or your entire inbox. Reply synchronization is not currently active. Disconnecting removes the stored mailbox authorization; it does not erase messages already submitted to the provider or all application sending-history records. You can also revoke consent through the provider.

AI features are intended exclusively for authorized adult officers, not high-school members or ordinary member accounts. When enabled, the current research-analysis flow may send explicitly reviewed public research excerpts to the configured model provider. Member profiles, school membership responses, private drafts, and mailbox content are not inputs to that public-excerpt analysis flow.

A feature using a different kind of information must disclose that use before it is enabled. Provider processing and retention depend on the configured service and agreement; we do not promise that all external providers have identical retention or training practices. AI suggestions require human review and do not become verified facts automatically.

We retain information as needed for active accounts, society operations, records of member work, security, and applicable obligations. Different records have different purposes; there is no single automatic deletion period for all data. Historical records and backups may remain after an interface item is removed.

You can edit available profile fields, change sharing choices, and disconnect optional services. Contact us to request access, correction, account closure, or deletion. We may need to verify identity and explain records that must be retained or cannot immediately be removed from backups. No online system can guarantee absolute security.

This service is not intended for children under 13. Younger participants should involve a parent or guardian where required, and follow school, institution, and program rules. Parents or guardians can contact us about a participant’s information. If you believe a child under 13 has supplied personal information, tell us so we can investigate and address it.

Participation in a physical lab or research program requires its own supervision, safety, and consent arrangements. Website registration does not establish those arrangements.

For privacy questions or requests, email contact@matrixfellows.com. Please describe the request without including passwords, OAuth secrets, sensitive identity documents, or unnecessary personal information.

We will update the date on this page when the policy changes and provide additional notice for material changes when appropriate. This page describes Matrix Fellows’ practices; it is not a promise about unrelated websites.