Privacy Policy

Last updated: April 8, 2025

PRIVACY POLICY WEBSITE ModelMatic B.V.

1. Data we collect

We collect and process the following categories of personal data:

• Website visitors: IP address, browser type, computer MAC address, pages visited, time of visit, and other analytical data.

• ModelMatic users: Name, email address, company details, and any other information provided.

• Customer data: Information that customers enter into ModelMatic, such as audio files, transcripts and notes from interviews, process descriptions, and other data relevant to generating BPMN models.

• Automatically processed data: Our AI processes textual input to generate automated BPMN models. This occurs without the AI learning from individual user data unless explicitly stated otherwise.

2. Purposes of data processing

We process personal data for the following purposes:

• Providing and improving our services.

• Personalizing user experiences.

• Analyzing and improving our website and software.

• Providing customer service and support.

• Complying with legal obligations.

3. AI usage and data processing

ModelMatic uses AI to generate BPMN processes based on user input. The following applies:

• The AI processes entered text exclusively for the specific session and does not learn from individual data unless explicitly indicated.

• Data may be stored temporarily to generate results but is not used to train models without consent.

• There is human oversight of AI results if necessary. This means that in cases where the system detects uncertainty or when a user requests verification, a trained employee may review and, if necessary, correct the generated output.

4. Data storage and security

We take appropriate measures to protect your data:

• Data is stored on secure servers and encrypted using Fernet and Amazon Web Services Key Management Service (KMS).

• Our servers are located within the European Union unless stated otherwise.

• We maintain strict access controls and log all access attempts.

• Data is retained for as long as necessary for the purposes for which it was collected and deleted in accordance with our retention periods.

5. Sharing with third parties and integrations

We only share personal data with third parties when necessary:

• External service providers: For hosting, analytics, and other supporting services.

• Legal obligations: If required by laws and regulations.

• Integrations with other tools: If you choose to link ModelMatic with external software, data may be shared according to the settings of that integration.

We ensure that these third parties comply with appropriate security measures and confidentiality obligations.

6. User rights

According to the GDPR, you have the following rights:

• Access: You can request an overview of the data we have about you.

• Correction: You can have incorrect or incomplete data adjusted.

• Deletion: You can request the deletion of your data, unless we must retain it based on legal obligations.

• Objection: You can object to certain types of processing.

• Data portability: You can request a copy of your data in a common format.

• Limitations due to encryption: Much of the substantive content within ModelMatic is stored in encrypted form. As a result, we cannot decrypt or recover certain data ourselves. In such cases, we can only delete the encrypted data but cannot provide access to the original content.

Requests can be submitted via info@modelmatic.nl. We respond within 15 working days.

7. Changes to this privacy policy

We may update this privacy policy. Changes will be published on our website and, if material, actively communicated.

8. Contact

For questions regarding this privacy policy, you can contact us at: info@modelmatic.nl

© ModelMatic B.V. 2026.