Privacy Policy
Last updated: 2026 • Dataonia / Costmatic, Inc.
This privacy policy sets out why and how Costmatic, Inc. (“Costmatic”, “Dataonia”, “We”, “Us”, or “Our”) collects, uses, discloses, and protects personal information of users, partners, and website visitors accessing our services and autonomous finance and operations platform, and provides information on your rights regarding these activities. In such processing activities, We act as the data controller with respect to your personal information.
We are committed to ensuring that your personal information is protected. When you provide information by which you can be identified, it will only be used in accordance with this Privacy Policy and applicable data protection regulations, including the EU General Data Protection Regulation (GDPR).
Enterprise Privacy & Governance Principles
Dataonia is designed around least-privilege, bounded scope, enterprise-grade security, and auditability. Sandbox evaluations and analytical integrations are scoped to non-sensitive financial metadata, schema mappings, and read-only allowlisted telemetry. We do not sell personal data, nor do we train public foundation models on customer financial records or proprietary business data.
1. Information We Collect
- Personal Information: We collect contact details you voluntarily submit, including your name, corporate email address, company or organization name, and target integration use-case details.
- Workflow & Telemetry Data: During sandbox evaluations or service interactions, we may collect technical metadata related to schema mapping, latency thresholds, integration connectors, and agent run logs.
- Device & Usage Information: When you visit our website, we may automatically collect standard device information such as IP address, browser type, operating system, and referral headers.
- Analytics Storage (Opt-In): Subject to your cookie consent, anonymous analytics data may be gathered via Google Analytics to help us improve site navigation and content engagement.
2. Use of Information
We use collected information for legitimate business purposes:
- To evaluate, configure, and communicate regarding Dataonia sandbox and evaluation programs.
- To fulfill contractual commitments, technical consultations, and support requests.
- To maintain platform security, prevent abuse, and optimize infrastructure performance.
- To communicate relevant platform updates or technical notices.
3. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information only under the following bounded conditions:
- Service Providers: Trusted third-party infrastructure and tooling providers (such as hosting, email delivery, and form handling) who operate under strict confidentiality agreements.
- Legal Obligations: When required by applicable law, regulation, subpoena, or governmental request.
- Rights Protection: To enforce our terms, protect the rights, property, or safety of Costmatic, our customers, or the public.
4. Data Security
We implement robust administrative, technical, and physical safeguards to protect personal information from unauthorized access, alteration, disclosure, or destruction. Access to personal information is restricted to authorized personnel with a legitimate business need.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy, satisfy sandbox evaluation requirements, resolve disputes, or comply with legal and audit obligations. Users may request deletion of their personal information at any time, subject to legal retention requirements.
6. Your Privacy Rights (GDPR & Global Rights)
Depending on your jurisdiction, you have certain rights regarding your personal data, including:
- The right to access and receive a copy of your personal data.
- The right to rectify inaccurate or incomplete personal information.
- The right to request erasure (“right to be forgotten”).
- The right to restrict or object to the processing of your data.
- The right to data portability.
- The right to withdraw consent at any time without affecting prior lawful processing.
7. Children's Privacy
Our services are intended strictly for enterprise and professional users aged 18 and older. We do not knowingly collect personal information from minors.
8. Changes to this Policy
We reserve the right to update or revise this Privacy Policy at any time. Any changes will be posted to this page with an updated revision date.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: