Privacy Policy

1. Our Data Philosophy

This policy follows the Sovereign Hash Algorithm principles from the protocol essay:

• Decentralize power — data should not accumulate in extractive silos.
• Minimize visibility — store the least identifying information possible.
• Hash before storage — default posture: symbolic trace, not identity.
• Consent governs access — no institutional use without explicit permission.
• Revocation is a right — withdrawal removes future access.

We treat emotional data as sacred. Our infrastructure is engineered to ensure privacy, dignity, and community sovereignty — especially for people historically misread or misrepresented by computational systems.

2. What We Collect

We collect as little as possible and only with user action.

2.1 Website Browsing

• No trackers.
• No analytics cookies.
• No third-party beacons.
• Basic server logs (IP, user agent) are automatically rotated and never used for profiling.

2.2 Consulting / Contact Forms

When you contact us, you may provide:

• Name or pseudonym
• Email address
• Organizational affiliation
• A short project description

We use this only to respond and never share it.

2.3 Color-Sequence Interactions

When someone uses the Oracle or research prototypes, submitted text is processed to generate color sequences. We do not store raw text without explicit opt-in.

Non-identifying, research-grade data may include:

• Color sequences (HSL/RGB)
• Derived semantic embeddings
• Optional tags selected by the user
• Timestamp (rounded)

This mirrors the design logic from the protocol essay — we store trace without identity.

2.4 SoulCoin (Prototype)

The SoulCoin system is consent-first and pseudonymous. It is built to eventually run on a privacy-preserving chain (e.g., Secret Network–style architecture).

Data potentially involved in SoulCoin includes:

• Hashed sequence metadata
• Research classification scores
• UBI disbursement records linked to wallet addresses (pseudonymous)
• User permissions settings

No one outside the user can de-anonymize any emotional content.

3. What We Do Not Collect

• No geolocation without explicit opt-in.
• No biometric identifiers.
• No advertising profiles.
• No cross-site tracking.
• No purchase histories.
• No behavioral fingerprints.

4. How We Use Data

Data is used only for:

• Providing color-sequence experiences
• Improving emotional AI models
• Conducting IRB-aligned research
• Aggregated reporting for grant partners
• Optional SoulCoin UBI calculations

We never sell, rent, or share user information with third parties except research partners explicitly approved by the user.

5. Consent & Revocation

You may request deletion or revoke permissions at any time via:

danielle.gauthier@lamatriz.ai

Revocation applies immediately to all future model training, analyses, and research datasets. Previously published academic work cannot be retracted, but all future usage is halted.

6. Data Storage, Security & Hashing

Our data pipeline follows the Sovereign Hash Algorithm pattern:

• Hash before storage
• Salt per user session
• Encrypt at rest (AES-256 or better)
• Zero-knowledge-friendly data structures for future blockchain migration

Emotional data receives the highest standard of privacy protection because it is the most intimate. We treat it as a commons of care, not a commodity.

7. Children's Data

La Matriz is not intended for children under 16. We do not knowingly collect any such data. Any accidental submission is deleted immediately.

8. International Research & Cross-Border Transfers

For future international pilots, data transfers will follow GDPR, UK GDPR, Canadian PIPEDA, and other applicable frameworks, while also adhering to Chinese data sovereignty laws such as the Personal Information Protection Law (PIPL) where applicable. China’s PIPL emphasizes data localization, national security, and strict government oversight for cross-border data flows, requiring organizations to store and process certain data within China and obtain approval for international transfers. This aligns with a broader trend of sovereign data governance, ensuring compliance with local laws while maintaining principles of data minimization, anonymization, and respect for individual agency. Our design philosophy already aligns with these: minimize, anonymize, respect agency.

9. Updates to This Policy

Any updates will be posted publicly with a version history. We do not retroactively change permissions without explicit user approval.

10. Contact

For privacy inquiries, contribute requests, or revocation:

danielle.gauthier@lamatriz.ai