Training privacy notice

Who we are and what this notice covers

Maincode Pty Ltd, ABN 33 682 917 059, operates the Matilda Train platform at train.matilda.com. Contact security@maincode.com or write to Level 1, 287–293 Collins Street, Melbourne VIC 3000, Australia, for privacy questions, access or correction requests and complaints. This notice describes the training platform and its billing flow.

Information collected and purposes

We collect identity and verified email information from the sign-in provider, account and company memberships, access grants, billing-account details, payment status, resource requests, usage and billing records, and operational and security diagnostics. We process files, datasets, scripts, logs, checkpoints and telemetry that you submit or generate when using the service.

We use this information to authenticate users, apply company membership and permissions, run and support jobs, meter and invoice usage, reconcile payments, detect misuse and maintain the service. Providing account and billing information is necessary to supply paid training. Avoid uploading personal or sensitive information you do not have authority to process.

Payments, company access and service providers

Stripe collects payment-card details, billing address and tax information on its hosted pages. Matilda Train does not receive your full card number or card security code. It receives the payment and account references and status needed to manage compute funding.

Company billing administrators can see the costs and member identity associated with company-funded work. A billing role alone does not grant access to another person’s workspace files or job content. Authorized platform staff may access information where needed to provide support, operate the service, investigate security issues or comply with law; administrative actions are audited.

We use service providers including Stripe for payments and Google and the configured identity provider for identity and security services. These providers may process account, payment or diagnostic information outside Australia, including in the United States, under their applicable arrangements. Australian compute or storage location does not mean every identity, payment or support record remains in Australia. Ask security@maincode.com for the providers and locations relevant to your deployment before uploading data with residency restrictions.

Cookies, retention and your requests

The training portal uses cookies and browser storage needed for sign-in, security, workspace selection and payment return flows. The privacy notice is not a marketing-consent request. Marketing communication requires its own applicable basis and unsubscribe controls.

We keep account, security and financial records while needed for service operation, disputes, audit and legal recordkeeping. Removing a file or closing an account does not immediately erase financial records or every retained backup. Contact us to request access, correction, export or deletion; we will explain any information that must be retained and any limits that apply.

To make a complaint, contact security@maincode.com with the details. We will investigate and respond. If you are dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au where applicable. This notice does not waive privacy rights or claim certifications, deletion guarantees or a particular retention period that your deployment has not established.