Privacy Policy
How MatGen AI collects and uses personal data on matgen.ai, in Lamp and in Spark, and what you can ask us to do about it.
In plain words
- matgen.ai and Spark need no account, and they never ask you for personal data.
- Lamp needs an account. We keep your e-mail address, a username and a hash of your password, plus the research you do in Lamp: searches, chat messages and reports.
- To answer your questions, Lamp sends your research content to AI models. The companies that run them must not keep it or train on it, except for four models that Lamp’s model list marks with “Provider may retain your data”. Two search services may also keep what Lamp sends them: the web search service the search words, and the search-ranking service your question and the description of your invention, for 30 days, to train its models.
- PayPro Global sells Lamp plans as merchant of record. It takes the payment and issues the invoice.
- We use essential cookies only. No analytics, no advertising.
- You can ask to see, export, correct or delete your data. We answer within one month.
This summary helps you find your way. The numbered sections below are the full text.
Who we are and how to reach us#
The controller responsible for your personal data is Individual Entrepreneur MIKHAIL KOZIN, Rezo Gabashvili Street N 1, Block B, Floor 8, Apt. N196, Gldani District, 0167 Tbilisi, Georgia, registered in the Registry of Entrepreneurs and Non-Entrepreneurial (Non-Commercial) Legal Entities under identification number 300480441 (“MatGen”, “we”, “us”). We run matgen.ai, Lamp at lamp.matgen.ai and Spark at spark.matgen.ai.
For anything about your personal data, write to our e-mail address, or by post to the address above.
Data protection officer. We have not appointed a data protection officer, because the law does not require one for us.
What this policy covers#
This policy explains how we process personal data for our own purposes when you:
- visit matgen.ai, our company site;
- use Spark, our battery-materials database, whose search is public and needs no account;
- create a Lamp account, use Lamp or buy a Lamp plan;
- join the Lamp waitlist;
- write to us, for example to ask for support.
Data that business customers put into Lamp. When an organisation uses Lamp and puts personal data about other people into it, for example in text pasted into the chat, we process that data on the organisation’s behalf and on its instructions. For that data the organisation is the controller, and our Data Processing Agreement applies. If that concerns you, please contact the organisation first; we will help it answer you.
What data we collect and where it comes from#
The table lists every kind of personal data we process and where we get it.
| Data | What it includes | Source |
|---|---|---|
| Account data | Your e-mail address, your username, and your password, which we store only as a hash, so we cannot read it. | You, when you register |
| Waitlist | Your e-mail address, if you join the Lamp waitlist while Lamp does not open new accounts. | You |
| Sign-in session | A session identifier kept in the lamp_session cookie while you are signed in. | Created by Lamp when you sign in |
| Research content | Your search queries, the messages you write or paste into Lamp’s AI chat, the reports Lamp generates for you, and the research memos Lamp writes about your work (section 5). | You, and Lamp’s AI models for the generated text |
| Usage and credits | Which searches and reports you run, the credits each one uses, and your credit balance. | Created by Lamp as you use it |
| Plan and payment | Your plan, the state of your subscription, and the order details PayPro Global passes to us: the order number and status, the amount and currency, your e-mail address, the product and quantity, the subscription number, the payment method (for example card or PayPal) and, for card payments, the last four digits of the card. PayPro Global never passes us your full card number or your bank details. | PayPro Global |
| Support messages | The e-mails you send us, our replies, and anything you attach. | You |
| Server logs | Technical records created when your browser loads a page on any of our sites. For Lamp: the date and time, the function requested and the response status, and for the sign-in, registration and password forms also your IP address. The company that delivers all three sites receives your IP address and the address you request. | Your browser, automatically |
| Spark searches | The element symbols you search for in Spark. Spark has no accounts, so we do not link searches to a person. Spark does not store your searches. | You |
Names in published patents and papers
Lamp searches published patent documents, and Spark links each result to the research paper it comes from. These documents name people: inventors, applicants, patent attorneys and authors. We process these names only as part of the published documents, so that you can search, read and cite them. The documents come from a patent office’s public data service, from a commercial patent data provider and from the publishers of the papers.
We have no contact details for the people named and could not inform each of them without disproportionate effort, so we inform them through this policy (Art. 14(5)(b) GDPR). They have the rights in section 10.
Why we use your data, and on what legal basis#
We may only use personal data when the GDPR gives us a legal basis. For each purpose, the table names the basis in Art. 6(1) GDPR. Where we rely on our legitimate interests, it says what those interests are.
| Purpose | Data used | Legal basis |
|---|---|---|
| Run your Lamp account: sign you in, run searches, chat and reports | Account data, sign-in session, research content, usage and credits | Performing our contract with youArt. 6(1)(b) |
| Apply your plan, count credits and show your balance | Usage and credits, plan and payment | Performing our contract with youArt. 6(1)(b) |
| Send account and billing notices, and tell you about changes to our terms | Account data | Performing our contract with youArt. 6(1)(b) |
| Answer your support messages | Support messages, account data | For customers, performing our contractArt. 6(1)(b)For everyone else, our interest in answering people who write to usArt. 6(1)(f) |
| Keep our sites secure and working: detect attacks and abuse, find and fix errors | Server logs, sign-in session | Our interest in running secure, reliable servicesArt. 6(1)(f) |
| Trace AI requests to find errors and check the quality of reports | Research content, usage | Our interest in giving you correct, working reportsArt. 6(1)(f) |
| Tell you when your Lamp account is ready, if you joined the waitlist | Waitlist | Your consent, which you give when you join the waitlist and can withdraw at any timeArt. 6(1)(a) |
| Keep business and tax records | Plan and payment, usage and credits | Legal obligationArt. 6(1)(c) |
| Answer requests from authorities, and establish, exercise or defend legal claims | Whatever the case requires | Legal obligationArt. 6(1)(c)Our interest in protecting our rightsArt. 6(1)(f) |
You can object to any use based on our legitimate interests; see section 10. We do not use your data for advertising.
How Lamp uses AI#
Lamp answers questions, drafts reports and compares documents with large language models run by other companies. When you run a search, write in the chat or generate a report, Lamp sends the text that task needs to one of these providers: your question or message, the invention you described in the chat as the subject, and passages from patent documents. The provider sends the generated text back to Lamp.
Lamp sends every AI request to an AI gateway, which passes it to a company that hosts the chosen model. With each request, Lamp tells the gateway to use only a host that keeps no prompts and does not collect your data. The gateway itself keeps no prompts. Four models in Lamp’s model list have no such host: Qwen3.8 Max Prime, Qwen3.8 Max, Qwen3.8 Flash and GLM 5.3 Prime. The model list marks them with the note “Provider may retain your data”. If you choose one of them, its host may keep what Lamp sends and use it to train its models. Lamp uses these four models only when you choose them. We do not use your research content to train AI models.
Two other services receive text from your research, through the AI gateway. When Lamp looks for patents similar to your invention, it uses a web search service, with English search words that the AI model derives from your brief. The web search service never receives the brief itself, and it may keep the search words. To sort search results, Lamp sends your question and the description of your invention to a search-ranking service. The search-ranking service may keep them for 30 days and may use them to train its models.
We record AI requests and responses with a tracing tool that runs on our own servers, so that we can find errors and check the quality of reports. We keep these records for 30 days.
Lamp also writes short research memos for your account. After a report finishes, an AI model writes one about all your research, from the searches you ran and the wiki pages Lamp wrote in your sessions. When you add patents from a patent class, it writes one for that class, also from the titles and abstracts of your patents in it. The chat and your later reports read these memos, so Lamp can build on your earlier research. The memos are part of your research content: we keep and delete them as section 8 says.
AI output can be wrong
Lamp shows this notice:
Lamp uses AI models that can make mistakes. Reports are for research purposes only and are not patent or legal advice.
Check each statement against the source it cites before you rely on it. The AI use and disclaimer page explains this in more detail.
No automated decisions about you
Lamp generates research content for you to read and check. We do not make decisions about you based only on automated processing, including profiling, that have legal effects on you or affect you in a similarly significant way (Art. 22 GDPR).
Who receives your data#
We share personal data only with service providers that help us run MatGen, and each receives only what its task needs. Most act as our processors: they may use the data only on our instructions, under a contract that meets Art. 28 GDPR. Business customers get the named list of our sub-processors on request, as our Data Processing Agreement explains.
| Provider | What it does for us | Data it receives | Location |
|---|---|---|---|
| PayPro Global | Sells Lamp plans as merchant of record and takes payment. It acts as an independent controller under its own privacy policy. | Account e-mail, plan, order and payment details | Canada |
| AI gateway | Passes each AI request to a company that hosts the model | Research content sent for each AI task | United States |
| Hosts of the AI models | Run the AI models that generate answers and reports. The AI gateway chooses the host for each request (section 5). | Research content sent for each AI task | Depends on the host |
| Web search service | Searches the web when Lamp looks for patents similar to your invention | English search words that the AI model derives from your brief | United States |
| Search-ranking service | Sorts search results by how well they match your question | Your question and the description of your invention | Canada |
| Patent office data service | Provides patent data | The search queries Lamp sends for your research | Germany |
| Commercial patent data provider | Provides patent data | The patent numbers Lamp looks up for your research | Singapore |
| Content delivery and security provider | Delivers our sites and protects them from attacks. Every request to Lamp passes through it. It also sends Lamp’s e-mails and stores the daily backups of Lamp’s database. | Server logs, traffic to our sites, the e-mails Lamp sends you, the backups of Lamp’s database | United States |
| Hosting provider | Runs Lamp’s servers and database | All Lamp data | Germany |
| E-mail provider | Receives the e-mails you send to our address | Support messages | Australia |
We also disclose data to authorities and courts when the law requires it, and to our professional advisers, such as lawyers and accountants, when we need their help with a legal matter.
Transfers outside the EU#
Some providers in section 6 are based, or process data, outside the European Economic Area. We transfer personal data there only with one of these safeguards:
- a decision of the European Commission that the country protects personal data adequately (Art. 45 GDPR); for companies in the United States, this covers those certified under the EU–US Data Privacy Framework;
- the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR), together with an assessment of the destination country’s law and extra measures where needed.
The last column of the table in section 6 shows where each provider is. For every provider outside the European Economic Area, one of these two safeguards applies. You can ask for a copy of the safeguards at the privacy address in section 1.
How long we keep your data#
We keep personal data only as long as we need it for the purposes in section 4, then delete or anonymise it. Where the law requires us to keep records longer, we keep them only for that purpose and no longer than required.
| Data | How long we keep it |
|---|---|
| Account data | While your account is open. When you delete your account, we delete it 30 days later. If you log in again within those 30 days, the deletion is cancelled. |
| Waitlist | Until we open your Lamp account, or until you ask us to remove you from the waitlist |
| Sign-in session | The session cookie expires after 24 hours. The sign-in token in it is valid for 6 hours, and Lamp renews it while you use Lamp. The server keeps no session records. |
| Research content | While your account is open. When you delete your account, we delete it 30 days later. |
| Backups of Lamp’s database | Up to 3 months. Data deleted from Lamp stays in the backups until the last copy that holds it is replaced. |
| Usage and credits | The same as account data. After your account is deleted, we keep your credit history as a financial record, without any link to you. |
| Business and tax records | As long as tax law requires |
| Support messages | As long as we need them to answer you and to keep a record of the conversation |
| Server logs | Lamp: 7 days. matgen.ai and Spark: we keep no server logs. |
| AI request traces | 30 days |
| Spark searches | Not stored |
| Closed cookie notice | 12 months, in your browser |
Cookies#
Our sites set only cookies that are strictly necessary for a service you asked for. The law does not require your consent for these, but we list them so you know what they do. We use no analytics cookies and no advertising cookies.
| Name | Site | Purpose | Lifetime |
|---|---|---|---|
lamp_session | Lamp | Keeps you signed in. Marked HttpOnly, so scripts on the page cannot read it. | 24 hours |
lamp_cookie_notice | Lamp | Remembers that you closed the cookie notice | 12 months |
mg_cookie_notice | matgen.ai, Spark | Remembers that you closed the cookie notice | 12 months |
The Cookie Policy has more detail.
Your rights#
The GDPR gives you these rights. Using them is free.
- AccessArt. 15
- Ask whether we process your personal data, and get a copy of it together with the information in this policy.
- CorrectionArt. 16
- Have wrong data corrected and incomplete data completed.
- DeletionArt. 17
- Have your data deleted, for example when we no longer need it or you withdraw your consent. We keep what the law requires us to keep. If you have a Lamp account, you can delete it yourself: in your profile, open Privacy & data and choose Delete account.
- RestrictionArt. 18
- Ask us to keep your data but stop using it, for example while we check a correction you asked for.
- ExportArt. 20
- Receive the data you gave us, where we process it by contract or with your consent, in a structured, machine-readable format, or have it sent to another provider where that is technically possible. If you have a Lamp account, you can download your data yourself as a JSON file: in your profile, open Privacy & data and choose Export data. You can do this once per hour.
- Withdraw consentArt. 7(3)
- Where we rely on your consent, withdraw it at any time. This does not affect what we did before you withdrew it.
- ComplainArt. 77
- Complain to a data protection supervisory authority, in particular in the EU country where you live or work, or where you think the infringement happened.
Your right to object (Art. 21 GDPR)
Where we use your data on the basis of our legitimate interests (Art. 6(1)(f)), you can object at any time, on grounds relating to your particular situation. We then stop, unless we have compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.
If we ever use your data for direct marketing, you can object at any time, without giving reasons, and we will stop.
How to use your rights
Write to our e-mail address. If you have a Lamp account, write from the address on the account, or tell us which address it is, so we can confirm the request comes from you. We answer within one month. If a request is complex, or we receive many, we can extend this by two further months; if we do, we tell you within the first month and explain why.
What you have to provide#
You do not have to give us any personal data to read matgen.ai or to search Spark. Your browser sends the technical data in our server logs automatically; no website can be delivered without it.
To open a Lamp account we need a username, your e-mail address and a password. To buy a plan, PayPro Global needs your payment details. No law obliges you to give us this data, but without it we cannot enter into a contract with you or provide Lamp.
How we protect your data#
We protect personal data with technical and organisational measures suited to the risk (Art. 32 GDPR). Among them:
- we store passwords only as hashes, never in readable form;
- the session cookie is HttpOnly, so scripts on a page cannot read it;
- connections to our sites, Lamp included, are encrypted with HTTPS;
- only MatGen staff with the admin role can open Lamp’s admin panel, and Lamp records the admin actions that change or delete data.
If a personal data breach is likely to result in a high risk to you, we tell you without undue delay (Art. 34 GDPR).
Children#
Our services are made for professional research and are not directed at children. You must be at least 18 years old to open a Lamp account. If you believe a child has given us personal data, write to us and we will delete it.
Changes to this policy#
We update this policy when our services or the law change. The date and version at the top of this page show which version you are reading. If a change affects how we use your data in a significant way, we tell Lamp account holders by e-mail 30 days before it takes effect. Earlier versions are listed at the end of this page.
Contact#
- Privacy requests
- our e-mail address
- By post
- Individual Entrepreneur MIKHAIL KOZIN, Rezo Gabashvili Street N 1, Block B, Floor 8, Apt. N196, Gldani District, 0167 Tbilisi, Georgia
- Help with Lamp
- our e-mail address