#Security

This page summarises how we handle data across our own products and client engagements. It is a description, not a certification — we are glad to answer a security questionnaire as part of procurement.

#Data we handle

• Our products. Quick Health stores everything on your device and has no servers, accounts or analytics. The WordPress AI provider plugins store the API key on your own site and send prompts only to the AI host you configure. Each product's privacy policy lists the exact endpoints.
• Client engagements. We work on systems you already host wherever possible, and we ask for access only to what a specific task requires.

#Access

• Access to client systems is granted per person, scoped to the work, and uses your own accounts and SSO where available.
• Credentials are handed over or rotated when an engagement ends. We do not keep standing access afterwards.

#Infrastructure

• Our own services run on mainstream cloud infrastructure with HTTPS enforced, databases kept off the public internet, and scheduled configuration and database backups.
• This website sets no advertising, analytics or cross-site tracking cookies. The Cookie Statement lists the two local-storage keys it does use.

#Reporting a vulnerability

Email hi@thematrixcrop.com with enough detail to reproduce the issue. We acknowledge receipt within one business day.

See also: Privacy Policy · Company Information.