Who can receive data when you use New Matrix Capital LLC

Infrastructure

• VercelConnected today

  Hosts and serves the application.

  Receives: every request you make to the site while it is in flight, your IP address and browser headers, and the server logs those requests produce. Application data is not stored there; it is read from the database and returned to you.

  Only when: None. This is the runtime the application executes in.

• Neon PostgresConnected today

  Runs the primary Postgres database.

  Receives: your account, business profile, consents, applications, offers, parsed bank figures, notifications and audit records. The most sensitive fields are additionally encrypted by us before they are written, so Neon holds ciphertext for those.

  Only when: None. This is where the application stores everything.

• Supabase StorageConnected today

  Stores the files you upload.

  Receives: the documents you upload: bank statements, tax returns, voided checks, driver licenses, articles of incorporation, and anything attached to an application. Held in a private bucket with server-side encryption at rest and reachable only through short-lived signed links.

  Only when: You upload a file.

• UpstashConnected today

  Holds the rate-limit counters that slow down brute-force and abuse.

  Receives: a rate-limit key only: the name of the action being limited plus either your user id or your IP address, and a count. No content, no documents, no financial data.

  Only when: You call an endpoint that is rate-limited, such as sign-in.

• CloudflareConnected today

  Runs the Turnstile challenge that keeps bots out of signup, sign-in and password reset.

  Receives: the challenge token your browser produces and the IP address the request came from. Not your email, your password, or anything you typed into the form.

  Only when: You load or submit signup, sign-in, or password reset.

Other infrastructure providers listed in our registry are not connected today and receive nothing: Amazon Web Services (GuardDuty Malware Protection).

Financial data

• StripeConnected today

  Processes billing, invoices and partner payment methods.

  Receives: your name, email and billing details, and the amount being billed. Card and bank numbers are entered into Stripe directly and stored on Stripe infrastructure; we never hold a full card number.

  Only when: You are billed, or you put a payment method on file.

Other financial data providers listed in our registry are not connected today and receive nothing: Plaid, Amazon Web Services (Textract), Experian, Dun & Bradstreet and Equifax, The UCC filing search provider.

Identity and verification

Other identity and verification providers listed in our registry are not connected today and receive nothing: Middesk, Google, Documenso, The identity and liveness verification provider, The background screening vendor, The phone line-type lookup provider.

Communication

• ResendConnected today

  Delivers email.

  Receives: your email address, the subject, and the message we send you.

  Only when: We send you an email.

• Google WorkspaceConnected today

  Hosts info@newmatrix.capital and staff mailboxes.

  Receives: anything you email us, including attachments; the copy of a form the platform sends to that mailbox when you sign up, apply for funding, request a consultation, write through the contact form, open a support ticket, or apply as a funding partner or for a job (your name, email, phone number, business name, state and industry, the last four digits of an EIN, the revenue, time in business and amount you reported, and anything you wrote); the notice our team receives when your file is handed to an advisor or a funding partner asks for a verification call; and the replies our staff send you from those mailboxes.

  Only when: You email us, sign up, apply, or submit a consultation, contact, support, partner or job form; your file is handed to an advisor or a funding partner asks for a verification call; or a New Matrix staff member emails you.

Other communication providers listed in our registry are not connected today and receive nothing: Twilio, Novu, Crisp, Telegram, The company mailbox provider.

Assistant and inference

• GroqConnected today

  Serves the New Matrix AI assistant, and reads a financing agreement you ask New Matrix AI to analyze.

  Receives: the text you type and the business context record, after the redaction step described below (Social Security numbers, EINs, phone numbers, routing numbers and account numbers are replaced with a marker before the request leaves); and, when you ask for a contract to be analyzed, the text of that document as our servers read it, and nothing else - not its filename and none of your account context.

  Only when: You use New Matrix AI, ask for a contract to be analyzed, or open a support ticket.

Other assistant and inference providers listed in our registry are not connected today and receive nothing: Anthropic, A self-hosted inference endpoint New Matrix operates, Langfuse, The speech synthesis provider.

Operations

• SentryConnected today

  Reports application errors so they get fixed.

  Receives: the error, the page it happened on, and your user id. Everything else is scrubbed before it is sent: emails, phone numbers, Social Security numbers, EINs, names, addresses and any field whose name looks like a credential are replaced with a placeholder.

  Only when: An error occurs while you are using the site.

• PostHogConnected today

  Product analytics and session replay.

  Receives: which pages you viewed and which features you used, attributed to your user id with your email, name and role, plus session replays with every input field masked so what you type is never captured.

  Only when: You accept non-essential cookies. It does not load on essential-only.

• InngestConnected today

  Runs scheduled and background jobs.

  Receives: the identifiers a job needs to do its work, such as a document id. Not the document.

  Only when: A background job is queued, and only where the job service is configured.

Other operations providers listed in our registry are not connected today and receive nothing: The prospecting data source.