Global · USD

Privacy policy

Last updated 12 October 2026

This policy explains what personal data SoftwareMatch (softwarematch.io) collects, why, who we share it with and the choices you have. Apex Matrix Holdings LLC, a limited liability company registered in Wyoming, USA, runs the site and is responsible for your data (the “data controller”).

The short version

  • You can read the whole site, use every calculator and follow every link without giving us your name or email.
  • Calculators and the software finder run in your browser. What you type into them is not sent to us.
  • We use analytics cookies only if you click “Accept analytics”. You can change your mind at any time.
  • If you write to us through a form, we use your details only to reply or to handle your request.
  • We never sell your personal data.

What we collect and why

Contact form

  • What: Name, email address, topic, the page you mention and your message
  • When: You use the contact form
  • Why: To read and answer your message
  • Legal basis: Our legitimate interest in answering people who contact us, or steps you ask for before a contract

Vendor update form

  • What: Name, email address, product, the change you report and a link to your source
  • When: You use the vendor update form
  • Why: To check and publish corrections to a listing, and to contact you about them
  • Legal basis: Your consent (you tick a box on the form) and our legitimate interest in accurate listings

Analytics (only with your consent)

  • What: Pages viewed, how you arrived, approximate location (city or country), device and browser type, and a random identifier stored in a cookie
  • When: Only after you click “Accept analytics”
  • Why: To learn which pages are useful and fix what isn't
  • Legal basis: Your consent

Clicks on vendor links

  • What: Clicks on links to software vendors: the product, the page you clicked from, your country (from your IP address, which we do not store) and whether you use a phone or a computer
  • When: You click a “Visit” link
  • Why: To count which products and pages people use, and to check that partner links work
  • Legal basis: Our legitimate interest in running the site. We cannot link these counts to you.

Delivering the site and stopping spam

  • What: IP address
  • When: Every visit, and when you send a form
  • Why: To deliver pages, block spam and abuse, limit how often a form can be sent, and show prices in your currency
  • Legal basis: Our legitimate interest in keeping the site secure and working

We do not ask for, and ask you not to send us, sensitive information such as health, financial account or identity numbers.

Cookies and similar storage

  • Your cookie choice (sm_consent cookie and the same value in your browser's local storage): remembers whether you accepted or rejected analytics, for 180 days. Strictly necessary.
  • Your finder choices (browser local storage): remembers the category and country you last picked in the software finder. It stays on your device.
  • Google Analytics cookies (names starting with _ga): set only after you accept analytics. They hold a random identifier and expire after up to 2 years. Google Analytics 4 does not store IP addresses.
  • Spam check: our forms use Cloudflare Turnstile, which checks your browser to tell people from bots. It does not set cookies for tracking.

To change your choice, use “Cookie settings” at the bottom of any page, or clear this site's cookies in your browser.

When you follow a link to a software vendor, you leave our site. The vendor, and any affiliate network that tracks the referral, may set their own cookies under their own privacy policies. This is how we earn a commission; see our affiliate disclosure.

Who we share data with

We use these service providers to run the site. Each processes data only on our instructions and under data-protection terms:

  • Cloudflare: hosting, security, spam checks (Turnstile), click counts and backups.
  • Airtable: stores the messages and vendor updates you send through our forms.
  • Resend: delivers email notifications of new messages to our team, and our replies.
  • Google Analytics: website statistics, only if you accept analytics.

We may also share data if the law requires it, to protect our rights or the safety of others, or with a buyer if the site is sold (the buyer would be bound by this policy). Software vendors never receive your details from us.

Where your data is processed

We are based in the United States, and our providers process data in the United States and other countries. When the law of your country requires safeguards for data sent abroad, such as the GDPR or UK GDPR, we rely on the standard contractual clauses (and the UK addendum) in our providers' data-processing terms, or on another transfer mechanism the law allows.

How long we keep it

  • Contact messages and vendor updates: up to 24 months after our last exchange, then deleted.
  • Backups of these records: overwritten after 12 weeks.
  • Click counts: kept as totals, with no personal data.
  • Analytics data: 14 months in Google Analytics, then deleted automatically.

Your rights

Depending on where you live, you can ask us to tell you what personal data we hold about you and give you a copy; correct it; delete it; restrict or object to how we use it; or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time; this does not affect what we did before. We will not treat you differently for using these rights.

To make a request, use our contact form and choose “Privacy or my data”. We will reply within one month (or sooner where your law requires) and may ask you to confirm it is you, usually by replying from the email address you used with us.

You can also complain to the data-protection authority where you live. We serve visitors in many countries and follow the law that protects each of them, including:

  • Kenya: Data Protection Act, 2019
  • Nigeria: Nigeria Data Protection Act, 2023
  • South Africa: POPIA
  • Ghana: Data Protection Act, 2012
  • Philippines: Data Privacy Act, 2012
  • India: Digital Personal Data Protection Act, 2023
  • Malaysia: Personal Data Protection Act 2010
  • United Arab Emirates: PDPL (Federal Decree-Law 45 of 2021)
  • United Kingdom: UK GDPR and Data Protection Act 2018
  • Egypt: Personal Data Protection Law (Law No. 151 of 2020)
  • Uganda: Data Protection and Privacy Act, 2019
  • Tanzania: Personal Data Protection Act, 2022
  • Rwanda: Law No. 058/2021 relating to the protection of personal data and privacy
  • Indonesia: Personal Data Protection Law (Law No. 27 of 2022)
  • Vietnam: Law on Personal Data Protection (Law No. 91/2025/QH15), in force since 1 January 2026
  • Saudi Arabia: Personal Data Protection Law (PDPL), enforced by SDAIA
  • Australia: Privacy Act 1988 (Australian Privacy Principles)
  • Canada: PIPEDA (federal), plus provincial laws such as Quebec's Law 25
  • Mexico: Federal Law on the Protection of Personal Data Held by Private Parties (new law of 2025)
  • European Union: General Data Protection Regulation (GDPR)
  • United States: the consumer privacy laws of states such as California, where they apply

Children

SoftwareMatch is for businesses and adults. It is not meant for children, and we do not knowingly collect data from anyone under 16. If you think a child has sent us personal data, contact us and we will delete it.

Security

The site is served only over encrypted connections (HTTPS). Access to stored messages is limited to the people who answer them and protected with strong passwords and two-factor sign-in. No method is completely secure, but we work to protect your data and will tell you and the authorities about a breach when the law requires.

Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will show a notice on the site before it takes effect.

Contact

Questions about this policy or your data: use our contact form and choose “Privacy or my data”.