Privacy Policy

This Privacy Policy explains how Megmos LLC, trading as Megmos Creative Co. ("we", "us", or "our"), collects and uses personal data when you visit megmos.com or use MABS (Megmos AI Brand Studio) at mabs.megmos.com (together, the "Service").

1. Who is responsible

We are the data controller for the personal data described here. Contact: privacy@megmos.com · Megmos LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

For content you create about your own clients (for example a client follow-up email), you decide what to enter and how to use the result. We process that information only to provide the Service to you.

2. What we collect

• Account data: your name, email address and password. Passwords are stored by our authentication provider in hashed form, never in plain text.
• Brand Context: the business details you choose to add, such as your brand or agent name, brokerage, phone, email, website, office address, service areas, brand voice, social media links, brand colours and a link to your logo.
• Projects and inputs: property details and other information you type into generator forms, including any source content you paste.
• Generated content: the text MABS produces for you, and the edits and saved versions you keep in your Content Library.
• Usage records: which generators you run, when, and whether a generation succeeded. We use these to apply your plan's monthly limit and to fix errors.
• Preferences: your language, cookie and marketing-email choices.
• Technical data: IP address, browser type and request logs, collected by our hosting provider to deliver and secure the Service.
• Messages to us: what you send when you email us.

We do not collect payment card details today. When paid plans launch, payments will be handled by our payment processor, and this policy will be updated before then.

3. How we use it, and our legal bases

4. How AI generation works

When you click Generate, we send the generator's instructions, together with the relevant inputs, project facts and Brand Context, to Anthropic, the provider of the Claude AI models. Anthropic processes this information to return the generated content and help us provide the Service.

Under Anthropic's published policy for commercial API customers, inputs and outputs are not used to train its models by default, unless the customer explicitly permits such use. Anthropic's standard API retention policy generally provides for deletion of inputs and outputs within 30 days, subject to exceptions and any different contractual arrangements.

We do not use your content to train AI models. We do not sell your personal data or share it for cross-context behavioural advertising.

5. Who we share it with

We share personal data only with service providers that process it on our instructions:

• Supabase: database and sign-in, including account emails such as confirmations and password resets.
• Anthropic: AI content generation.
• Vercel: hosting of megmos.com and the MABS app.
• Google Fonts: delivers the fonts on megmos.com and receives your IP address when the page loads.
• Stripe: payment processing, only once paid plans launch.

We may also disclose data if the law requires it, to protect our rights or users' safety, or as part of a sale or reorganisation of our business. In that case we will tell you before your data falls under a different privacy policy.

6. International transfers

We are based in the United States, and our providers may process data in the United States and other countries. Where EU/UK law applies, we rely on adequacy decisions (such as the EU–US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Account data, Brand Context, projects and saved content: kept while your account remains open. After account deletion, we delete this data within 30 days, except where retention is legally required or otherwise permitted by applicable law.
• Backups: backup copies containing deleted data are removed through the backup-retention cycle within a further 30 days, subject to technical limitations and legal requirements.
• Usage records: kept for up to 24 months for usage-limit administration, security, abuse prevention and troubleshooting.
• Hosting logs: kept according to our hosting provider's retention settings, generally for days to weeks.
• Support messages: kept for up to 24 months after the conversation ends, unless the law requires or justifies a different period.

Our service providers may keep information under their own contractual terms and retention policies.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict some processing, and withdraw consent at any time. Residents of California and other US states with privacy laws have similar rights to know, delete and correct their data, and we will not treat you differently for using them.

To use these rights, email privacy@megmos.com. You can also send an export or deletion request from Settings → Privacy in MABS. These requests are handled manually for now. We reply within one month, or within the deadline your law sets. In the EU or UK you can also complain to your local data protection authority.

9. Security

We use encrypted connections (HTTPS), access controls and providers with recognised security programmes. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

10. Children

MABS is a professional tool for adults. It is not intended for anyone under 18, and we do not knowingly collect children's data.

11. Changes

We will post any update here with a new date. If a change is significant, we will also notify signed-in users before it takes effect.