Privacy Policy

Account Information

When you register for an account, we collect your email address, name, and authentication credentials. We support email/password and Google OAuth sign-in methods.

Connected Service Data

With your explicit consent, we access data from third-party services you connect, such as:

• Gmail / Outlook: Email metadata (sender, subject, timestamp), message snippets, and priority flags for briefing generation.
• Google Calendar / Outlook Calendar: Event titles, times, locations, and attendee information to build your daily brief.
• Task & Project Tools: Task names, due dates, and status from connected integrations.
• E-commerce Platforms: Order counts and fulfillment status from Shopify or ShipStation.

Voice & Preference Data

We store your voice preference settings, persona choices, briefing schedule, and any custom instructions you provide to personalize your experience.

Usage & Analytics

We collect anonymized usage data such as feature interactions, briefing playback counts, and error logs to improve our service. This data is aggregated and does not identify you personally.

We use the information we collect to:

• Generate your personalized daily briefings by analyzing your calendar, email, tasks, and orders.
• Deliver your briefings via email, SMS, web dashboard, or Telegram based on your preferences.
• Improve our AI models and summarization quality using anonymized interaction patterns.
• Maintain and secure your account, including authentication and fraud prevention.
• Communicate with you about service updates, security alerts, or billing matters.
• Comply with legal obligations and enforce our terms of service.

All data is stored in encrypted databases hosted in secure cloud infrastructure. We implement industry-standard security measures including:

• Encryption at rest: All stored data is encrypted using AES-256.
• Encryption in transit: All data transmitted between your device and our servers uses TLS 1.3.
• Access controls: Strict role-based access limits who can view user data internally.
• Regular audits: We conduct security assessments and are working toward SOC 2 Type II compliance.

We do not store the full content of your emails. We only retain metadata and generated summaries necessary to produce your briefings.

When you connect third-party services (Google, Microsoft, Shopify, ShipStation, etc.), we access your data through official APIs using OAuth 2.0. You can revoke access at any time:

• From your M3gan.ai Integrations page, click "Disconnect" on any connected service.
• From your Google or Microsoft account security settings, revoke M3gan.ai access directly.

We only request the minimum permissions necessary (read-only access where possible) and never modify or delete your data in connected services without explicit instruction.

We do not sell your personal data. We only share information in the following limited circumstances:

• Service Providers: We use trusted vendors for hosting, email delivery, SMS delivery, and analytics. All vendors are bound by strict confidentiality and data processing agreements.
• Legal Requirements: We may disclose information if required by law, subpoena, or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data would be transferred subject to the same privacy commitments.

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information via your account settings.
• Deletion: Request complete deletion of your account and all associated data.
• Portability: Export your data in a structured, machine-readable format.
• Opt-out: Unsubscribe from briefing emails or SMS notifications at any time.

To exercise any of these rights, contact us at privacy@m3gan.ai. We will respond within 30 days.

We retain your data only as long as necessary to provide the service or comply with legal obligations:

• Active accounts: Data is retained while your account is active.
• Deleted accounts: Upon account deletion, all personal data is permanently removed within 30 days, except where legally required to retain it.
• Backups: Encrypted backups may retain data for up to 90 days after deletion before being purged.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@m3gan.ai

Address: M3gan.ai Inc., Attn: Privacy Team