Global Privacy Policy
Last Updated: December 2024
This Privacy Policy applies globally to all users of MistrAI Services. We are committed to protecting your privacy and handling your data with transparency, security, and respect.
1. Data Protection Commitment
MistrAI follows enterprise-grade privacy-by-design principles, ensuring that data protection is built into every aspect of our Services. Our commitment includes:
Data Minimization
We collect only the data necessary to provide and improve our Services.
PII/PIA Masking
Personal identifiable information is masked and protected using industry standards.
Data Anonymization
We use pseudonymization techniques to protect user identity.
Access Controls
Role-based access ensures data is only accessible to authorized personnel.
✓ We do not sell, rent, or trade personal data to third parties.
2. Information We Collect
We may collect the following types of information when you use our Services:
Personal Identifiers
Limited information such as name, email address, and organization name when voluntarily provided.
Voluntarily Submitted Information
Content, ideas, feedback, or other materials you choose to submit through our platforms.
Technical Metadata
IP addresses, browser types, device information, usage logs, and analytics necessary for security and service optimization.
3. Purpose of Data Processing
We process your data solely for legitimate business purposes, including:
Service Delivery
Providing, maintaining, and securing our AI products and platforms.
User Support
Responding to inquiries, submissions, and support requests.
Product Improvement
Analyzing usage patterns to enhance performance and user experience.
Legal Compliance
Meeting regulatory requirements and legal obligations.
4. Data Security
We employ reasonable administrative, technical, and organizational safeguards to protect data against unauthorized access, alteration, disclosure, or destruction.
Note: No system is entirely immune to risk. While we implement robust security measures, we cannot guarantee absolute security. Users should also take precautions to protect their accounts and data.
5. Third-Party Data Processing
Third-party service providers may process limited data solely to support service functionality, such as:
- Cloud infrastructure providers for hosting and storage
- Analytics platforms for usage insights and optimization
- Communication services for customer support
- Payment processors for billing (if applicable)
All third-party processors are bound by contractual confidentiality obligations and are required to comply with applicable data protection regulations.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.
7. Global User Rights
Subject to applicable law, users may have the following rights regarding their personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Request correction of inaccurate or incomplete personal data.
Right to Deletion
Request deletion of your personal data, subject to legal and contractual obligations.
Right to Object
Object to processing of your data for specific purposes.
Right to Data Portability
Request transfer of your data to another service provider where technically feasible.
8. Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and improve our Services. Users can control cookie preferences through their browser settings.
Types of cookies we may use include: essential cookies (required for service functionality), analytics cookies (for usage insights), and preference cookies (to remember user settings).
9. International Data Transfers
As a global service provider, your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
10. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify users of material changes by posting the updated policy on our website with a revised Last Updated date.
Contact Us
For privacy-related inquiries, questions about your data rights, or concerns about how your information is handled, please contact us through the appropriate channels provided on our website.
We are committed to addressing your privacy concerns promptly and transparently.