Trust and transparency
Privacy Policy
How Massvai collects, uses, shares, protects, and retains personal data across the service.
Effective date August 5, 2026
Scope and responsibility
This Policy applies to Massvai websites, accounts, workspaces, support, and billing. Massvai is responsible for personal data it determines how and why to process. When a customer puts personal data into a generated project, the customer may be the controller and must provide its own notices and instructions.
Data we collect
We collect account and profile data, authentication identifiers, billing status and transaction metadata, device and security logs, usage events, support messages, and preferences. Stripe processes payment-card details; Massvai does not store complete card numbers. We also receive data from integrations you connect and information you choose to send us.
Prompts, projects, and AI processing
Prompts, source code, attachments, tool results, and project metadata are processed to provide the workspace. Relevant content may be sent to the AI provider and infrastructure providers configured for the service. Do not submit secrets or sensitive personal data unless it is necessary and you are authorized to do so. Provider choices and retention controls may vary by plan and configuration.
How and why we use data
We use data to provide and secure the service, authenticate users, process billing, allocate credits, operate previews, respond to support, prevent fraud and abuse, improve reliability, and meet legal obligations. Depending on location, our legal bases include performing a contract, legitimate interests, consent, and compliance with law. We do not sell personal data or use it for cross-context behavioral advertising.
Sharing and processors
We share only what is necessary with hosting, storage, AI, authentication, analytics, communications, support, and payment providers; with administrators of an organization account; during a corporate transaction; or when law or safety requires it. Providers must protect data under contractual and confidentiality obligations. A current processor list is available from [email protected].
Retention and international transfers
We keep data only as long as needed for the service, security, disputes, and legal or accounting requirements. Retention differs by data type, and backups may remain for a limited recovery period. Data may be processed outside your country. Where required, we use recognized transfer safeguards such as standard contractual clauses.
Security and incident response
We use access controls, encryption in transit, restricted secret handling, logging, backups, and other technical and organizational safeguards appropriate to the risk. No system is completely secure. Report suspected vulnerabilities to [email protected]; we will investigate and notify affected people and authorities when required.
Your choices and rights
You can update account information and manage billing and connected services in Massvai. Depending on law, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent or complain to a regulator. Email [email protected]; we may verify your identity and normally respond within the legally required period. Massvai is not directed to children under 18. We will post material Policy changes with a new effective date.
Questions about this policy?
Our team can clarify how this policy applies to your account.