Privacy Notice

Last updated 29 July 2026

MushirAI, the provider of MushirAI, is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with, and the rights you have.

What we collect

  • Account data — name or display name, email address, and login credentials (or the identifier from your sign-in provider).
  • Business content — the ideas, messages, project details and canvas content you enter, and the deliverables generated for you.
  • Usage data — credit and feature usage, AI model usage records, log and device data, and approximate country derived from your IP address (used to localise advice).
  • Support messages — anything you send us when you ask for help.

Card details are never collected or stored by us — payments are handled entirely by our payment provider.

Why we use it

  • To create and operate your account and projects (performance of our contract).
  • To generate advice and deliverables by sending your prompts and project context to AI model providers (performance of our contract).
  • To localise guidance to your country and language (legitimate interests).
  • To keep the service secure, prevent fraud and abuse, and enforce usage limits (legitimate interests).
  • To improve the product and provide customer support (legitimate interests).
  • To send marketing messages only where you have consented, with an unsubscribe link in every email (consent).
  • To meet legal, accounting and tax obligations (legal obligation).

Who we share it with

  • Hosting and database providers that run the application infrastructure.
  • AI model providers that process your prompts to generate responses and deliverables.
  • Our Merchant of Record, Paddle, for the sale of our products, subscription management, payments, invoicing and tax compliance.
  • Professional advisers such as legal and accounting firms, where necessary.
  • Authorities where we are required to do so by law.

We do not sell your personal data.

International transfers

MushirAI serves founders worldwide, so our providers may process data in countries other than yours. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or an adequacy decision.

How long we keep it

We keep your account and project data for as long as your account is active. If you delete your account, we delete or anonymise your data within a reasonable period, except where we must keep records (for example invoices) to meet legal obligations.

Security

We apply appropriate technical and organisational measures — encryption in transit, access controls, and row-level database rules so your projects, chats and documents are only readable by your own account.

Cookies

We use cookies and similar browser storage that are essential to run the service — mainly to keep you signed in and to process payments securely. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will then not work.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to certain processing, and to withdraw consent at any time. If you are in the UK or EEA you also have the right to complain to your local supervisory authority. We aim to respond to requests within one month.

To exercise any of these rights, email support@mushirai.com.