Privacy Policy

We at Mystilink ("Mystilink," "we," or "us") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and process personal data when you use Mystilink's desktop application, website, APIs, and related services (the "Service").

Introduction

This Privacy Policy applies when Mystilink acts as the controller of your personal data. If you use Mystilink through an organization that manages your account, your organization's agreement may govern how certain data is processed.

1. Personal data we collect

We collect the following categories of personal data:

A. Data you provide directly

• Account information, such as your name and email address when you register or sign in.
• Payment information, processed by our payment provider when you purchase a paid plan or top up a Newton LLM prepaid balance.
• Inputs and Outputs, including prompts, profile information, and AI-generated responses you submit or receive through the Service. When you use Newton LLM, prompts, context, tool-related payloads, and model responses are transmitted through our cloud gateway to perform inference (see "Newton LLM data processing" below).
• Communication information, such as messages you send to support.
• Feedback, including ratings or reports you submit about the Service.

B. Data collected automatically

• Device and browser information, including operating system, app version, and language settings.
• Log information, such as IP address, timestamps, error logs, security events, and request metadata when accessing the Newton Chat Gateway and related APIs (for example, time, model identifier, usage, and error codes).
• Usage data, including feature usage, session activity, interactions with the Service, and Newton wallet and usage records.
• Cookies and similar technologies, used to maintain sessions, remember preferences, and improve performance.

C. Data we do not knowingly collect

We do not knowingly collect sensitive category data such as health records for clinical purposes, biometric identifiers for unique identification, or information from children under 18. If we learn that a user is under 18, we will take steps to delete the account and associated data where appropriate.

2. How we use personal data

We use personal data to:

• Provide, maintain, and secure the Service (including Newton LLM inference routing and metering).
• Create and manage accounts, licenses, billing, and Newton prepaid balances.
• Deliver AI-generated Outputs and improve product quality, safety, and reliability.
• Communicate with you about the Service, including support and important updates.
• Detect fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.

We do not use your Inputs or Outputs to train third-party models unless you have explicitly opted in where such a feature is offered.

We may aggregate or de-identify data so it no longer identifies you, and use that information for analytics, research, and service improvement.

3. How we share personal data

We may disclose personal data to:

• Service providers that help us operate the Service, such as hosting, email, analytics, payment, and AI infrastructure providers. For Newton LLM, content is transmitted to upstream model / AI infrastructure providers we select in order to perform inference, subject to their policies and our arrangements with them.
• Affiliates under common control with Mystilink, consistent with this Privacy Policy.
• Business transferees in connection with a merger, acquisition, or asset sale.
• Authorities or other parties when required by law or necessary to protect rights, safety, and security.
• Third-party integrations you choose to connect, subject to their own policies (for example, model vendors you select on the BYOK path).

We do not sell personal data for cross-context behavioral advertising.

4. Newton LLM data processing

This section describes additional data flows when you select a Newton LLM model to run inference. If you only use BYOK (bring-your-own vendor API key) and do not send Newton inference requests, the description below about Mystilink gatewaying conversation content does not apply.

4.1 BYOK vs Newton

	BYOK (bring your own key)	Newton LLM
Inference path	From your device directly to the third-party vendor you choose	Through the Mystilink Chat Gateway to upstream providers we select
Does Mystilink proxy inference content?	No	Yes
Third-party keys	Stored on your local device; we do not collect them	Not applicable (we manage upstream credentials)
Local session files	Still stored in your on-device workspace (e.g. .mystilink/)	Same; content sent via Newton also passes through Mystilink cloud

4.2 Additional data we process

• Prompts, context, tool-related payloads, and model responses transmitted to perform inference.
• Account identifiers and authentication-related information.
• Request metadata, such as timestamps, model identifiers (slugs), tokens / usage, error codes, and request IDs.
• Billing and wallet ledger entries (top-ups, debits, balance changes).

In the current product implementation, we primarily retain usage and billing records for metering, reconciliation, abuse prevention, and security; we do not routinely store full prompt / completion text as long-term usage logs. Content in transit still reaches upstream providers to complete inference.

4.3 Purposes of processing

To provide hosted inference, charge and reconcile usage, prevent abuse and secure the Service, support troubleshooting within a reasonable scope, and meet legal obligations.

4.4 Training

Unless you have explicitly opted in where such a feature is offered, we do not use Inputs or Outputs on the Newton path to train third-party models. We may use aggregated or de-identified data to improve Mystilink service quality and reliability, as described in Section 2.

4.5 Retention and deletion

Usage events, wallet ledgers, and billing-related records may be retained longer than how session files are kept locally, for reconciliation, fraud prevention, and legal compliance. Full conversation files are stored by you on your local device. When you delete your account or request deletion, we will handle cloud account, wallet, and usage records in accordance with applicable law and this Policy (except where retention is legally required).

4.6 Local vs cloud

Metaphysics profiles, charts, and conversation session files typically remain in your local workspace. When you choose Newton LLM, content sent to complete that inference passes through Mystilink's cloud gateway and may reach upstream providers. This is consistent with "session files are not uploaded as a bulk sync": a local copy may remain on device, while the Newton request itself is processed in the cloud.

5. Retention

We retain personal data only as long as necessary to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type, sensitivity, and legal requirements. Newton usage and billing records are typically retained as needed for operations and compliance; see Section 4.

6. Security

We use commercially reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, or to object to certain processing. You may also withdraw consent where processing is consent-based.

To exercise these rights, contact support@mystilink.com. We may need to verify your identity before responding.

8. International transfers

Your personal data may be processed in countries other than where you live (including when Newton LLM transmits data to upstream infrastructure). Where required, we use appropriate safeguards for cross-border transfers.

9. Privacy policy changes

We may update this Privacy Policy from time to time. When we do, we will revise the date above and post the updated policy on this page. Continued use after an update constitutes acceptance unless applicable law requires additional notice.

10. Contacting us

If you have questions about this Privacy Policy, contact us at support@mystilink.com.