Mutiro Labs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Mutiro messaging platform and related services (collectively, the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: When you create an account, we collect your email address, username, and any profile information you choose to provide.
• Messages and Content: We store messages you send through Mutiro to enable delivery to recipients and maintain conversation history.
• Voice Messages (Mobile App): When you use our mobile app's voice messaging feature, we access your device's microphone only when you explicitly press and hold the record button. Voice recordings are converted to audio files and sent to your intended recipients. We do not record audio in the background or without your explicit action.
• Agent Configurations: Agent configurations, personas, and API keys are managed entirely by you. We provide the platform but do not control, validate, or take responsibility for agent configurations you create.
• Feedback and Support: Information you provide when you contact us for support or provide feedback.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including features used, actions taken, and timestamps.
• Device Information: We may collect information about your device, including IP address, browser type, operating system, and device identifiers.
• Log Data: Our servers automatically record information ("Log Data") when you use the Service, including IP address, browser type, referring/exit pages, and timestamps.

1.3 What We DON'T Collect

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Mutiro platform and its features.
• Message Routing: To deliver messages between users and agents (note: AI service connections happen directly from your agents, not through our servers).
• Account Management: To manage your account, authenticate users, and provide customer support.
• Communications: To send you service-related emails, updates about new features, and respond to your inquiries.
• Security: To detect, prevent, and address technical issues, fraud, and abuse.
• Analytics: To understand how users interact with our Service and improve user experience.
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service.

3. Data Security and Message Privacy

3.1 Message Encryption and Storage

• Encryption at Rest: All messages are encrypted at rest in our databases using industry-standard encryption protocols.
• Encryption in Transit: All data transmissions are encrypted using TLS/SSL protocols.
• API Key Security: Third-party API keys are encrypted at rest and never exposed in logs or error messages.

3.2 Our Commitment to Message Privacy

3.3 Limited Access Principle

We access message data only in the following limited circumstances:

• Service Delivery: To route messages between you and your intended recipients (users or AI agents)
• Technical Support: When you explicitly request help with a specific message or conversation
• Security & Safety: To investigate suspected violations of our Terms of Service or illegal activities
• Legal Compliance: When required by law or valid legal process

3.4 Additional Security Measures

• Access Controls: Strict internal access controls limit employee access to encrypted data
• Audit Logging: All access to user data is logged and regularly audited
• Regular Security Reviews: We continuously review and improve our security practices
• Secure Infrastructure: Hosted on secure cloud infrastructure with appropriate safeguards

While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

4. Agent Owner Visibility

4.1 Why Agent Owners Have Access

Agent owner visibility serves important purposes:

• Quality Control: Owners can monitor how their agents perform and make improvements
• User Support: Owners can identify when users need additional help or clarification
• Service Improvement: Conversation data helps owners refine agent behavior and responses
• Accountability: Owners are responsible for their agents and need visibility to fulfill this responsibility

4.2 Your Privacy Considerations

Before sharing sensitive information with an agent, consider:

• Do you trust the agent owner with this information?
• Is the information appropriate to share in this context?
• Could you share this information differently to maintain privacy?

If you have privacy concerns about specific conversations, you can contact the agent owner directly or reach out to us for assistance.

5. Third-Party Services

5.1 AI Service Providers - Agent Owner Chooses the Provider

Supported AI providers currently include:

• Anthropic (Claude) — Privacy Policy
• OpenAI — Privacy Policy
• Google (Gemini) — Privacy Policy
• Locally-hosted models via Ollama, LM Studio, or similar runtimes — in this case message content is not transmitted to any third-party AI provider; it is processed on hardware controlled by the agent's owner.

When an agent uses a hosted AI provider:

• The API connection is initiated from the agent owner's infrastructure, not from Mutiro's servers.
• Mutiro does not see, store, or process the raw API traffic between the agent and the AI provider.
• Use of that AI provider is governed by the provider's own privacy policy (linked above).
• The user's message content is necessarily shared with the provider to generate a response — this is the only way the AI chat feature can function, and is the third-party sharing disclosed in Section 3.2.

You can always see which agent you are talking to before sending a message. If you are uncomfortable with the provider an agent uses, you may choose not to interact with that agent.

5.2 Infrastructure Providers

We use trusted third-party services for hosting and infrastructure, including Google Cloud Platform. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

5.3 Analytics

We may use privacy-focused analytics tools to understand usage patterns. These tools are configured to respect user privacy and comply with data protection regulations.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request your data in a structured, commonly used, and machine-readable format.
• Restriction: Request that we restrict processing of your personal information in certain circumstances.
• Objection: Object to our processing of your personal information.

To exercise these rights, please contact us using the information provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

For significant changes, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).

9. Contact Us