Privacy Policy

1. Introduction

MythOS Systems Inc. ("we," "our," or "Company") operates The Workspace ("Product," "Service," or "App") at mythospro.ai. This Privacy Policy describes how we collect, use, store, and disclose information when you use our Service. By using The Workspace, you agree to this policy. We comply with applicable data protection laws, including the GDPR (EU/EEA/UK) and the CCPA (California).

2. Information We Collect

We collect the following categories of information in connection with the Service:

• Business owner account information (name, email, password)
• OAuth tokens and connection data for Google, Meta (Facebook, Instagram, Threads), LinkedIn, and X (Twitter)
• Gmail email content and metadata
• Instagram DMs and comments
• Facebook Page messages and comments
• Threads messages and content
• LinkedIn messages and profile data
• Google Business Profile and reviews data
• Google Analytics data
• SMS conversations via Twilio (business owner and customer messages)
• Customer phone numbers and contact information
• Square booking and appointment data
• Square transaction and payment history
• Customer preferences and visit history
• Conversation logs and AI interaction history with Mylo
• Business settings and configuration data
• Mylo receptionist activity logs
• Customer segmentation data
• Google Reviews and responses
• Communication hub conversations, threads, and message metadata
• Audit logs of account and configuration actions
• Expense and revenue tracking data
• Todo and task data
• AI-generated insights and summaries
• Daily analytics and booking heatmap data
• Workflow and automation configuration (e.g. n8n-related settings)

3. Mobile App and Device Permissions

The Workspace mobile app asks for the following device permissions. Each is requested only at the point it is used, and the app works without any of them apart from the feature that needs it.

• Microphone: captures your voice only while a Mylo voice session or dictation is active. Audio is streamed to our speech provider to produce a reply and is not recorded for advertising or profiling.
• Speech recognition: converts what you say to Mylo into text. On iOS this may be processed by Apple's speech services.
• Photo library: only the images you explicitly pick as attachments are read. The app does not browse or index your library.
• Location (while in use): a single coarse-to-precise reading is taken at the moment you clock in or out, so your employer can confirm the shift started on site. Location is never collected in the background, and the app does not track your movement between those moments.
• Notifications: a push token identifying this installation, used to deliver messages about your team, schedule and customers. Deleting the app or signing out discards it.
• Local network: used only to discover a MythOS Smart Mirror on the same Wi-Fi so you can pair with it. No local network data leaves the device.

The app stores your sign-in credentials in the operating system's secure keystore (iOS Keychain / Android Keystore). It does not use advertising identifiers, and it contains no third-party analytics or advertising SDKs.

Reporting a reply. If you report a problem with something Mylo said, the reason and any note you write are stored against that reply, and a member of our team may read that conversation in order to understand what went wrong. Nothing is reviewed unless you report it. Assistant conversations are not read for any other purpose, and are never used to train a model.

4. How We Use Your Information

We use the information to provide, operate, and improve The Workspace; to sync and display communications across channels; to power the Mylo AI receptionist and insights; to process bookings and payments; to send transactional and product communications; to comply with law; and to protect our rights and users. We do not sell your personal information. We may use de-identified or aggregated data for analytics and product improvement.

5. Third-Party Services and Data Sharing

We use the following third-party services. Each has its own privacy policy governing their use of data:

• Google: Gmail, Google Analytics, Google Business Profile
• Meta: Facebook, Instagram, Threads
• LinkedIn: LinkedIn messaging and profile data
• Twilio: SMS
• Square: Payments and bookings
• Supabase: Database and authentication
• Anthropic (Claude API): AI processing
• OpenAI: Mylo messages, selected attachments, and relevant Workspace context for AI responses
• Deepgram, ElevenLabs, and LiveKit: speech recognition, synthesized speech, and live voice transport
• Apple or Google speech services: device dictation, depending on your device and speech service
• OpenClaw: Optional LLM agent (Mylo responses)
• n8n: Workflow automation and callbacks (when configured)
• X (Twitter): X API for DMs (when connected)

We share data only as necessary to provide the Service (e.g., with these providers) or as required by law. We require appropriate contracts where applicable (e.g. data processing agreements).

The Workspace mobile app asks for your permission before using Mylo AI or speech features. Depending on the feature, the providers above receive your messages, selected files, relevant business context, audio, transcripts, or text to read aloud. You can withdraw this permission under Settings > Data > Mylo AI data sharing. New Mylo requests and queued messages then wait until you allow sharing again. Other Workspace features remain available.

6. Data Retention and Security

Deleting your account.You can delete your account at any time from Settings in the mobile app, or from the page linked below. Deletion is scheduled rather than immediate: you are signed out of every device straight away, and the account and its personal data are permanently removed 30 days later. Signing in again before that date cancels the deletion. If you own a business account, deleting it also deletes that business and the records belonging to it, including your team's access. Records we are required to keep for legal, tax or accounting reasons are retained for the period the law requires.

We retain your data for as long as your account is active or as needed to provide the Service, comply with law, or resolve disputes. We implement technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to: access, correct, delete, or port your personal data; restrict or object to processing; withdraw consent; and lodge a complaint with a supervisory authority. California residents may have additional rights (e.g., know, delete, opt-out of “sale”; we do not sell personal information). To exercise these rights, contact us at support@mythospro.ai.

8. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards (e.g., standard contractual clauses or adequacy decisions) where required by applicable law.

9. Children

The Workspace is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us at support@mythospro.ai.

10. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

MythOS Systems Inc.
Product: The Workspace
Website: mythospro.ai
Contact: support@mythospro.ai