Privacy Policy
What Mediator stores about you and how you can get rid of it.
What we store
- Login identity — email, name, avatar, OAuth token — from Google or Facebook, plus any optional profile fields you shared (birthday, gender, phone, address).
- Your messages (both directions) to give the AI conversation context. Stored encrypted at rest when the platform allows.
- Your AI-provider API key, encrypted with a server-side Fernet key.
- The list of Composio actions each contact's AI is allowed to use. Composio holds the OAuth credentials for the connected integrations, not us.
What we don't do
- We do not sell your data.
- We do not use your messages to train models. The AI you configured (Anthropic, OpenAI, z.ai, etc.) is the only external recipient — see their own privacy policy for what they do.
- We do not set analytics or advertising cookies. When you decline cookies, no session cookie is set until you actively sign in.
Your rights
Under GDPR / equivalent laws you can:
- Download all your data at any time — see the button on the Delete my data page.
- Delete your account and all associated data any time — hard delete, immediate.
- Correct any field on your profile page.
Contact
Data-protection questions or requests: use the Delete my data page's request form, even if you don't want to delete — it reaches the operator.