Privacy & security
Your data, your privacy.
Clear, honest answers to the questions we hear most about data, tracking, security, and how Msty keeps control in your hands.
Do you have a Privacy Policy and a Terms of Service?
Yes! You can view our Privacy Policy and Terms of Service anytime.
Do you have a Data Processing Agreement (DPA)?
Yes, we do. Contact us and we'll share our Data Processing Agreement.
Do you track usage and collect data on your website properties?
Yes, we use One Dollar Stats to monitor website traffic. This gives us more control and transparency than larger analytics platforms. All data collected is aggregated and anonymized, and used only to understand marketing performance and improve the site experience. See our Privacy Policy for details. We do not use any analytics in the Msty products themselves.
What do you use to track usage in Msty Studio?
Nothing. Msty products do not send telemetry data of any kind. We don't track usage, identify users, or collect activity data — usage is a black box to us. We rely on our community in Discord to share feedback, request features, and report issues.
How do you manage customer accounts?
We use Lemon Squeezy and Stripe to handle customer accounts, subscriptions, and payments. They securely store your payment information and manage your subscription status — we do not store any payment details on our servers.
What about my data when using Msty products?
All your data, including chat history, models, settings, and prompts, stays on your device. Msty does not store or access your data. If you connect to a cloud-based LLM (like OpenAI, Claude, or Gemini) or a third-party tool, your data leaves your device. Those services are outside our control, so review their privacy policies before using them.
Isn't Msty Studio Web a web app — doesn't that mean my data is stored in the cloud?
Although Msty Studio Web runs in your browser, all your data is stored locally on your device in browser storage. Nothing is sent to a central Msty server, and clearing your browser's cache or storage deletes your Msty Studio Web data. If you use a cloud-based LLM or connect to third-party tools, though, those services may handle your data, so it's worth checking their privacy policies too.
Can I request for my data to be removed?
You can, but we don't retain it — everything stays local on your device, and you can delete it any time via your browser or filesystem. To remove customer account data (e.g. after unsubscribing), contact Lemon Squeezy or Stripe directly. We also recommend backing up your data regularly.
Are you HIPAA, SOC 2, ISO 27001, etc. compliant or certified?
We are not yet formally certified in standards like SOC 2 or ISO 27001. We are actively aligning with these frameworks and following industry best practices in security, development, and internal process. As a growing company, we're building the foundation to support future certifications as we scale.
How do you handle updates?
All updates are delivered securely and verified before being applied. We never include tracking or data collection mechanisms in our updates.
Do you use secured connections with online models?
Yes. All network communications, including with cloud-based models and third-party services, are encrypted using HTTPS/TLS.
Anything else we should know to maintain good data security?
Msty Studio supports integrations with external services — like online LLMs, web search, or third-party tools via MCP. These tools may process your data, so it's worth reviewing their privacy policies and terms to understand how your information is handled.
I have another question and don't see an answer — how can we contact you?
Reach out anytime at [email protected]. We're happy to help.
Still have a question about data or security?
Reach out and we'll answer with the facts we have today.
Talk to us