privacy
What we do with your data.
Last updated: 28 May 2026
Your data stays yours. We never train shared models on your corpus, never sell your data, never share it with advertisers. This notice explains the specifics.
What we collect
When you create an account: your email address, a chosen handle, your stated name and a one-line bio. When you build your ai: the content you upload or paste (podcasts, posts, transcripts, newsletters, etc.), the answers you give during the calibration interview, and the guardrails you set. When your ai is used: the messages visitors send to your ai’s public page, the responses your ai generates, and basic analytics (message counts, top questions). Usage of the service itself: standard server logs (IP, user agent, requested URL, timestamp) for security and abuse prevention.
What we never collect
Payment card details (handled directly by Stripe; we only store a Stripe customer ID). Anything we don't need to deliver the service. We don't track you across the web, run cross-site profiling, or share identifiers with ad networks.
How we use it
To run the service: hosting your ai, serving its responses, and showing you analytics about how it's being used. To improve our prompting and retrieval — strictly within your account; we do not train shared models on your corpus, and your content is never used to improve any other user's ai. To send service emails (account confirmations, billing, security notices). To send product update emails — optional and unsubscribable.
Who can see what
You see everything: your full corpus, every message sent to your ai, every response, every analytic. Visitors to your ai's public page see your ai's responses and the standard "powered by mebut.ai · conversations help [your name]'s ai learn" disclosure. We see the contents of your account for support purposes and abuse moderation. We do not look at it routinely.
Data retention
Your account and corpus are retained for as long as your account is active. When you delete your account, the model and every byte we hold about you is removed within 24 hours. Conversation logs older than 12 months are auto-purged from your ai's public page; you can also delete any conversation immediately from your dashboard.
Your rights
Under UK GDPR / EU GDPR / CCPA: you can request access to all your data, ask us to correct it, ask us to delete it, ask us to export it (we'll provide a machine-readable archive), or object to specific processing. Email hi@mebut.ai and we'll act within 30 days.
Sub-processors
We use a small set of trusted providers to deliver the service: Cloudflare (hosting + CDN), Supabase (database + auth + storage), Anthropic (LLM API), Stripe (payments), Resend (email), Google Cloud (OAuth sign-in). Each holds your data only as long as required to perform their function and is subject to GDPR-compliant data processing agreements.
Cookies
We use a small number of strictly-necessary cookies: a session cookie when you're signed in, and a preference cookie for your chosen theme. We do not use advertising or analytics cookies that follow you across sites.
Contact
Privacy questions: hi@mebut.ai. We respond within 5 working days.