Privacy Policy
Last updated: July 11, 2026
This Privacy Policy explains how Mashroei+ ("we", "us") collects, uses, and protects information when you use mashroei.net and related services (the "Service"). We aim to collect only what we need to run and improve the Service.
1. Information We Collect
Account data: name, email, authentication identifiers, language, and plan. Project data: ideas, prompts, business plans, roadmaps, advisor reports, and any content you save. Usage data: generation counts, feature usage, device, browser, approximate location (from IP), and diagnostic logs. Payment data: processed by PayPal — we store subscription status, not full card numbers. Cookies: essential cookies for authentication and preferences.
2. How We Use Information
We use your data to: provide, personalize, and secure the Service; generate AI outputs and enforce plan quotas; process subscriptions and prevent fraud or abuse; communicate service updates and respond to support requests; and improve reliability, quality, and safety of the Service.
3. AI Processing and Provider Retention
What we can guarantee: your prompts and saved projects are stored in our database under row-level security so only your account (and, for support, our administrators) can read them; we never sell them, never publish them, and never use them to train any model of our own. What depends on a third party: to produce an Output, your prompt and the context you supplied are transmitted to our AI gateway and from there to the model provider serving that request. Those providers process API traffic under enterprise API terms that exclude API content from training their public models, and may retain content for a limited period for abuse monitoring and legal compliance before deletion. We do not control that provider-side retention window and therefore do not promise instant deletion at the provider. Practical guidance: treat prompts like email — do not paste passwords, national ID numbers, bank details, or third-party personal data into them.
4. Legal Bases
Where required (e.g. under GDPR), we rely on: performance of contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where explicitly requested), and legal obligations.
5. Sharing
We share information only with: infrastructure providers (hosting, database, authentication); AI model providers strictly to fulfill your requests; payment processors (PayPal) to handle subscriptions; analytics and error-monitoring vendors using minimal data; and authorities when legally required. We do not sell personal data.
6. Data Retention
We retain account and project data while your account is active. You may delete your account at any time; we will delete or anonymize your data within a reasonable period, except where retention is required by law (e.g. tax, fraud prevention).
7. Security
We use industry-standard controls including row-level security on the database, HTTPS in transit, restricted server-side keys, quota enforcement, and audit logs. No system is 100% secure; report vulnerabilities to info@mashroei.net.
8. International Transfers
The Service is hosted on global cloud providers. Your data may be processed outside your country of residence. We take steps to ensure equivalent protection consistent with applicable law.
9. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.
10. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
We may update this Policy. Material changes will be announced in-app or by email. Continued use after the effective date constitutes acceptance.
12. Contact
Data controller: Mashroei+. Contact: info@mashroei.net.
