Privacy Policy

Last updated: June 12, 2026

1. What we collect

• Account: your email (for sign-in), optional name.
• Business profile: what you tell MSTEIN about your business to ground content.
• Connected social accounts: via secure sign-in — display names, account identifiers, avatars, and access tokens. We do not receive your social passwords.
• Content & assets: posts, captions, images/videos, drafts, schedules, replies.
• Performance data: public metrics from your connected accounts and inbound comments/messages.
• Usage & technical: tokens consumed, actions, basic logs.

2. How we use it

To run the service: generate and refine content, schedule/publish at your direction, surface and draft replies, show analytics, meter tokens, secure accounts, and improve quality. We do not sell your personal data and we do not show ads.

3. Legal bases

Performance of contract, legitimate interests (security, improvement), consent (e.g. connecting accounts), and legal obligation.

4. Service providers

We share data only to operate MSTEIN — with our publishing/inbox/analytics infrastructure provider, our AI generation providers, our EU database host, and our transactional email provider. Each processes data under its own terms. A current list is available on request.

5. Retention

Account, profile, and content are kept while your account is active. Connected-account tokens are kept until you disconnect or your account is deleted. On account deletion we remove your personal data within 30 days, except where law requires retention.

6. Your rights

Depending on your region: access, correction, deletion, portability, objection/restriction, and withdrawing consent. Contact legal@mstein.ai. You can disconnect connected accounts in-app at any time, and request account deletion through the in-app support form or by email — we action deletion requests within 30 days.

7. Security

Encrypted transport, scoped access, and tenant isolation (each customer's data and connected accounts are separated). No system is perfectly secure; we will notify you of breaches as required by law.

8. Cookies

We use strictly-necessary cookies only:

• Session/authentication cookie — keeps you signed in.
• Anonymous visitor session cookie — secures and operates the free demo for visitors who haven't signed in. It is not used for advertising.
• Workspace-selection cookie — remembers which brand workspace you're working in.
• Your language preference is stored in your browser's localStorage (not a cookie) and never leaves your device.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies.

9. Children

MSTEIN is not for anyone under 18.

10. Contact

legal@mstein.ai (privacy requests) · support@mstein.ai (support)

Data controller: Mark Gold Marketingstein (sole proprietorship / indywidualna działalność gospodarcza), ul. Rynek Główny 28, 31-010 Kraków, Poland. NIP: 7393790177 · REGON: 321186559.