Privacy Policy

MasterOS ("we", "us") provides a chat/agent platform at masteros.dev and app.masteros.dev (the "Service"). This policy explains what data we collect, why, and the choices you have.

1. Information we collect

• Account data – email address, and a hashed password if you sign up with email/password. If you sign in with Google or Facebook, we receive your email and name from that provider; we never see or store your password with those providers.
• Conversation data – messages you send and the responses you receive, stored so you can return to a past conversation.
• Usage and billing data – which model you used, token counts, and computed cost per message, used to enforce quota and produce your ledger/billing history.
• Payment data – we never see or store your card or bank details. Payments are handled entirely by our payment processors (SePay for VND bank transfers, Paddle for card payments); we only store the resulting order status and amount.
• Technical data – IP address and basic request metadata, used for rate-limiting and abuse prevention (e.g. brute-force login protection).

2. How we use your data

• To provide the Service: authenticate you, run your chat requests, and persist conversation history.
• To bill correctly: meter usage against your plan's quota and record it in an append-only ledger.
• To keep the Service secure: rate-limit abusive requests, detect fraud, and enforce our Terms of Use.
• To contact you about your account (e.g. a password reset link) or, if you opt in, product updates.

3. Third parties we share data with

We share the minimum data necessary with:

• AI model providers (e.g. Google, Anthropic, OpenAI, routed through our model gateway) – the content of the message you send is transmitted to whichever model you selected, to generate a response. We do not send your email or account identity to these providers.
• Google / Facebook – only if you choose to sign in with one of these, to verify your identity.
• SePay / Paddle – to process a payment you initiate. Paddle acts as Merchant of Record for international card payments and may independently collect data required for tax/VAT compliance.
• Infrastructure providers hosting our database, cache, and servers, under standard data-processing terms – they do not use your data for their own purposes.

We do not sell your personal data.

4. Data retention

We retain your account and conversation data for as long as your account is active. If you request deletion (see our Data Deletion Policy), we delete your personal data within a reasonable period, except where we must keep payment/ledger records for tax or accounting compliance.

5. Your rights

You may request access to, correction of, export of, or deletion of your personal data at any time by contacting us at the address below. If you are in the EU/EEA or another jurisdiction with equivalent data-protection law, this includes the rights to rectification, erasure, restriction of processing, and data portability under applicable law (e.g. GDPR). If you are in Vietnam, this includes the rights available to you under Decree 13/2023/NĐ-CP on personal data protection.

6. Cookies

See our Cookie Policy for what we store in your browser and why.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this policy or your data: support@masteros.dev