Privacy Policy

Who We Are

MITAS is an AI-enabled business operating platform and brand. MITAS Platform is the internal environment used by authorized MITAS operators to oversee workspaces, users, access and support. Related MITAS workspace products, including those used by MAAJ and Nooks & Crannies, are in development or pilot and run as separate applications. They may handle information differently, and this policy describes MITAS Platform and this website only. You can contact us at melvin@maajcapital.com.

Information We Collect

• Project inquiries: when you submit an inquiry, we collect your name, work email, optional organization, the project requirements you describe, and the time you consented to our review. A pseudonymous abuse-prevention fingerprint is stored to limit repeated submissions. Raw IP addresses are not stored in the project-inquiry record.
• Website visitors: standard technical information sent by your browser, such as IP address, browser type, pages requested and timestamps, recorded in ordinary hosting and operational logs.
• Account information: name and email address, and, if you sign in with Google, the basic Google profile details described below.
• Platform access records: platform roles, workspace and organization membership, invitations, platform support access grants, and an audit log of administrative actions such as granting roles or requesting account-recovery emails.
• Diagnostics: error and performance information needed to keep the service working and secure.
• Operational records: where a workspace service has been activated and you are permitted to access it, records belonging to that workspace may be stored or displayed.

Google Sign-In

You may sign in to MITAS Platform with your Google account. When you do, Google shares basic identifying information as part of the sign-in process: your name, email address, a unique Google account identifier and, if available and permitted, your profile picture. We use this only to identify you, sign you in and apply the access you have been granted.

MITAS Platform does not currently request access to Gmail, Google Calendar or other Google Workspace content, and its enabled features do not read, send or store your email or calendar data. If a Google integration is enabled in the future, you will be asked for explicit, separate consent to specific permissions for a stated purpose, and this policy will be updated beforehand.

How We Use Information

• To sign you in and keep your session active.
• To check your role and apply access rules, so you can only reach what you are authorized to use.
• To carry out the platform administration you or other authorized operators request, such as inviting users or granting support access.
• To keep audit records, investigate problems and protect the service against misuse.
• To respond to support, access, correction and deletion requests.
• To review project inquiries, decide whether MITAS can assist, and respond using the contact information provided. An inquiry does not automatically create a client account or authorize marketing messages.

We do not sell personal information and do not use it for advertising.

AI Features

MITAS develops AI-assisted capabilities, and MITAS Platform holds configuration records for possible AI providers. MITAS Platform does not currently send Gmail or Google Calendar data to AI models, because those connections are not active. If an AI feature that uses your information is enabled on this platform, we will explain which provider receives what data, and for what purpose, at the point you authorize it. Any use of Google user data will follow Google's Limited Use requirements. Other MITAS applications may offer AI features governed by their own disclosures.

Google API Services User Data Policy

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data received through sign-in is used only to provide sign-in and the user-facing features you request. We do not sell it, use it for advertising or ad targeting, use it to determine creditworthiness, or use it to train general-purpose AI models. People do not read it except with your specific permission, where necessary for security, or to comply with the law.

Service Providers

We rely on a small number of providers to run MITAS Platform:

• Google, authentication when you choose Google sign-in.
• Supabase, user accounts, sessions and application data storage.
• Lovable, website hosting and the sign-in integration.

Each provider processes information under its own terms and policies. We share information with them only as needed to operate the service. We may also disclose information where required by law or to protect the rights and safety of users and the service. We do not share one organization's private workspace records with another.

Security

Access to MITAS Platform requires an authenticated session. Signed-out visitors cannot reach operator pages, and server-side checks confirm a person's platform role before administrative actions run. Only an approved list of server functions can run on this platform, and private credentials are kept on the server, not in your browser. The public site is served over HTTPS. No online service can be perfectly secure, and we encourage you to tell us promptly about any suspected unauthorized access.

Retention and Deletion

We keep account information while your account remains open. We may keep it afterwards where reasonably needed for support, security, audit or business records, or to meet legal obligations. Backups held by our providers are removed according to those providers' schedules.

You can revoke MITAS's Google sign-in access at any time from your Google account permissions. This stops future Google sign-in but does not automatically delete your MITAS account or audit records. To close your account or ask for eligible information to be deleted, email melvin@maajcapital.com.

Your Choices and Rights

You may ask to access, correct or delete your personal information, or to close your account, by emailing melvin@maajcapital.com. We may need to verify your identity, and some records may be kept where the law or legitimate security and audit needs require it. Depending on where you live, you may have additional rights under applicable law.

Changes to This Policy

We will update this policy before introducing new data uses, such as new Google permissions or AI features. The effective date above shows the current version. Where changes are material, we will give appropriate notice.

Contact

Questions or requests about privacy can be sent to melvin@maajcapital.com.