Privacy Policy

• Account: when you sign in with Google we receive your name, email address and profile picture. We do not receive or store your Google password.
• Content you create: conversations, files and documents you upload, projects, notes, memory items, designs, Design Systems, workflows and agent settings.
• Profile notes: short observations agents make about how you like to work. They stay as drafts and are not used until you confirm them (or the same observation repeats independently), and you can delete them at any time.
• Technical data: activity history of jobs you run, error logs (secrets and personal data are masked before saving; errors that do not recur are deleted after 30 days) and basic usage data needed to run the service.
• Google services you choose to connect: Google Calendar (view events; create an event only after you confirm it on a card) and Google Drive files you pick or that mosiduo creates for you (drive.file scope — mosiduo cannot see your other Drive files). Gmail access is currently not offered.

• To provide the features you ask for: answering questions, running agents and workflows, building designs, remembering context you choose to keep.
• To keep the service secure and working: preventing abuse, diagnosing errors, enforcing usage limits on free AI questions.
• We do not sell your data and we do not use your content to train AI models.

To answer, your question and the relevant content are sent to an AI model. Depending on how you run AI: (a) on your own computer through the mosiduo worker and the AI tool you signed into (e.g. Claude Code) — processed under your account with that provider; (b) with your own API key — processed by that provider under your key; (c) with free AI questions — processed by Anthropic on mosiduo's account. Each provider handles data under its own terms.

AI answers can be wrong. Proposals that change data in your connected services (for example creating a calendar event) always wait for your confirmation.

mosiduo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features you request, is shown only to you (other workspace members, including admins, cannot read it), and Google access tokens never leave mosiduo's server. You can disconnect Google at any time in Settings → Connections, or revoke access in your Google Account.

• Within your workspace: items you mark as Team are visible to your workspace members; items marked Private are visible only to you.
• Public links: a design becomes viewable by anyone with the link only when you set it to Public.
• Service providers: Supabase (database and file storage), Vercel (web hosting) and the AI providers described above, only as needed to run the service.
• When required by law.

Data is stored with our service providers. API keys you enter are encrypted; access to data is controlled per user in the database. No system is perfectly secure, but we work to protect your data and fix problems quickly.

We keep your content while your account exists. Many items (Design Systems, designs, memory items…) go to the trash first when deleted so you can restore them; others are removed right away. You can ask us to delete your account and its data at any time using the contact below.

You can access, correct, export or delete your data, and withdraw consent for optional processing (such as profile notes or connected Google services), in line with applicable law including Vietnam's Decree 13/2023/ND-CP on personal data protection.

mosiduo is not intended for children under 16.

We will post updates to this policy on this page and update the effective date. Significant changes will be announced in the app.

Contact: tony@mosiduo.vn.