Privacy Policy

This policy explains what personal data MGS AI processes, why, and what your rights are. The controller is Max's Global Solutions, MGS Street 123, Latvia, support@trymgs.ai.

1. What we process

• Account data: name, email address, a hashed password (never the password itself), and your name and email from Google if you sign in with Google.
• Content: your messages, the files you upload, the replies and the images MGS AI generates, and your custom instructions.
• Usage data: the mode, token counts and usage units of each reply, with timestamps, to apply plan limits.
• Billing data: your plan, PayPal subscription and payment identifiers, amounts and status. We never see your card or bank details; PayPal handles them.
• Technical data: IP address and browser user agent stored with your sign-in sessions, and short-lived server logs for security and debugging.

2. Why we process it

• To provide MGS AI to you: your account, chats, files, replies and limits (performance of a contract, Art. 6(1)(b) GDPR).
• To bill paid plans and keep the records the law requires (Art. 6(1)(b) and (c) GDPR).
• To keep the service secure and prevent abuse, for example with rate limits (legitimate interest, Art. 6(1)(f) GDPR).
• To send sign-in, verification and password codes by email (Art. 6(1)(b) GDPR).

We do not sell your data and we do not use it for advertising.

3. How replies are generated

To answer you, your message, the earlier messages in the chat, your custom instructions and the content of attached files are sent to the MGS AI engine. The engine runs on Amazon Web Services servers in the United States. It does not log message text, attachment contents or search queries; it logs only metadata such as request ids, mode, token counts and timings. When a reply uses web search, the search query is sent to a web search provider to fetch results.

4. Who processes data for us

• Amazon Web Services: file storage in Stockholm, Sweden, encrypted at rest, and the AI engine in the United States.
• Neon: database hosting.
• Our hosting provider: runs the web application.
• Resend: delivers emails with sign-in and verification codes.
• PayPal: processes payments as an independent controller under its own privacy statement.
• Google: only if you choose Google sign-in.

Where data is processed outside the European Economic Area, we rely on an adequacy decision such as the EU-US Data Privacy Framework or on standard contractual clauses.

5. How long we keep data

• Account data: until you delete your account.
• Chats, files and images: until you delete them or your account.
• Files you uploaded but never sent: deleted after 24 hours.
• Sign-in sessions: 30 days after your last activity.
• PayPal keeps its own transaction records under its own retention rules.

6. Your rights

You can access, correct and delete your data, restrict or object to processing, and take your data with you. In Settings you can export all your data as JSON and delete your account, which removes your chats, files and images. For anything else write to support@trymgs.ai. You can also complain to a data protection authority; in Latvia this is the Data State Inspectorate (Datu valsts inspekcija).

7. Cookies and local storage

We use only essential cookies: a secure, httpOnly session cookie that keeps you signed in. Your theme choice is stored in your browser's local storage. There are no analytics, advertising or tracking cookies, so there is no cookie banner.

8. Security

Connections are encrypted with TLS. Files are stored encrypted, and download links to them expire after 5 minutes. Access to production systems is limited to the people who run MGS AI.

9. Children

MGS AI is not meant for children under 16, and we do not knowingly collect their data.

10. Changes

If we change this policy in a way that matters to you, we will tell you by email or in the app.