Privacy Policy
Last updated: 2026-06-20
This Privacy Policy describes how Mitoro ("we," "our," or "us") collects, uses, and shares information when you use the Mitoro application and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
Account Information
When you create an account, we collect your email address. If you sign in with Google OAuth, we also receive your Google profile information (name, profile photo, and email address) as provided by Google.
Chat Prompts and Usage Data
When you use Mitoro to control Ableton Live, the natural-language prompts you type are transmitted to our cloud service. We also collect token-usage logs and credit balance records to meter your usage and operate the subscription system.
Payment Information
Payment and billing information (such as credit card details) is collected and processed directly by Stripe, our payment processor. We do not store your full payment card details on our servers. We receive only transaction records and subscription status from Stripe as necessary to manage your account.
Technical Information
We may collect basic technical information such as app version, operating system version, and error logs to maintain and improve the Service.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Authenticate you and keep your session secure.
- Process your natural-language prompts to generate Ableton Live actions.
- Meter your token usage and manage credit balances.
- Bill you for your subscription via Stripe.
- Send transactional emails (e.g., receipts, service notices).
- Diagnose technical problems and improve the Service.
3. Third-Party Services
Operating the Service requires sharing certain data with the following third parties:
Anthropic
Your chat prompts are transmitted to Anthropic's API (Claude) to generate the corresponding Ableton Live actions. Anthropic may process this data in accordance with their own privacy policy. We encourage you to review Anthropic's privacy policy.
Supabase
We use Supabase for authentication and as our primary database. Your account data, token-usage logs, and credit balance are stored in Supabase-hosted Postgres databases. Supabase's privacy practices are described at supabase.com/privacy.
Stripe
Stripe handles payment processing and subscription management. When you subscribe, you interact directly with Stripe's secure payment interface. Stripe's privacy practices are described at stripe.com/privacy.
If you choose to sign in with Google, your authentication is handled through Google OAuth. Google's privacy practices are described at policies.google.com/privacy.
4. Data Retention
We retain your account information and usage logs for as long as your account remains active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records may be kept for up to 7 years as required by applicable law).
5. Your Rights
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete the personal information we hold about you, and the right to object to or restrict certain processing. To exercise any of these rights, please contact us at the address below.
6. Security
We implement reasonable technical and organizational measures to protect your information. However, no method of transmission over the internet or electronic storage is completely secure.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
8. Contact
If you have questions or requests regarding this Privacy Policy, please contact us at support@mitoro.io.