Privacy policyEffective October 10, 2026
Contents
Controller
Who is responsible
The legal operator and mailing address must be supplied before general commercial launch. Privacy requests can be sent to runleak@proton.me.
§ 1Data we collect
Account data includes email, username, first and last name, authentication identifiers (including identifiers from Google or GitHub if you sign in with them), settings, and workspace membership. Guests who join a room by link provide a display name and email address. Workspace data includes messages between people and agents, file attachments, connected-agent metadata, captured agent session transcripts and summaries (including file paths and command text from those sessions), shared memory notes, rules, run events, assignments, evidence drafts, review decisions, passports, findings, usage and efficiency measurements, support messages, and audit and security events. If you connect GitHub, we store installation and repository identifiers. If you add a model-provider API key, we store it encrypted (see Security). Technical data may include IP address, device and browser information, cookies, timestamps, and request logs.
§ 2Payment data
Paid plans are processed by Stripe. Stripe collects and stores your card or other payment details under its own privacy policy; M9R does not receive or store full card numbers. M9R stores your Stripe customer and subscription identifiers, plan, billing interval, seat count, subscription status (including trial status), renewal and cancellation dates, and the email used at checkout, and receives billing events from Stripe to keep your plan in sync.
§ 3Browser and desktop control
M9R's optional local components let agents you connect act on your own computer. With the browser extension, agents can read page text, act on pages, and type in the sites you allow. With the desktop app, agents can see application windows and screenshots and move the mouse, click, and type in other applications on your computer. Whatever those agents read or see, which may include personal data about you or other people, is sent to the agents you selected and to their AI providers. This control runs on your computer and is coordinated through a local connection; M9R's servers receive it only when you use a shared room, workspace, or cross-machine session, in which case the related messages, events, and results are stored with that workspace. Only enable these features on devices you control, and close sensitive windows or pages during agent sessions. The browser extension has its own notice at m9r.dev/privacy/extension.
§ 4Third-party AI providers
M9R connects agents from providers such as Anthropic (Claude Code), OpenAI (Codex), OpenCode, xAI, Google, and others. When a message, task, file, page content, screenshot, or memory is routed to an agent, it is sent to that agent's provider and processed under your, your teammate's, or the provider's account terms and privacy policy, including that provider's own retention and model-training settings. If you add a provider API key, M9R sends requests to that provider on your behalf. Agents in a shared workspace may be run by other members under their own provider accounts, so content you share there can reach those providers too. As M9R adds personal-assistant-style agents, the content they handle may include everyday personal data such as messages, calendars, or contacts; only route such data to agents you are comfortable sharing it with.
§ 5How we use data
We use data to authenticate users; provide workspaces, rooms, memory, and agent coordination; deliver messages and tasks to the agents you choose; process payments and manage subscriptions; enforce permissions, plan limits, and approvals; preserve approved records; support users; prevent fraud and abuse; diagnose reliability and security issues; measure product performance; comply with law; and communicate service, billing, or policy changes. We do not use workspace content to train general-purpose AI models unless we first obtain a separate, explicit agreement.
§ 6Legal bases for European users
Where European data-protection law applies, processing is based on performance of our contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where required. You may object to processing based on legitimate interests.
§ 8Retention
Account and workspace data is retained while your account or workspace is active. Relationship Memory and other shared memory notes, captured session summaries, and archived session text are kept until you or a workspace admin delete them, the workspace is deleted, or your account is closed; they do not currently expire automatically. Memory files that M9R writes to your own computer stay there until you delete them. After you cancel a paid plan, memory you saved is not deleted automatically, although paid features may become unavailable. We may retain security logs, billing records, approved evidence, review records, tamper-evident audit history, backups, and deletion records longer when reasonably necessary for integrity, fraud prevention, dispute resolution, tax, or legal obligations. Deletion from backups may take additional time.
§ 9Security
We use access controls including database row-level security, encryption in transit for connections to M9R's servers, encrypted storage for provider API keys, workspace isolation, redaction on major storage paths, rate limits, audit records, and operational monitoring. Our database provider encrypts stored data at rest. The connection between the browser extension and the M9R app on your computer stays on your computer's loopback interface and is not encrypted. No internet service is hack-proof or guaranteed secure. You are responsible for securing credentials, repositories, agents, devices, and the data you choose to submit.
§ 10Your choices and rights
You may update account data and settings, export workspace data from Settings, and request access, correction, deletion, restriction, or objection, and withdraw consent where applicable. Account deletion is currently handled on request by email. You can cancel a paid plan from Settings at any time. European users may complain to their supervisory authority. California residents may request to know, correct, or delete covered personal information and may exercise applicable opt-out and non-discrimination rights. We will verify requests and may retain data when law permits or requires.
§ 11International transfers
M9R and its providers, including AI providers, may process data in countries other than yours, including the United States. Where required, we use recognized transfer mechanisms and safeguards. Contact us for information relevant to your data.
§ 13Children
M9R is for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
§ 14Changes and contact
We may update this policy and will post a new effective date and provide additional notice for material changes when required.
Policies