Privacy & cookies.

Who is responsible for your information?

Misty is operated by Matagi OÜ, registration number 17221751, Valukoja 10, 11415 Tallinn, Estonia. Matagi OÜ is the controller of the personal information described in this notice.

For privacy questions or requests about your information, contact hello@matagi.ai. This notice describes Misty at getmisty.ai, including its workspace and optional website measurement.

Information Misty uses

Account and workspace information includes your sign-in email, profile and social handles, creator preferences, rates, chats, prepared drafts, email conversations and files you provide. Misty also uses public social content, brand information and relevant business contact information to research opportunities and prepare introductions.

Stripe handles payment details and subscription billing. Misty receives payment and subscription references, status, amounts, currency, tax and invoice information. The analytics described below does not receive full card numbers or payment authentication details.

Technical information, such as request logs, browser or device information and network addresses, helps operate and protect the service. If you choose to publish a portfolio, the content you publish is available to people who visit its public page.

Why we use this information

We use account and workspace information to provide the service you request: signing you in, researching brands, preparing and managing conversations, saving your preferences and handling subscriptions. Processing needed to provide the service is based on our contract with you. Billing and related records may also be needed to meet legal obligations.

We use necessary technical information for service operation, security and preventing misuse based on our legitimate interests. Optional analytics and advertising measurement depend on your consent. You can use Misty without accepting optional measurement.

Optional analytics and advertising measurement

Google Analytics 4 helps us understand page visits and product activity, such as approving an email, enabling Auto mode, chatting with Misty, answering a clarification and viewing the inbox or an email. It uses pseudonymous browser and session identifiers. Google Tag Manager manages the Google measurement tags and follows your cookie choices.

With analytics consent, we also record approved campaign tags, a generic landing-page category and the domain of a referring website to understand how people find Misty and which visits lead to account creation or a purchase. We can compare the first available measured visit with the latest identifiable visit from a campaign or another website. We do not collect the referring website’s full path, query or search terms. Advertising click identifiers require advertising consent.

If you join through a creator invitation and allow analytics, measurement can include a generic creator-invitation source and the recorded invitation visit time. Invite codes, inviter names and referral-cookie tokens are not sent as analytics event fields. The referral-reward service separately uses invitation information to check eligibility.

Acquisition information can be missing when you decline measurement, use a different browser or device, or arrive through a link that does not pass referral information. We do not treat missing information as proof that a visit came from an advertisement or organic search. Optional attribution is not sent to measurement providers without the relevant consent.

When you create an account, Misty records a coarse signup source from that visit, even if you decline optional measurement: approved campaign tags, a generic landing-page category and the domain of the referring website. It is not saved in your browser, contains no browser or advertising identifiers, is used only for our internal signup reporting and is not sent to Google or Meta.

After a successful payment, consented purchase measurement includes a transaction identifier, event identifier, purchase type, amount, currency and relevant tax information. The purchase value reflects the confirmed payment after discounts and prorations, with tax reported separately. Renewals and refunds are tracked separately from a new subscription or upgrade.

If you choose advertising measurement, Google may connect consented purchases and visits to advertising through our Google Analytics and Google Ads connection. This may use advertising click identifiers and permit advertising personalization. Google tags can also receive browser, device and connection information, including your IP address.

Meta measurement is used only if Meta is connected and you choose advertising measurement. If enabled, Meta may receive purchase amounts, currency, transaction references, browser or advertising identifiers, and hashed versions of your account email and account identifier for matching. Hashing changes the format of these identifiers; it does not make them anonymous. A Meta browser tag is limited to public marketing pages, while server-side purchase measurement follows your consent.

Activity measurement does not include email bodies, subjects, recipient lists, chat text, uploaded files or private workspace links. We do not use session recordings in this tracking setup. The account identifiers used for Meta matching, if enabled, are separate from those activity events.

Cookies and your choices

Essential cookies and browser storage support sign-in, security, saved settings and your cookie choice. Optional analytics and advertising storage are off until you choose them. You can accept both, reject both, or choose each category separately in Cookie settings.

When you follow a creator invitation, Misty uses a functional first-party referral cookie for up to 30 days to remember the invitation through signup and check referral-reward eligibility. Optional use of that invitation for analytics follows your analytics choice.

Use the Cookies button at any time to change or withdraw your choices. Withdrawal stops future optional measurement, removes available tracking cookies and local identifiers for the categories you reject, and reloads Misty to unload the tags. It does not automatically delete information already received by a provider. Contact us if you want to request deletion of previously collected information.

Your choice applies to this browser. Clearing browser storage, using another browser or letting a choice expire may cause Misty to ask again. Rejecting optional measurement does not cancel your subscription or prevent the service from processing information needed to operate your account.

How long information is kept

Your cookie choice is valid for 180 days. The optional analytics browser identifier is used for up to 180 days; an analytics session expires after 30 minutes of inactivity. Saved browser acquisition touches and advertising click attribution are used for up to 90 days. You can clear browser storage sooner or withdraw consent.

Misty removes expired server-side analytics consent context after 180 days and retains its analytics signup, acquisition, payment-event and delivery records for up to 14 months. These measurement records are separate from the underlying account, subscription, invoice and accounting records.

Google Analytics user-level and event-level data retention is set to 14 months, with the option to reset retention on new activity turned off. That setting does not limit every aggregated report. Google and, if connected, Meta also apply their own retention rules to information they receive, as described in their policies.

Other account and workspace information is kept as needed to provide the service, handle requests and disputes, and meet legal or accounting obligations. The period depends on the information and purpose. Contact us to request deletion or ask about a particular record; some information may need to remain for legal reasons or in backups pending deletion.

Service providers and international processing

We use service providers for hosting and databases, AI processing and research, email services, payments and security. They receive the information needed for their role. For example, content you ask Misty to research or draft can be processed by the AI services used to deliver that feature, while Stripe processes checkout and billing.

Google and, only when connected, Meta receive the optional measurement information described above according to your choices. Provider processing may take place outside your country or the European Economic Area. Contact us for information about the providers and applicable transfer arrangements for your account.

We may also disclose information when required by law, to protect legal rights or safety, or as part of a company transaction subject to appropriate handling of the information.

Your privacy rights

Depending on the law that applies to you, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests and withdraw consent for processing that relies on it. We may need to verify your identity before completing a request.

Send privacy requests to hello@matagi.ai. You can also complain to a relevant data protection authority. In Estonia, this is the Data Protection Inspectorate, Andmekaitse Inspektsioon. If you live elsewhere, you may contact your local authority.

Updates to this notice

We may update this notice as the service or its measurement changes. The date below identifies the current version. A material change to optional measurement may require us to ask for a new choice.