Privacy Policy

1. Who we are

MySuperAI is built and operated by Stopngage Solutions Pvt Ltd, a company registered in India (“MySuperAI”, “we”, “us”). This policy covers our website at mysuperai.one and the MySuperAI apps for Android, iOS, Mac, Windows and Chrome, including any integrations you connect (together, the “Service”).

For the personal data we handle, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the controller under the EU and UK General Data Protection Regulation (GDPR). You can reach us at hello@mysuperai.one or +91 80560 88288.

2. The short version

3. What we collect

Information you give us

• Waitlist: your name, email address and your consent to receive emails about MySuperAI.
• Survey: your name, email address, consent and your answers (for example your role, the tools you use and what you find hard to keep track of).
• Contacting us: what you send us by email or tell us on a call, and your contact details.
• Your account: your name, email address and profile picture, including from the provider you sign in with (such as Google or Apple), and your settings.
• Your memories: the content you choose to save, such as links, notes, documents, screenshots, images, voice notes, AI chats and ideas, and the connections and summaries MySuperAI creates from them.
• Connected services: if you connect a service such as Gmail, Google Drive, Google Calendar, Slack or Notion, the content you authorise us to access from it (for example emails, files, events or messages).

Information collected automatically

• Device and usage information: your browser or device type, operating system, IP address, approximate location derived from it, pages and screens you view, features you use and the time of each visit.
• Diagnostics: error and crash reports and performance data that help us keep the Service working.
• Cookies and similar technologies: see Cookies and analytics.

We don’t ask for sensitive information such as health, financial or government ID data. If your saved content includes it, we process it only to provide the Service to you, in the same protected way as the rest of your memory.

4. How we use it and why

We use personal data only for the purposes below. Under the GDPR, each purpose has a legal basis; under the DPDP Act we rely on your consent, or on a legitimate use the Act allows (such as complying with the law).

You can withdraw consent at any time (unsubscribe link, cookie settings or by emailing hello@mysuperai.one). Withdrawing doesn’t affect processing that happened before.

5. AI and your content

MySuperAI uses AI models to organise your memories, find connections, search them and answer your questions. To do this, your content is processed by AI models, which may be run by third-party AI providers acting on our instructions.

• No training on your content. We don’t use your content to train or improve AI models, and our contracts with AI providers prohibit them from doing so.
• Limited processing. AI providers receive only what’s needed for the request and may keep it only as long as needed to provide it and to detect abuse, as their terms allow.
• No automated decisions with legal effects. MySuperAI doesn’t make decisions about you that have legal or similarly significant effects.
• AI can be wrong. Check important answers before relying on them.

6. Google user data

This section explains exactly how the MySuperAI app, made by Stopngage Solutions Pvt Ltd, handles data it receives from Google when you sign in with Google or connect your Google account. It applies in addition to the rest of this policy.

What Google data we access

• Google Sign-In: your name, email address and profile picture, to create and identify your MySuperAI account.
• Gmail (only if you connect it): the emails and attachments you choose to bring into your memory, and their details such as sender, recipients, subject and date.
• Google Drive (only if you connect it): the files you choose to add to your memory, and their names and details.
• Google Calendar (only if you connect it): your calendar events, such as their titles, times, attendees and descriptions.

We ask only for the permissions a feature needs, and only when you choose to use it. Google shows you each permission before you approve it, and you can decline.

How we use it

We use Google user data only to provide and improve the features you use in MySuperAI: saving the emails, files and events you choose into your memory, connecting them with your other memories, letting you search them, and answering your questions about them, for example preparing talking points for a meeting from the related emails and documents. We don’t use it for any other purpose.

What we never do with it

• We don’t use or transfer it for advertising, including targeted, retargeted, personalised or interest-based ads.
• We don’t sell it, or give it to data brokers or information resellers.
• We don’t use it to determine creditworthiness or for lending.
• We don’t use it to build databases or profiles for anyone else.
• We don’t use data obtained through Google Workspace APIs (such as Gmail, Drive and Calendar) to develop, improve or train generalised or non-personalised AI or machine-learning models, and we don’t transfer it to anyone for that purpose. AI processing of your Google data happens only to provide features to you.
• Our staff don’t read it, unless you ask us to (for example for support), it’s needed for security or to investigate abuse, or the law requires it.

Who we share it with

We share Google user data only with service providers that help us run these features, under contracts that let them use it only for that: Google Cloud, which stores it in India, and AI model providers, which process it only to answer your request and may not use it to train their models. We may also disclose it if the law requires it, or as part of a merger or acquisition with notice to you. We don’t share it with anyone else.

How we store and protect it

Google user data is stored on Google Cloud in Mumbai, India. It is encrypted in transit (TLS) and at rest, access is limited to the few systems and people who need it, sign-in tokens from Google are stored encrypted, and access is logged and monitored.

How long we keep it, and how to delete it

• We keep Google data you have brought into MySuperAI for as long as it is in your memory and your account is open.
• Delete any item in the app and it is removed from your memory straight away.
• Disconnect a Google service in MySuperAI’s settings, or remove MySuperAI’s access at myaccount.google.com/permissions. We then stop accessing it and delete the sign-in tokens straight away.
• Delete your account in the app, or email hello@mysuperai.one to ask us to, and we delete all your data, including all Google data, within 30 days, and from backups within a further 90 days.

7. Who we share it with

We share personal data only with:

• Service providers that work on our behalf under contracts requiring them to protect it and use it only for our instructions:
  • Google Cloud (hosting and storage, Mumbai, India)
  • Google Workspace (email and the forms behind the waitlist and survey)
  • Google Analytics (website analytics, only with your consent)
  • PostHog (product analytics, United States, only with your consent)
  • AI model providers (see AI and your content and Google user data)
• Services you connect, when you ask MySuperAI to work with them.
• Authorities, when the law requires it or to protect the rights, safety and property of our users, the public or MySuperAI.
• A buyer or successor, if MySuperAI is involved in a merger, acquisition or sale of assets. We’ll tell you before your data becomes subject to a different policy.

We don’t sell personal data and don’t “share” it for cross-context behavioural advertising, as those terms are defined in California law.

8. Where your data is stored

We store your data in India, on Google Cloud in Mumbai. Some service providers, such as analytics and AI providers, may process data in the United States or other countries.

• India: transfers outside India follow the DPDP Act and any restrictions notified by the Government of India.
• EU, EEA and UK: when data leaves these regions for a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses (and the UK Addendum or equivalent safeguards) with the recipient.

9. How long we keep it

• Your account and memories: while your account is open. When you delete an item it is removed from the Service; when you delete your account, we delete your data within 30 days, and from backups within a further 90 days.
• Waitlist: until you unsubscribe, ask us to delete it, or your early access starts and you create an account.
• Survey answers: up to 24 months, after which we delete them or keep only anonymous totals.
• Analytics: up to 14 months.
• Security logs: at least one year, as Indian law requires, and no longer than needed.
• Records we must keep by law (such as tax and accounting): for the period the law sets.

10. How we protect it

We use encryption in transit (HTTPS/TLS) and at rest, strict access controls so only people who need access have it, monitoring and logging, and regular reviews of our systems. No system is perfectly secure, but we work to protect your data and fix weaknesses quickly.

If a personal data breach happens, we will inform the Data Protection Board of India, CERT-In and, where the GDPR applies, the relevant supervisory authority within the time the law requires, and we will tell affected users without undue delay what happened and what they can do.

11. Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal data, and you can withdraw consent at any time. Many of these you can do yourself in the app; for everything else, email hello@mysuperai.one. We may need to confirm your identity first.

If you are in India (DPDP Act)

• Get a summary of the personal data we process and the processing we do, and who we have shared it with.
• Have your data corrected, completed, updated or erased.
• Have your grievances addressed. We respond within 90 days, and usually much sooner.
• Nominate another person to exercise your rights if you die or become unable to.
• If you’re not satisfied with our response, complain to the Data Protection Board of India.

If you are in the EU, EEA or UK (GDPR)

• Access, rectification, erasure, restriction of processing, data portability and objection, including to processing based on legitimate interests.
• Withdraw consent at any time, without affecting earlier processing.
• We respond within one month (extendable by two months for complex requests, with notice).
• You can complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

If you are in the United States

• Depending on your state (including California), you can ask to know, access, correct and delete your personal information, and to opt out of its sale, sharing for targeted advertising or profiling. We don’t sell or share it in those ways.
• We won’t treat you differently for using these rights. You can use an authorised agent, and you can appeal a decision by replying to our response.

12. Children

MySuperAI is meant for people aged 18 and over. We don’t knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email hello@mysuperai.one and we will delete it.

13. Cookies and analytics

We use a small amount of browser storage that the site needs to work, such as remembering your cookie choice. These are always on.

With your consent, we also use analytics cookies from Google Analytics (cookies named _ga) and PostHog (cookies named ph_…) to measure visits and how features are used. If you reject them, those tools don’t set cookies and don’t collect analytics about you; Google Analytics may receive basic, cookieless signals without identifiers.

You can change your choice at any time with Cookie settings at the bottom of every page, or by clearing cookies in your browser. We don’t use advertising cookies.

14. Changes to this policy

We may update this policy as MySuperAI grows. We’ll change the date at the top, and for important changes we’ll tell you by email or in the app before they take effect.

15. Contact and Grievance Officer

For any privacy question, request or complaint, contact our Grievance Officer, who also acts as our point of contact for data protection:

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.