Privacy Policy

We collect only what is necessary to provide our Services:

• • Account data: Email address, hashed password, full name
• • Usage data: Features used, pages visited, session duration (no fingerprinting)
• • Payment data: Bitcoin transaction IDs and Bill.com invoice references only. We never store full credit-card numbers or bank-account credentials — our payment processors handle those.
• • Communications: Messages sent via the contact form or support tickets

We do NOT collect: government IDs, location data, biometric data, or any sensitive personal information.

Your data is used exclusively to:

• • Provide and improve our Services
• • Authenticate your account
• • Send transactional emails (subscription confirmations, reports, and alerts you requested)
• • Respond to support requests
• • Detect and prevent fraud or abuse

We do NOT use your data for advertising, behavioral profiling, or sale to third parties — ever.

Payments are processed either in crypto via our BTCPay Server or in fiat via Bill.com. We do not use Stripe or PayPal, and no card data is stored on our systems — we retain only the information necessary to confirm payment. Both rails keep your billing private.

All data is stored on our own managed servers. We use:

• • AES-256 encryption at rest
• • TLS 1.3 in transit
• • Argon2 password hashing (we never store plain-text passwords)
• • Imunify360 WAF + real-time malware scanning
• • Regular security audits

Your account and application data lives in databases on servers we manage and control — we never resell it or hand it to a third-party data broker.

We retain your account data for as long as your account is active, plus 90 days after a deletion request. Usage logs are retained for 30 days. You may request complete deletion of your data at any time by emailing privacy@masterailabs.com.

We rely on a minimal, named set of subprocessors to deliver the Services. Each is bound so your data is never sold and never used to train their models:

• • Anthropic (Claude) — AI reasoning and content generation. We never use OpenAI. Content you submit is processed on a no-retention, no-training path.
• • Twilio — telephony and call recording for the AI receptionist / voice service.
• • ElevenLabs — speech (text-to-speech) for the AI voice service.
• • Bill.com — fiat invoicing and card/ACH payment processing.
• • BTCPay Server — private by us for Bitcoin payments; no payment data leaves our infrastructure.

Live phone calls are necessarily processed by the telephony and speech subprocessors above to connect and voice the call; we do not otherwise send your data to any provider not listed here. Where the Services publish to social platforms, we use the platforms' own official APIs — no third-party reseller receives your data. We do NOT use Google Analytics, Facebook Pixel, HubSpot, Intercom, or any behavioral tracking tools.

You have the right to:

• • Access all data we hold about you
• • Correct inaccurate data
• • Request deletion of your account and data
• • Export your data in JSON format
• • Opt out of all non-transactional communications

To exercise these rights, email privacy@masterailabs.com. We respond within 30 days.

We use only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie-consent banner is required because we use only strictly necessary cookies.

Our Services are strictly for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to a minor, we will terminate it and delete the associated data. If you believe a minor has provided us with personal information, contact us immediately at privacy@masterailabs.com.

MasterAI Labs is a privacy-first AI studio based in New Hampshire, USA, running on its own managed servers; this Policy and our handling of your data are governed by New Hampshire law, except to the minimum extent a non-waivable data-protection right of your home state applies. This Policy is our commitment to you about how we handle your data — we build in-house and never sell or share it. For our done-for-you AI receptionist service, your customers' data stays on your own accounts, and you remain its controller under the Master Services Agreement.

For privacy inquiries: privacy@masterailabs.com