How mithAI handles your data.

mithAI ("mithAI", "we", "us", or "our") is an AI consulting company. This policy applies to this website and the tools and forms offered through it. For any privacy question, or to exercise a right described below, contact us at privacy@mithai.ai.

For the purposes of the EU/UK General Data Protection Regulation (GDPR), mithAI is the "data controller" of the personal data described here.

A lighter data footprint. Our public tools ask for descriptions of how your company works, not access to operational systems or copies of customer records. Do not submit passwords, credentials, personal customer or employee data, or confidential operational documents. Descriptions can still be sensitive: share only what is needed for your assessment.

Information you give us. When you fill in a form or use one of our tools, you may provide:

• Contact and inquiry details — your name, email address, company, and role (contact form).
• Strategy Sprint intake — name, email, phone number, company, title, industry, company size, and a description of your business question.
• Assessment and tool inputs — answers and the freeform business problems you submit to the AI Readiness Assessment, the Readiness X-Ray, the Agent Blueprint Builder, and the 90-Day Roadmap Generator, along with the name, email, company, and title you provide to receive results.
• Workshop surveys — your name, email, department, team size, and survey answers.

Information we collect automatically. When you browse the site we, or our analytics provider, may collect technical and usage data such as your IP address, device and browser type, pages viewed, and referring links. Non-essential analytics (see Cookies and tracking) only run after you accept them.

Information you submit to AI tools. Several tools send the text you enter to third-party AI providers to generate a result. Please don't enter information you wouldn't want processed this way — see How we share information.

• To respond to your inquiries and provide the tool or report you requested.
• To generate AI-assisted outputs (roadmaps, blueprints, assessments) from the inputs you submit.
• To send transactional and follow-up emails related to your request.
• To operate, secure, and improve our website and services.
• To contact you about our services where you have asked us to or where we are otherwise permitted to do so.
• To comply with our legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for automated decisions that produce legal or similarly significant effects about you.

Where the GDPR applies, we rely on the following legal bases:

• Consent — for non-essential analytics/tracking and optional marketing communications. You can withdraw consent at any time.
• Contract — to provide a tool, report, or service you have requested.
• Legitimate interests — to run, secure, and improve our website and to reach out about relevant services, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

We share personal data only with service providers ("processors") that help us run the website and deliver our tools, under contracts that require them to protect it. These currently include:

• Anthropic and OpenAI — to generate AI outputs from the inputs you submit to our tools.
• Resend — to send transactional and notification emails.
• Apollo.io — website analytics and visitor insights (only after you accept analytics).
• Replit-hosted Umami — page and completion analytics, when enabled, only after you accept analytics. Custom events exclude names, email addresses, and free-form answers.
• Stripe — to process payments for paid engagements.
• Microsoft (Outlook Bookings) — to schedule calls when you book a conversation.
• Our hosting and database providers — to host the site and store submissions securely.

We may also disclose information if required by law, to protect our rights or safety, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal information or share it for cross-context behavioral advertising.

We use a small number of essential cookies needed for the site to function. With your permission we also use analytics technology (Apollo.io and, when enabled, Replit-hosted Umami) that helps us understand how visitors find and use the site. Analytics do not run until you accept them through our consent banner, and you can change or withdraw your choice at any time.

We honor Global Privacy Control and Do Not Track signals. Declining analytics does not prevent you from using the tools or contacting us. Website fonts may be requested from Google Fonts independently of analytics; those requests include the connection information needed to deliver the font files.

Manage cookie preferences

We are based in, and many of our providers operate in, the United States. If you access the site from outside the United States, your information may be transferred to and processed in countries whose data protection laws differ from your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

Submitted contact details and relevant tool answers are available to our team in one restricted prospect view so we can respond with context. This view reads the original submissions rather than making another copy of your information. Some assessments retain answers and generated results even if you do not leave contact details, so please do not include identifying information in your descriptions. Workshop participation records are kept separate from the prospect view.

We keep personal data only for as long as needed for the purposes described in this policy — to respond to you, deliver and improve our services, and meet legal, accounting, or reporting requirements. When data is no longer needed, we delete or anonymize it. You can ask us to delete your data at any time (see your rights below).

If you are in the EU/UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request access and deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, email privacy@mithai.ai. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

We use reasonable technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and review our practices regularly.

Our website and tools are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Our site may link to third-party websites and services we do not control, including our products KYCintel.ai and ClarityAIQ.com. This policy does not apply to those sites; please review their own privacy notices.

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, where appropriate, provide a more prominent notice. Your continued use of the site after an update means you accept the revised policy.

Questions about this policy or your personal data? Email us at privacy@mithai.ai and we'll be glad to help.