Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — your name and email, and a provider identifier if you sign in with Google.
• Content you create — projects, tasks, plans, comments, and the prompts you send to our AI features.
• Anonymous draft data — plans generated on the landing page before you sign up, tied to a temporary cookie identifier rather than to your identity.
• Technical and usage data — IP address, device and browser information, and basic logs we use for security, rate limiting, and debugging.

2. How we use your information

We use the information above to:

• provide, maintain, and improve the Service;
• power AI features such as plan and task generation;
• protect the Service — including bot protection, rate limiting, and abuse prevention;
• communicate with you about your account and important changes.

3. AI providers and your prompts

Masaro’s planning features are powered by third-party AI providers (currently Anthropic). When you use these features — including the anonymous chat on our landing page — the prompts and related content you submit are sent to the provider so it can generate a response. We share only what is needed to produce the output you requested.

AI providers process this data under their own terms and security practices. We select providers that do not use submitted content to train their general models except where their terms or your settings allow it. Avoid including sensitive personal information in prompts, since AI output and the prompts that produce it may be processed outside our systems.

4. Cookies

We use a small number of strictly functional cookies: a session cookie to keep you signed in, and a temporary anonymous-draft cookie so we can return your in-progress plan if you sign up. We do not use advertising or cross-site tracking cookies.

5. How we share information

We do not sell your personal information. We share it only with service providers who help us operate Masaro — such as hosting, database, AI, authentication, and real-time messaging providers — and only as needed to deliver the Service. We may also disclose information where required by law or to protect the rights, safety, and security of Masaro and its users.

6. Data retention

We keep account data for as long as your account is active or as needed to provide the Service. Anonymous drafts are short-lived and are deleted automatically after a brief period. When you delete your account, we delete or anonymize associated personal data, except where we must retain it to comply with legal obligations.

7. Data security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

9. International transfers

We and our service providers may process your information in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

10. Children’s privacy

Masaro is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy as the Service evolves. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

12. Contact

Questions about your privacy or this policy? Reach us at [email protected].