Privacy Policy
mxAURA is operated by Plesso Ventures LLC ("we"). This policy says what we collect, why, who else processes it, how long we keep it, and what you can ask of us. It is written to be read; if anything is unclear, write to privacy@mxaura.ai.
Who this covers
- Account holders and users: people who sign in to mxAURA.
- Contacts: people in a customer's HubSpot whom our customer messages. We process their data on the customer's behalf and under the customer's instructions.
- Readers: people who read articles on a hub embedded in a customer's website.
What we collect and why
| Data | Why |
|---|---|
| Account details: name, email, company, password (hashed), billing contact | To run your account, sign you in, and bill you |
| Content you create: articles, templates, messages, positioning, brand kits, uploaded files | To provide the service. It is yours; we do not use it to train models |
| HubSpot data you connect: contacts, lists, email templates, form submissions, via HubSpot's OAuth | To compose messages and write them into your HubSpot for sending; only the scopes you approve |
| Website addresses you connect | To publish hubs on your site and check that the embed works |
| Activity and audit logs: who changed what, when, from which IP | Security and accountability; visible to your account's administrators |
| Hub reader statistics: article views by day and hour, per site | To show you how content performs. We count views; we do not build profiles of readers, and we do not set tracking cookies on hub pages |
| Gated content leads: name, email, company, consent, which document | Collected only when a reader fills in a customer's whitepaper form, and delivered to that customer |
| Payment details | Handled by Stripe. We never see or store card numbers |
AI processing
When you use AI Assist, the text you provide and the relevant parts of your account (positioning, brand kit, the article or sequence being written, sources you attach) are sent to a model provider to produce the draft. Providers are listed below. Your content is sent for that request only and is not used by us or, under our agreements, by the provider to train models. Every AI action is logged in your account with its estimated cost.
Who else processes data (subprocessors)
| Provider | What for |
|---|---|
| Cloudflare | Hosting, networking, file storage, image processing |
| PlanetScale | Database |
| Anthropic | AI drafting, review and image description |
| OpenAI | Some AI tasks, where enabled for an account |
| HubSpot | The CRM and email sender you connect; data flows both ways under your OAuth grant |
| Stripe | Payments and invoices |
We will update this list before adding a provider that handles customer content.
How long we keep it
- Account and content: for as long as your account exists, and 30 days after deletion so a mistaken deletion can be reversed.
- Activity and audit logs: 90 days. Dispatch and email event logs: 30 days.
- Hub view statistics: daily counts are kept; hourly counts for 90 days.
- Backups: rolling, up to 30 days.
Your rights
You can export your content from the app, correct your details, disconnect HubSpot at any time (which revokes our access), and delete your account, which deletes your content after the 30-day window. People in the EU, UK and other places with data-protection laws also have rights to access, correct, erase and restrict processing, and to complain to a supervisory authority. Contacts of our customers should write to that customer, who controls their data; we will help the customer respond.
Security
Traffic is encrypted in transit. Credentials and API keys are held in a separate secrets service and never in application code. Every database query is confined to the account it belongs to. Access to production is limited to named people and logged.
Cookies
app.mxaura.ai uses a sign-in cookie and nothing else. Hub pages embedded on customer sites set no cookies. This site sets none.
Children
mxAURA is a business tool and is not directed at children under 16.
Changes
We will post changes here with a new date and, for material changes, notify account holders by email before they take effect.
Contact
privacy@mxaura.ai, or Plesso Ventures LLC, Quincy, Massachusetts, USA.