Last updated: Sep 16 2026
This Privacy Policy explains how Dilla Global OOD ("we," "us," "our"), the company behind MiteAI, collects, uses, and protects your personal data when you use our platform (the "Service"). We are the data controller for the personal data described below.
Contact: mite@dillaglobal.com
Registered address: Dilyanka 2a, Plovdiv
This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. What Data We Collect
| Category | Examples |
|---|---|
| Account data | Name, email address, password (hashed), account settings |
| Conversation content | Messages, prompts, uploaded files/images you send to the AI, and the AI-generated responses |
| Memory data | Information MiteAI's memory feature extracts and stores about you across conversations, to personalize future interactions |
| Connector data | Data accessed through third-party integrations you authorize (e.g., Gmail, Google Drive, Notion, Slack, GitHub, Calendar), limited to what's needed to perform the actions you request |
| Payment data | Billing details processed via Stripe (we do not store full card numbers ourselves) |
| Usage & device data | IP address, browser/device type, log data, feature usage, approximate location derived from IP |
| Support communications | Anything you send us via mite@dillaglobal.com or support channels |
2. How We Use Your Data and Our Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide and operate the Service (chat, memory, machine workflows, connectors) | Performance of a contract |
| Process payments and manage subscriptions | Performance of a contract |
| Personalize responses via the memory feature | Consent / performance of a contract |
| Maintain platform security, prevent abuse and fraud | Legitimate interest |
| Improve and monitor platform performance (aggregate usage analytics) | Legitimate interest |
| Respond to support requests | Performance of a contract / legitimate interest |
| Send service-related communications (billing, updates, security notices) | Performance of a contract / legitimate interest |
| Send optional marketing communications | Consent (you may opt out anytime) |
We do not use your conversation content to train our own AI models. MiteAI does not develop foundational models; your messages are passed through to third-party AI providers solely to generate a response to you, as described below.
3. Third-Party Processors
To operate MiteAI, we share data with the following categories of third-party processors, strictly as needed to provide the Service:
- AI model providers (Anthropic, OpenAI, Google, OpenRouter, Higgsfield, Fal AI) — receive your prompts/inputs (and relevant context such as memory or attached files) to generate AI responses and generated media. Each provider processes this data under its own terms and data processing agreement; we do not control how these providers may use data beyond what their own policies state, though we do not use these services in a way that permits them to train on your data unless a given provider's default terms say otherwise and you have not opted out where an opt-out is available.
- Hosting: Vercel (application hosting)
- Database: Neon (Postgres database hosting)
- File storage: Amazon S3 (file/image/media uploads and generated outputs)
- Payments: Stripe (subscription billing and payment processing)
- Connector/integration platform: Composio and directly-integrated third-party services (Gmail, Google Drive, Notion, Slack, GitHub, Linear, etc.) that you individually authorize
Each of these providers is contractually bound (via their own data processing terms) to handle data securely and only for the purposes we've engaged them for.
4. International Data Transfers
Some of our processors (including AI model providers and hosting infrastructure) may process data outside the EU/EEA, including in the United States. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms required under GDPR to ensure your data remains protected.
5. Data Retention
- Account data: retained for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, or accounting obligations.
- Conversation and memory data: retained to provide the Service (including cross-conversation memory) until you delete it or delete your account, at which point it is removed within a reasonable period, subject to backup cycles.
- Payment records: retained as required by applicable financial/tax law.
- You can request deletion of specific conversations, memory data, or your entire account at any time (see Section 6).
6. Your Rights (GDPR)
If you are located in the EU/EEA (or another jurisdiction with similar protections), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing, including processing based on legitimate interest
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent (e.g., memory personalization, marketing)
- Lodge a complaint with your local data protection authority (in Bulgaria, the Commission for Personal Data Protection — CPDP)
To exercise any of these rights, contact us at mite@dillaglobal.com. We will respond within the timeframes required by applicable law.
7. Cookies
We use cookies and similar technologies for:
- Essential functionality (e.g., keeping you logged in) — no consent required
- Analytics/performance (if applicable) — requires your consent via our cookie banner
- Preferences (e.g., remembering settings)
You can manage cookie preferences through our cookie banner or your browser settings. [Add link to separate Cookie Policy if you build one.]
8. Data Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and secure infrastructure via our hosting and storage providers. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information from unauthorized access, loss, or misuse.
9. Children's Data
The Service is not directed at individuals under 16 years old, and we do not knowingly collect personal data from children under that age. If we become aware that we have inadvertently collected such data, we will delete it.
10. Free vs. Paid Tiers
Data handling practices described in this policy apply equally to free and paid tiers — the free tier has functional limitations, not different data practices.
11. Changes to This Policy
We may update this Privacy Policy periodically. If we make material changes, we will notify you (e.g., via email or in-app notice) before the changes take effect. The "Last updated" date at the top reflects the most recent revision.
12. Contact Us
For any questions about this Privacy Policy or how we handle your data, contact us at:
Dilla Global OOD
Email: mite@dillaglobal.com