Privacy Policy

1. Who we are

R.SPACE TECHNOLOGY LTD, a company registered in the United Arab Emirates, is the owner and operator of the Mycel platform and the Data Controller for this Privacy Policy. “Mycel” is a product operated by R.SPACE TECHNOLOGY LTD. Contact: privacy@mycell.pro

2. What data we collect

Account data: name, email, phone number, company name, billing information.

Business data: offers you create, descriptions, prices, images you upload.

Lead data: contact information of people who express interest in your offers (collected through forms, WhatsApp, AI channels). This is third-party personal data — you are the data controller for your leads; we are the processor.

Usage data: IP addresses (hashed), session data, feature usage analytics. We do not use advertising trackers.

AI Pixel data: anonymized page views and what kinds of offers people look for. Nothing that identifies a person is collected without explicit consent, and figures are only shown for groups of at least 10 people.

3. Legal basis (GDPR)

We process data under: Contract (to provide the Service); Legitimate interests (fraud prevention, security, platform improvement); Consent (marketing emails, optional AI model training). You may withdraw consent at any time.

4. How we use data

We use your data to: provide and improve the Service; send transactional emails (lead notifications, billing); detect fraud and abuse; generate anonymized aggregate insights (we never sell individual data). We do not use your data for advertising targeting on other platforms.

5. Data sharing

We share data only with: Service providers necessary to operate (Supabase/AWS for hosting, Stripe for payments, Postmark for email, Anthropic/OpenAI for AI processing) under data processing agreements; Law enforcement when legally required. We never sell data.

6. AI and your data

Content you upload (offer descriptions, images) is processed by Anthropic Claude and OpenAI to write clear descriptions, headlines and a search index for your offers. This is done under our data processing agreements. By default, your content is not used to train third-party AI models. You can opt out of all AI processing in Settings → Privacy, though this will disable AI features.

7. Using Mycel inside ChatGPT and other AI assistants

Mycel is available as an app (plugin) inside ChatGPT and through our MCP server for other AI assistants. When you use it there:

What we receive: only what the assistant sends when you use a Mycel action — your search request (for example “a property in Dubai under $600,000”), the offers you open or compare, and, if you choose to contact a seller, your message and any name, phone number or email you decide to give. We do not receive your ChatGPT account details or the rest of your conversation.

Who sees it: a message you send to a seller is delivered to that business in Mycel so they can answer you; they become the controller of that correspondence. Search requests are stored without anything that identifies you and are used only in aggregate — to improve results and to show businesses what kinds of offers people look for.

Your conversation link: when you message a seller you get a private link (mycell.pro/m/…) to read replies. Anyone with the link can read that one conversation, so do not share it. No phone number or email is needed to use it.

Retention and deletion: messages are kept while the seller’s account is active, per section 8. To delete a conversation or your contact details, email privacy@mycell.pro with your conversation link.

Mycel is not directed at children under 13, and we do not knowingly collect their data.

8. Data retention

Account data: retained while account is active + 30 days after deletion request. Lead data: retained per your account settings (default 2 years). Audit logs: 1 year. Backups: 30-day rolling.

9. Your rights

Under GDPR and UAE PDPL you have the right to: Access your data (export via Settings → Privacy → Download); Rectify inaccurate data; Erase your data (Settings → Danger zone); Port your data (JSON export); Object to processing; Withdraw consent for optional processing.

Requests fulfilled within 30 days. Contact: privacy@mycell.pro

10. Data deletion

You can delete your data at any time:

In-app: Settings → Privacy to export or delete specific data, or Settings → Danger zone to delete your entire account — this permanently removes your account, offers, leads, and connected-channel data.

By email: send a deletion request to privacy@mycell.pro from your account email. We fulfil requests within 30 days; backups purge on a 30-day rolling cycle.

Connected platforms (e.g. Meta/WhatsApp): to delete data we process via a connected account, disconnect the channel in Settings → Integrations or email privacy@mycell.pro with your account details. R.SPACE TECHNOLOGY LTD is the controller responsible for handling these requests.

11. Cookies

We use only essential cookies (session management, CSRF protection). No advertising or tracking cookies. No third-party cookie networks. Cookie preferences can be managed in your browser settings.

12. Security

We use: TLS 1.3 for all data in transit; AES-256 for data at rest; row-level security (each tenant's data isolated); regular penetration testing; SOC 2 Type II in progress. If you discover a security vulnerability: security@mycell.pro

13. Contact & complaints

DPO contact: privacy@mycell.pro
R.SPACE TECHNOLOGY LTD (operating Mycel), United Arab Emirates
EU representative: [appointed upon EU expansion]
You may also lodge a complaint with your local data protection authority.