Last updated: May 1, 2026 · GDPR & UAE PDPL compliant
R.SPACE TECHNOLOGY LTD, a company registered in the United Arab Emirates, is the owner and operator of the Mycel platform and the Data Controller for this Privacy Policy. “Mycel” is a product operated by R.SPACE TECHNOLOGY LTD. Contact: privacy@mycell.pro
Account data: name, email, phone number, company name, billing information.
Business data: offers you create, descriptions, prices, images you upload.
Lead data: contact information of people who express interest in your offers (collected through forms, WhatsApp, AI channels). This is third-party personal data — you are the data controller for your leads; we are the processor.
Usage data: IP addresses (hashed), session data, feature usage analytics. We do not use advertising trackers.
AI Pixel data: anonymized page views and intent signals. No PII collected without explicit consent. K-anonymized (minimum 10 users per intent bucket).
We process data under: Contract (to provide the Service); Legitimate interests (fraud prevention, security, platform improvement); Consent (marketing emails, optional AI model training). You may withdraw consent at any time.
We use your data to: provide and improve the Service; send transactional emails (lead notifications, billing); detect fraud and abuse; generate anonymized aggregate insights (we never sell individual data). We do not use your data for advertising targeting on other platforms.
We share data only with: Service providers necessary to operate (Supabase/AWS for hosting, Stripe for payments, Postmark for email, Anthropic/OpenAI for AI processing) under data processing agreements; Law enforcement when legally required. We never sell data.
Content you upload (offer descriptions, images) is processed by Anthropic Claude and OpenAI to generate DNA, hooks, and embeddings. This is done under our data processing agreements. By default, your content is not used to train third-party AI models. You can opt out of all AI processing in Settings → Privacy, though this will disable AI features.
Account data: retained while account is active + 30 days after deletion request. Lead data: retained per your account settings (default 2 years). Audit logs: 1 year. Backups: 30-day rolling.
Under GDPR and UAE PDPL you have the right to: Access your data (export via Settings → Privacy → Download); Rectify inaccurate data; Erase your data (Settings → Danger zone); Port your data (JSON export); Object to processing; Withdraw consent for optional processing.
Requests fulfilled within 30 days. Contact: privacy@mycell.pro
You can delete your data at any time:
In-app: Settings → Privacy to export or delete specific data, or Settings → Danger zone to delete your entire account — this permanently removes your account, offers, leads, and connected-channel data.
By email: send a deletion request to privacy@mycell.pro from your account email. We fulfil requests within 30 days; backups purge on a 30-day rolling cycle.
Connected platforms (e.g. Meta/WhatsApp): to delete data we process via a connected account, disconnect the channel in Settings → Integrations or email privacy@mycell.pro with your account details. R.SPACE TECHNOLOGY LTD is the controller responsible for handling these requests.
We use only essential cookies (session management, CSRF protection). No advertising or tracking cookies. No third-party cookie networks. Cookie preferences can be managed in your browser settings.
We use: TLS 1.3 for all data in transit; AES-256 for data at rest; row-level security (each tenant's data isolated); regular penetration testing; SOC 2 Type II in progress. If you discover a security vulnerability: security@mycell.pro
DPO contact: privacy@mycell.pro
R.SPACE TECHNOLOGY LTD (operating Mycel), United Arab Emirates
EU representative: [appointed upon EU expansion]
You may also lodge a complaint with your local data protection authority.