Privacy and Data
MAH Privacy and Data Policy
This policy explains how MAH handles account, billing, usage, support, and optional product-feedback data. Local project files, task text, repository content, and agent output are not uploaded to MAH marketing or billing services by these flows.
Last updated October 6, 2026
These links open MAH App on this Mac. They work only after MAH App is installed and signed in; in a browser without MAH App, nothing opens. If you cannot open Privacy in MAH Workbench, you can Review Account Setup Path or Prepare Privacy Request in this browser. The request draft does not perform an export or deletion.
Installer Access and Update Records
MAH records release versions, admitted download sessions, transferred bytes, and App- and CLI-reported verification and installation results to enforce account download limits and support interrupted downloads. Records use internal account references and contain no local project or task content. Website sign-in uses a short-lived, necessary session cookie. Download and result records become eligible for automatic deletion after 90 days. Download-count history becomes eligible for deletion 24 hours after the last admission; limited denial logs use fixed categories and are retained for seven days; expired sign-in sessions and one-time login state are also automatically cleared.
Data MAH Handles
MAH may handle a verified account email and sign-in identity; package, billing status, seats, account machines, and monthly agent-time totals; purchase and subscription lifecycle records; support and launch-interest correspondence you choose to send; and privacy-filtered Device Feedback only when anonymous sharing is on. Payment card details are entered and held by the billing provider, not the MAH public site.
How MAH Uses Data
MAH uses this data to authenticate the signed-in account, bind purchased resources, process and reconcile subscriptions, show current usage, enforce account limits, prevent duplicate purchases and abuse, deliver transactional account messages, recover failed account actions, provide support, understand direct launch interest, and improve product reliability from optional feedback.
Local Project and Agent Data
MAH marketing, account, billing, and customer-lifecycle services do not collect local project files, repository content, knowledge-base content, task text, or agent output. Third-party AI agent services process only the information you choose to send through them and remain governed by their own privacy terms.
Cookies and the Public Site
Download and account-bound purchase flows may use short-lived, strictly necessary HttpOnly cookies to preserve verified access and return safely from Checkout. A purchase does not require optional analytics or marketing consent. Any optional analytics or marketing technology must require its own consent and must not collect local project or task content.
Service Providers and Disclosure
MAH uses service providers for Google sign-in, Stripe billing, cloud hosting, transactional communication, and the AI agent services selected by the user. MAH shares only the data needed for the relevant service, legal obligation, security response, or authorized support request. MAH does not sell customer account data, billing data, usage data, or Device Feedback data.
Retention and Deletion
MAH retains account, subscription, usage, support, and feedback records only while needed to operate and secure the service, meet billing or legal obligations, or resolve a request. Customer-record deletion removes MAH customer lifecycle and reminder records and blocks those records from being rebuilt. MAH account deletion is a separate verified request. A minimal deletion proof or records required for fraud prevention, accounting, or law may remain, and third-party providers keep data under their own policies.
Security
MAH limits private account and billing actions to authenticated account principals, keeps payment and purchase identifiers server-side, uses signed account context for Checkout, and exposes privacy-minimized usage and feedback projections to product surfaces. No system can promise absolute security; contact MAH promptly if account or data access appears incorrect.
Your Choices and Requests
Use the links and product controls listed on this page to manage billing, anonymous Device Feedback, customer-record export, customer-record deletion, and MAH account deletion requests. Email hello@mah.bot from the address associated with your account to ask about access, correction, deletion, or another privacy concern. MAH may need to verify the account before acting on a request.
Policy Changes
MAH will update the date on this page when this policy changes. Material changes to how MAH handles account, billing, usage, support, or feedback data will be reflected here before they become part of the released product path.
Need help with a privacy request?
Email hello@mah.bot from the email associated with your account and describe the request. Do not send payment card details, account tokens, sign-in credentials, purchase links, project files, task text, or agent output.
No local email app? Copy the complete recipient, subject, prompts, and safety guidance, then paste them into any email service.
