Privacy Policy

MAINS (“we,” “us”) operates the multi-AI orchestration platform at mains-ai.app. Contact us at hello@mains-ai.app for any privacy question.

We collect three categories of information:

• Account data — your email address, authentication tokens, and any profile information you provide.
• Your content — the scope cards, threads, prompts, decisions, and AI responses you create while using MAINS. This content is stored in your private vault. MAINS staff do not read, review, or access it in the course of normal operations. The sole exception is a valid legal order (such as a court order or formal law enforcement request), in which case we will notify you in advance wherever the law permits us to do so.
• Usage and device data — IP address, browser type, pages visited, and basic interaction events. We use this for security, debugging, and improving the Service.

• To create and authenticate your account
• To deliver the Service — store your projects, route your prompts to AI providers, return responses
• To bill you for paid plans (if you upgrade)
• To send essential account email (security alerts, billing receipts, important policy changes)
• To detect and prevent fraud, abuse, and security incidents
• To comply with our legal obligations

We rely on the legal bases of contract performance, legitimate interest, and your consent — depending on the activity and your jurisdiction.

When you direct MAINS to send a prompt to Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), or any other provider, we forward exactly what you sent and store the response in your project. Those providers are independent data processors with their own privacy policies and data handling practices. We encourage you to read theirs:

• Anthropic Privacy Policy
• OpenAI Privacy Policy
• Google Privacy Policy

On paid tiers, you supply your own API keys (BYOK). Provider terms apply directly between you and the provider in that mode.

When you enable Web Browsing on a thread, the AI participants you dispatch also receive a coarse, IP-derived approximate location (city/region/country and timezone) so they can answer “local” questions like weather or the current time without you typing your location every time. This is the same kind of approximate location any website can infer from your network connection — not GPS, not precise tracking. It's sent only to the AI providers you've dispatched on that thread, the same way your prompts are, and is never stored separately from that request.

We use a small number of vetted infrastructure providers to run the Service. They process data on our behalf under contract:

• Google Firebase — authentication, database (Firestore), and hosting
• Netlify — site delivery and edge functions
• Fastmail — receives email you send to hello@mains-ai.app
• LemonSqueezy (when paid plans launch) — payment processing and checkout

• We don't sell your personal data
• We don't use Your Content to train any AI models
• We don't read, review, or access the content of your vault (except where required by a valid legal order — see Section 2)
• We don't share Your Content with anyone other than the providers you direct
• We don't use third-party advertising or marketing tracking on the platform

We keep account data and Your Content for as long as your account is active. If you delete your account, we delete or anonymize your data within 30 days, except where we're required to retain it for legal, tax, or security reasons (typically up to 7 years for billing records).

Backups roll off on a 30-day cycle.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and your data
• Export Your Content in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on it
• Lodge a complaint with your local data protection authority

Email hello@mains-ai.app to exercise any of these rights. We'll respond within 30 days.

We use industry-standard measures to protect your data — encryption in transit (TLS) and at rest, access controls, and regular review of our infrastructure. No system is perfectly secure; if we discover a breach that affects your data, we'll notify you and the relevant authorities as required by law.

We use a small number of strictly necessary cookies to keep you logged in, remember your preferences, and protect against abuse. We don't use advertising or analytics cookies that follow you across sites.

MAINS infrastructure runs on providers with global data centers. Your data may be transferred to and processed in countries other than your own, including the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards approved by your jurisdiction's regulator.

MAINS is not intended for children under 16. We don't knowingly collect data from anyone under that age. If you believe a child has provided us with personal data, email hello@mains-ai.app and we'll delete it.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top reflects the most recent revision.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

© 2026 MAINS. All rights reserved.

See also our Terms of Service.