Privacy Policy

1. What we never receive

The MZBase app does not send us:

• your browser profiles, cookies, history, saved passwords or the vault;
• the accounts you manage, their logins or two-factor secrets;
• your workflows, scripts, files, media, prompts or AI conversations;
• the sign-ins of your AI subscriptions or your API keys.

2. What we collect

To run your MZBase account and license we process:

• Account: email address, name if you give one, a password hash, two-factor settings, sign-in times and the IP addresses of sign-ins.
• Licenses and devices: your plan, seats, sub-licenses, and for each activated device a one-way hash of its hardware id, a label you choose, and the time it was last seen.
• Team servers you register: their name, type (Cloudflare or Docker) and when they last checked in. Not the data on them.
• Downloads: your account, IP address, browser user agent, time and version of each download, and a download id written into the installer. The first activation reports that id so a copy of the app can be linked to the download.
• Update and license checks: app version, operating system and the device hash, needed to answer the check.
• Anonymous usage counts you can switch off in the app: for example which unsupported script calls were made (never their arguments or your code).
• Messages you send us: support requests, feedback and suggestions.

3. Why we use it

We use this data to provide the service you asked for (accounts, licenses, seats, downloads, updates), to keep it secure (detecting abuse of trials, licenses and downloads), to answer you, and to meet legal duties such as tax records. We do not sell personal data and we do not use it for advertising profiles.

4. Websites

mzbase.app, docs.mzbase.app and status.mzbase.app use no tracking or advertising cookies. They remember your theme and language in your browser only. Their fonts are loaded from Google Fonts, which receives your IP address when a page loads. [Owner: decide whether to self-host the fonts.]

The console (console.mzbase.app) uses one session cookie, set by api.mzbase.app, to keep you signed in.

5. Where it is processed

Our services run on Cloudflare (websites, license checks, downloads) and on a server operated for us by [VPS provider, region]. Transactional email is sent through [mail provider]. These providers process data on our behalf under their data processing terms. Data may be processed outside your country; where required, we rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep it

Account and license data: while your account exists, then up to [N] months for backups and legal records. Download and sign-in logs: [N] months. Anonymous counts: [N] months. [Owner: confirm retention periods.]

7. Your choices and rights

You can see and change your account details, devices and licenses in the console, and delete your account there. Depending on where you live (for example under the GDPR or Vietnam’s Decree 13/2023), you may also have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. Contact us to use these rights.

8. Security

Passwords are stored as hashes, connections are encrypted, and licensing tokens are signed. In the app, cookies and passwords are always stored encrypted and the vault can be locked with a PIN, password or Windows Hello.

9. Children

MZBase is not meant for children under 16, and we do not knowingly collect their data.

10. Changes and contact

We will post changes to this policy here and tell you about important ones by email or in the app.

Contact: [email protected]. [Company legal name, postal address and, if required, data protection representative.]