Privacy Policy

1. Information we collect

• Account information. When you sign in, we collect your email address and basic profile details provided by your sign-in method (for example, Google).
• Age confirmation. When you sign up, we ask you to confirm you meet our minimum-age requirement. We do not collect a date of birth.
• Content you provide. The prompts, text, writing samples, files (including images), and documents you submit to generate responses, and the conversations you save.
• Usage data. Basic technical information such as approximate request counts, token usage, timestamps, and IP-derived data used to operate, meter, and protect the Service.
• Payment information. If you subscribe to a paid plan, our payment processor (Stripe) collects and processes your billing details. We do not store your full card number; we keep only limited subscription information (such as your plan, status, and a customer identifier) needed to manage your subscription.

2. How we use your information, and our legal bases

We use your information to:

• Provide, maintain, and improve the Service.
• Generate the responses you request.
• Meter usage, secure the Service, and prevent abuse.
• Manage subscriptions and process payments.
• Communicate with you about your account when necessary.
• Comply with legal obligations and enforce our Terms.

Where the EU/UK GDPR applies, our legal bases are: performance of our contract with you (to provide the Service); our legitimate interests (to secure, operate, and improve the Service and prevent abuse); your consent (where we ask for it, such as optional Google Drive import); and compliance with legal obligations. You may withdraw consent at any time without affecting prior processing.

3. Third-party services and AI processing

We rely on trusted third parties to operate the Service. Your content and account data may be processed by these providers solely to deliver the Service:

• Google (Gemini API): processes the prompts and content you submit (including writing samples and documents) to generate AI responses. We use the paid Gemini API, under which Google does not use your content to train or improve its models. Google may retain content for a limited period only to detect abuse and meet legal requirements, as described in Google’s Gemini API terms.
• Supabase: authentication and data storage.
• Cloudflare: hosting and serving of the site (Cloudflare Workers), including limited request metrics used to operate and secure the Service.
• Weights & Biases (W&B Inference): text generated from your prompts is sent to our fine-tuned humanizer model, which is hosted on W&B Inference (running on CoreWeave infrastructure), to rewrite it in a more natural, human style.
• Stripe: processes payments and manages subscriptions if you upgrade to a paid plan, under its own privacy practices.

Each provider handles data under its own privacy and security practices.

4. International data transfers

We and our providers are based in or use infrastructure in the United States and other countries. If you access the Service from outside those countries, your information may be transferred to and processed in a country whose data-protection laws differ from yours. Where required, such transfers rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) offered by our providers.

5. Google Drive access

mimicli offers an optional “Import from Google Drive” feature so you can use one of your own documents as a writing sample. If you choose to use it:

• We request access only to the specific file you pick (the drive.file scope), and only after you click to connect. mimicli can never see any other file in your Drive.
• We read the contents of the single document you select, export it as plain text, and use it solely as the writing sample that personalizes your drafts. We do not read, modify, or delete any other files in your Drive.
• The access token and document are handled in your browser. We do not store your Google Drive files on our servers or share them with any third party, and we never sell this data.
• You can revoke mimicli’s access at any time from your Google Account permissions.

mimicli’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies

We use essential cookies only, to keep you signed in and maintain your session. We do not set advertising, cross-site tracking, or third-party analytics cookies.

7. Data retention

We retain your account information for as long as your account is active. Saved conversations and writing samples are kept until you delete them or close your account. Usage and security logs are kept for a limited period as needed to operate and protect the Service. Subscription records are kept as required for tax and accounting purposes. You may request deletion of your account and associated data at any time (see below).

8. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these, email us at admin@mimicli.com. We will not discriminate against you for exercising these rights.

EU/UK residents: you also have the right to lodge a complaint with your local data-protection supervisory authority.

California residents (CCPA/CPRA): in the past 12 months we have collected the categories of personal information described in Section 1 (identifiers, account and commercial information, internet/usage activity, and the content you submit). We collect it for the purposes in Section 2 and share it only with the service providers in Section 3 to operate the Service. We do not sell or “share” your personal information as those terms are defined under California law, and we do not knowingly sell or share the personal information of anyone under 16. You have the rights to know, delete, and correct your information and to be free from discrimination for exercising them; contact us at the address above to make a request.

Canadian residents (PIPEDA): we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may access and correct your personal information by contacting us, and you may raise a concern with the Office of the Privacy Commissioner of Canada.

9. Children's privacy

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it. Users between 13 and the age of majority should use the Service only with a parent or guardian’s involvement.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above when we do, and for material changes will take reasonable steps to notify you.

11. Contact us

Questions about this policy? Email us at admin@mimicli.com.