Privacy Policy

This Privacy Policy applies to the Musterwork website, desktop software, dashboard, support channels, and related services independently operated by an individual.

The individual Operator of Musterwork is the controller of personal data processed for account, product, support, security, and service-operation purposes. A connected provider may act as a separate controller or processor for data sent to that provider.

The information we collect depends on the features you use, the account mode you choose, and the permissions you grant.

• Account data, such as name, email address, authentication identifiers, profile details, locale, and account preferences.
• Subscription and transaction metadata, such as plan, payment status, Paddle customer or transaction identifiers, tax location, and receipt information. We do not receive or store complete payment-card numbers.
• Product content, such as prompts, messages, uploaded files, workspace selections, task instructions, tool inputs and outputs, artifacts, approvals, and feedback when those items are processed by the service.
• Usage data, such as model, feature, token or metered usage, timestamps, execution state, errors, and entitlement events.
• Device and technical data, such as application version, operating system, device or installation identifier, IP address, browser information, diagnostic logs, and security signals.
• Integration data that you authorize from connected accounts, tools, or services.
• Support and communication data that you send when asking for help or contacting us.

Musterwork is designed to work with local files and device capabilities under your control. Registering a workspace does not by itself upload every file in that folder.

A file, selection, screenshot, browser result, or other local resource may be read or transmitted when you ask Musterwork to use it, approve an action that requires it, or enable a feature whose operation clearly requires that processing.

You should review workspace scope, tool permissions, approvals, and destination providers before using sensitive material.

We use information only for legitimate product, contractual, legal, security, and support purposes.

• Create and secure accounts, authenticate users, and maintain sessions.
• Provide conversations, AI processing, tools, workspaces, automations, artifacts, integrations, and customer support.
• Measure usage, enforce subscriptions and allowances, prevent duplicate charging, and reconcile transactions.
• Detect abuse, fraud, malware, unauthorized access, and violations of law or policy.
• Maintain reliability, diagnose failures, recover durable work, and improve product quality.
• Send service, security, billing, and support communications.
• Comply with legal obligations and enforce agreements.

Where data-protection law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where a feature or law requires it.

You may withdraw consent for future processing where consent is the basis. Withdrawal does not affect processing already carried out lawfully and may prevent a feature from working.

To complete an AI request, Musterwork may send prompts, selected context, files, tool results, and related metadata to the model provider selected for that task.

In a platform-provided mode, requests may pass through Musterwork infrastructure for routing, safety, reliability, and usage accounting. In a bring-your-own-provider or connected-account mode, requests may be sent using credentials or an account you control. The interface and documentation describe the mode available for a feature.

Model providers process data under their own terms or applicable data-processing commitments. Do not assume that every model, region, or connected service offers the same retention or training controls.

Paddle acts as Merchant of Record for eligible purchases. When you begin checkout, Paddle collects and processes payment details, billing address, tax information, fraud signals, and transaction data under Paddle’s own privacy notices and buyer terms.

Musterwork receives the identifiers and status information needed to activate a plan, reconcile payment, respond to refunds or chargebacks, and provide support. Musterwork does not store complete payment-card details.

The website and dashboard may use strictly necessary storage for security, authentication, language, attribution, and product operation. With consent where required, we may also use analytics to understand aggregate usage and improve the website.

You can control optional cookies through available controls or browser settings. Blocking necessary storage may prevent sign-in or other features from working.

We do not sell personal information. We share information only where needed to provide the service, follow your instructions, secure operations, complete payment, comply with law, or support a business transaction.

• AI model, cloud infrastructure, storage, authentication, email, monitoring, support, and security providers acting under appropriate terms.
• Paddle and payment, tax, fraud-prevention, and buyer-support participants involved in a transaction.
• Connected tools or services when you authorize an integration or action.
• Professional advisers, regulators, courts, or authorities where disclosure is reasonably necessary or legally required.
• A successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice obligations.

Musterwork and its providers may process information in countries other than your own. Where required, we use contractual, organizational, or legal safeguards intended to protect transferred personal data.

The location and safeguards applicable to a third-party provider may depend on the provider, model, integration, and region you select.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including account operation, task history, security, billing reconciliation, dispute resolution, and legal compliance.

Retention differs by data category and product mode. Local-only data may remain solely on your device. Account, financial, audit, backup, and security records may be retained longer where required by law or legitimate operational needs.

When data is deleted, it may remain for a limited time in protected backups or immutable financial and security records before aging out under the applicable retention process.

We use technical and organizational safeguards designed to protect information, including access controls, encryption in transit, scoped credentials, audit records, and separation of sensitive runtime responsibilities where appropriate.

No system is completely secure. You are responsible for device security, credential protection, workspace permissions, and reviewing high-risk actions.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, and to withdraw consent or complain to a supervisory authority.

You can manage certain information in the product. For other requests, contact us from the email associated with your account. We may need to verify your identity and may retain information where law permits or requires.

Musterwork is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so that we can review and take appropriate action.

We may update this Policy as the product, providers, or law changes. We will publish the updated version with a new “Last updated” date and provide additional notice where required.