1. Information We Collect
Account Information: Including your email address, nickname (if provided), password (encrypted storage), OAuth provider information (if using Google login).
Usage Data: Including articles you create, chat records, inspiration notes, subscription information, StarPower usage records, etc.
Technical Information: Including your IP address, browser type, device information, access time, data collected through cookies and similar technologies.
2. How We Collect Information
- Provided by You: Information you provide when registering an account, creating content, using features
- Automatically Collected: Technical information collected through cookies, log files, and similar technologies
- Third-Party Sources: Basic profile information obtained through OAuth login (such as Google)
3. How We Use Information
- Provide and Improve Services: Process your requests, provide AI features, manage subscriptions and accounts
- Product Optimization: Analyze usage patterns to improve features and user experience
- Communication: Send verification codes, service notifications, subscription updates (we won't send marketing emails unless you explicitly consent)
- Security Protection: Detect and prevent fraud, abuse, and security threats
4. Information Sharing
Service Providers: We share necessary information with third-party service providers who provide technical infrastructure, including AI model providers (OpenAI, Anthropic, Google, etc.), cloud storage services (Tencent Cloud COS), payment processors (Stripe), email services (Resend). These providers only access your information to the extent necessary to provide services.
Legal Requirements: We may disclose your information when required by law or to protect our rights, property, or safety or those of others.
Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of the assets.
5. Data Security
We take reasonable technical and organizational measures to protect your personal information, including encrypted password storage, HTTPS transmission, access control, regular security audits, etc. However, no method of Internet transmission or electronic storage is 100% secure.
6. Data Retention
We retain your personal information only for as long as necessary to achieve the purposes described in this privacy policy. When you delete your account, we will delete or anonymize your personal information unless we are required by law to retain certain information.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain sessions, remember preference settings, and collect usage statistics.
Necessary cookies (for authentication and security) and analytics cookies (to understand user behavior). You can manage cookies through your browser settings, but disabling certain cookies may affect service functionality.
8. Third-Party Services
- OAuth Login: Google (for third-party login)
- AI Model Providers: OpenAI, Anthropic, Google, etc. (processing your conversation and content generation requests based on your model selection and availability)
- Payment Processing: Stripe (processing subscription payments, we do not store your complete credit card information)
- Analytics Services: Website analytics tools that may be used (if enabled)
9. Growth and Acquisition Analytics
To understand how our content performs and which channels bring people to Muses, we collect anonymous usage signals on our public site (muses.my), and we store a single first-source record with your account when you complete registration.
- What we collect: the page path and page language on the public site, the domain name of the external site you came from, any UTM parameters carried in the link, and anonymous events for content reading depth and clicks on sign-up/sign-in buttons. When you complete registration, we store once with your account the first public-site page and language you arrived on, the referring domain and UTM parameters, and the page and button position that led you to sign up. Once written, that record is not overwritten by later visits.
- What we do not collect: this public-site analytics does not use cookies, does not create a visitor ID, a session ID, or any identifier that could link separate events back to the same person, and does not store the full referring URL — we keep only the domain name, not its path, query string, or fragment. These anonymous events contain no account information, and we do not store your IP address in the event record.
- Abuse prevention: for security and abuse-prevention purposes (such as preventing inflated traffic and forged requests), we temporarily process visitors' IP addresses for rate limiting. We do not store them in the clear, and we do not use them for analytics.
- Purpose: to evaluate content quality and the effectiveness of acquisition channels, and to improve public-site pages and product entry points. The figures are aggregated within each data source and viewed side by side; we do not use them to reconstruct an individual visitor's journey.
- Retention: anonymous public-site events are deleted 180 days after the server receives them. The first-source record stored with your account is kept for as long as your account exists, is handled together with your account when it is deleted or anonymized, and is included when you export your data.
- Processors: public-site page views and traffic sources are provided by Cloudflare Web Analytics, a separate data source that is presented alongside our own statistics and never merged with them.
- About Do Not Track (DNT): this public-site analytics uses no identifiers and does not constitute cross-site tracking, so anonymous aggregate events are still recorded when you turn DNT on. Visit statistics on our app site (app.muses.my), by contrast, are not reported when a DNT signal is detected. The first-source record stored with your account when you register is account information you actively provided, and it can be deleted together with your account.
10. Your Rights
- Right to Access: You can view your personal information through your account settings at any time
- Right to Correction: You can update or correct inaccurate information
- Right to Deletion: You can request deletion of your account and personal information
- Right to Data Portability: You can request to export your data
- Right to Withdraw Consent: You can withdraw consent to data processing at any time
11. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and discover that your child has provided us with personal information, please contact us and we will delete it promptly.
12. Cross-Border Data Transfer
Your information may be transferred to and stored on servers outside your country/region. We will take measures to ensure that your data is protected according to this privacy policy and complies with applicable data protection laws.
13. Policy Updates
We may update this privacy policy from time to time. Significant changes will be notified to you through platform notifications or email. Continued use of the service indicates your acceptance of the updated privacy policy.
14. Contact Us
If you have any questions, comments, or requests regarding this privacy policy, please contact us through the feedback feature on the platform or by sending an email to support@muses.my.