← Back
Mistol

Privacy Policy

Your data remains yours. Here's how we protect it.

Last updated: May 5, 2026

1. Introduction

Mistol AI ("Mistol," "we," "us," or "our") operates the website mistol.ai, the Mistol workspace application, and a personal-AI service delivered over SMS and iMessage. This Privacy Policy explains how we collect, use, disclose, and safeguard your information across all of those surfaces. By accessing or using Mistol, you agree to this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, phone number, email address, and profile picture (if you sign in with Google or Microsoft). We use this to authenticate you, deliver SMS and iMessage replies, and personalize your experience.

Messaging Content (SMS / iMessage)

When you text Mistol, we receive and store the content of your messages, your phone number, message timestamps, and basic delivery metadata from our messaging provider. We use this content to respond to you, maintain conversational context, and provide the personal-AI features you signed up for.

Voice Notes, Screenshots, and Images

If you send Mistol a voice note, screenshot, photo, or other media, we process and store that content to transcribe, understand, and respond to it. Voice audio is transcribed using a third-party speech-to-text provider and the resulting transcript is treated as message content.

Long-Term Memory

To provide continuity across conversations, we store vector representations (embeddings) of things you tell Mistol in a managed vector database, namespaced to your account or phone number. These memories are used solely to give Mistol context when you message it again. You can request deletion at any time.

Connected Integration Data

If you connect third-party services such as Gmail, Google Calendar, or Microsoft Outlook, we access only the data needed to perform the actions you request (for example, reading your inbox to summarize it or creating a calendar event). We do not use this data for advertising, do not sell it, and do not use it to train generalized AI models. Use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Usage Data

We automatically collect information about how you interact with Mistol, including pages visited, features used, timestamps, device type, browser type, and IP address.

Third-Party Sign-In

If you sign in using Google or Microsoft, we receive basic profile information (name, email, profile photo) from those services. We do not receive your passwords from these providers.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate your identity and manage your account
  • Respond to your messages and provide AI-powered features, including memory and continuity across conversations
  • Deliver SMS and iMessage replies through our messaging providers
  • Execute actions on connected integrations at your request
  • Send service-related communications (account updates, security alerts)
  • Send marketing communications if you opt in (you can unsubscribe anytime)
  • Monitor usage patterns to improve performance and reliability
  • Detect and prevent fraud, abuse, or security incidents

4. How We Share Your Information

We do not sell your personal information. We share information only with the categories of providers described below, each bound by confidentiality and data-protection obligations:

  • Messaging & Telecom Providers — third-party providers (and their underlying mobile carriers) that deliver SMS and iMessage on our behalf. Your mobile carrier will see message metadata as required to route messages.
  • AI Model Providers — third-party AI providers process the content of your messages to generate responses. These providers operate under agreements that prohibit them from using your content to train their public models.
  • Vector Memory & Embeddings — third-party providers used for long-term conversational memory and embedding generation.
  • Hosting & Infrastructure — third-party providers used for database, authentication, file storage, and web hosting.
  • Analytics & Operations — limited analytics and operational tooling used to keep the service reliable.
  • Legal Requirements — if required by law, regulation, legal process, or governmental request.
  • Business Transfers — in connection with a merger, acquisition, or sale of assets.

A current list of named sub-processors is available on request at privacy@mistol.ai.

5. Messaging Services (SMS / iMessage)

When you opt in to message Mistol over SMS or iMessage — by texting our number, entering your phone number on our website, or replying to a Mistol-initiated message — you consent to receive messages from Mistol at the phone number you provide. Message frequency varies based on your usage. Message and data rates may apply from your carrier.

You can stop messages at any time by replying STOP. You can request help by replying HELP. We do not share opt-in information or mobile phone numbers with third parties for their own marketing. Carriers are not liable for delayed or undelivered messages.

6. Connected Integrations

Mistol can connect to Gmail, Google Calendar, Microsoft Outlook, and other services you authorize. When you connect an integration:

  • We request only the scopes needed to perform the actions you ask Mistol to take.
  • You can disconnect an integration at any time from your settings; we will stop accessing data from that service going forward.
  • Data retrieved from these integrations is used solely to fulfill your requests and is not used to train generalized AI models or for advertising.
  • Use of data from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements.

7. International Data Transfers

Mistol is operated from Canada. Some of our service providers are based in or operate infrastructure in the United States and other jurisdictions. By using Mistol, you understand that your information may be transferred to, stored in, and processed in countries other than your own. We rely on appropriate safeguards (such as standard contractual clauses, where applicable) to protect your information during such transfers.

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encryption at rest, secure authentication, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Conversation history, voice transcripts, and long-term memory entries are retained to give Mistol continuity across conversations. You can request deletion of your account, your messaging history, your stored memories, or specific items at any time by contacting us at privacy@mistol.ai.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to or restrict processing of your information
  • Request a portable copy of your data
  • Withdraw consent at any time

To exercise these rights, contact us at privacy@mistol.ai.

11. Cookies

We use essential cookies to maintain your authentication session. We do not use advertising cookies or sell data to advertisers. Analytics cookies may be used to understand usage patterns and improve our service.

12. Children's Privacy

Mistol is not intended for anyone under 18. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have collected information from a child under 18, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Mistol after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Mistol AI
Email: privacy@mistol.ai
Calgary, Alberta, Canada