mistrobetasign in

updated September 24, 2026

privacy policy

Mistro is mission control for your projects: you talk to agents, connect the accounts a project depends on, and the agents do the work. This policy explains what information we collect to make that work, what we do with it, and your choices. Questions go to privacy@mistro.work.

what we collect

  • Account. Your email address and name. We use your email to sign you in.
  • Your work. Projects, conversations with agents, project context, files you upload, artifacts agents produce, and records of agent runs.
  • Connected accounts. The access tokens and keys for services you connect, and the data read from them to do what you ask (see below).
  • Technical data. A session cookie that keeps you signed in, and standard logs (such as visitor IP address, browser type and request times) kept by our hosting provider for security and debugging.

We do not use advertising trackers, and we do not sell your information.

connected accounts

You choose which accounts to connect and which projects may use each one. We receive only the permissions you approve on the provider’s own consent screen, and use them only to provide the features you asked for:

  • Meta (Facebook Pages, Instagram, ads). Lists the Pages, Instagram accounts and ad accounts you choose; reads posts, insights and ad results; publishes posts and manages ads only when you approve them.
  • X. Reads your profile and posts, and publishes a post only after you have approved that exact post.
  • Pinterest. Read-only access to your account, boards and pins.
  • Plaid. Read-only access to the bank accounts and transactions you link, to categorise and reconcile them. Mistro never moves money out of a bank account.
  • Shopify, Airtable, Linear. Reads store, base and issue data for the projects you connect them to, and makes changes you ask for.
  • GitHub. Reads and writes to the repositories you grant, for coding work you request.
  • Crypto wallets. Reads balances and positions. Trades execute only within limits you set, and signing keys you provide are encrypted.
  • Telegram. Relays messages between you and your agents through a bot you set up.

For data we receive from any connected account:

  • We do not sell it or use it for advertising.
  • We do not use it to train AI models.
  • We do not share it except with the service providers below, as needed to run Mistro.
  • People do not read it unless you ask us to, or it is needed for security or the law.

You can disconnect any account in Mistro, or revoke access from the provider’s own settings. Either stops Mistro using that account straight away. Stored tokens and the data read from the account are deleted when you delete your account, or sooner if you ask us.

ai processing

To answer you and do the work, agents send your messages and the relevant project material to the AI model provider that runs them: Anthropic, OpenAI or Google. Where an agent runs on an AI account of your own, that provider handles the data under your agreement with them.

service providers

  • Vercel: hosting
  • MongoDB Atlas: database and file storage
  • Resend: sign-in emails
  • Anthropic, OpenAI, Google: AI models

We may also disclose information when the law requires it, or to protect our users.

retention and deletion

We keep your information while your account is active. Finished agent conversations are deleted automatically after a short grace period, once what they established has been saved to the project. You can delete your account and all its data at any time; see data deletion. We complete deletion within 30 days.

security

Data is encrypted in transit. Tokens, keys and other credentials are encrypted at rest with a key stored separately from the database. We will tell you about a breach that affects your information.

your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, or to object to how we process it. Email us to use any of these rights.

children

Mistro is not for children under 16, and we do not knowingly collect their information.

changes

We will update the date above when this policy changes, and tell you by email or in the app if a change is significant.