Privacy Policy

This policy explains what msger collects, how we use it, who we share it with, and the choices you have. msger is operated by Memorality Inc.

What we collect

We collect only what we need to run the service:

• Account. Your email address (used for magic-link sign-in), your name, and any optional profile details you add, such as a LinkedIn URL or photo.
• Founder & startup profile. The company details you provide — name, tagline, description, stage, sector, geography, traction, and links — along with the pitch text and the AI-synthesized narrative we generate from them.
• Uploads.Pitch decks you upload (PDF, PPT, PPTX, Keynote, Pages, or DOCX, up to 25 MB) and the text we extract from them.
• Connected ChatGPT/Claude accounts. If you choose to contribute research, the OAuth tokens you authorize. We use them only to run research you start, and we never receive your provider password.
• Payments. When you buy credits or a Fundraise Pass, Stripe processes the payment. We store the purchase record (amount, credits, and status) but never your full card number.
• Usage & analytics. Basic usage metadata and, only with your consent, Google Analytics events.

Cookies & analytics

We use a small number of cookies and similar storage. Essential ones keep you signed in (session cookies) and remember your theme preference (stored in your browser). For analytics we use Google Analytics 4 under Consent Mode v2: it defaults to deniedand only loads after you choose "Accept" in the cookie banner. Your choice is saved in your browser, and you can change it at any time by clearing your site data.

How we use it

To operate the service: authenticate you, build and show your investor matches and AI-twin feedback, process payments and credits, run the research you initiate, prevent abuse, and — with your consent — measure traffic so we can improve msger. We don't sell your personal data.

How we share it

We rely on the following service providers, each of which processes data under its own terms:

• Resend — sending sign-in and transactional email.
• Stripe — processing payments.
• Cloudflare R2 — storing your uploaded files.
• Google Analytics — measuring traffic, only after you consent.
• Google (Gemini embeddings) — generating the vectors that match founders to investors.
• Anthropic / OpenAI — only via the account you choose to link, to run the research you start.
• RapidAPI — fetching public LinkedIn information used to build investor profiles.

Investor data & AI twins

Investor profiles and their AI twins are built from publicly available information about how each investor invests and what they've said publicly. A twin is an AI approximation for practice and feedback — it is not the real person and may not reflect their actual views.

How we protect it

Connected-account tokens are encrypted at rest with AES-256-GCM, and the decryption key is stored separately from the database. API keys are stored only as hashes. Traffic is served over HTTPS, and uploaded decks live in a private bucket served through short-lived, signed links.

Retention & your choices

You stay in control of your data:

• Unlink any connected account at any time, which revokes its tokens.
• Delete an uploaded pitch deck from your dashboard.
• Opt out of product and marketing email (essential transactional email still sends).
• Withdraw analytics consent by clearing your site data.
• Request deletion of your account and associated data by emailing us.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to our use of your personal data. To exercise any of these, email privacy@msger.ai and we'll help.

Eligibility

msger is intended for business use by people aged 18 or older. It is not directed to children.

Changes

We may update this policy as the product evolves. Material changes will be reflected here, with the "Last updated" date above.

Contact

Privacy questions? Email privacy@msger.ai.