# Workspace privacy

Canonical page: https://mitchi.app/product-privacy

Learn how Mitchi handles account details, projects, designs and workspace files, including cloud sync and connected AI services.

## Privacy for the Mitchi workspace

Updated October 27, 2026. Mitchi is operated by Mitchi. For account, privacy, or deletion requests, email [Mitchi support](mailto:work@zadlab.com).

## Your account and work

Mitchi uses your account email and sign-in information to open your workspace. Projects, editable designs, campaign messages, settings, and supporting files sync with the hosted Mitchi account backend. The Mac app also uses local working files. Your account separates your workspace from other customers' workspaces.

## License activation

We store a hash of each activation key, the account linked to it, license limits, publishing entitlement, and activation events. The app computes a Mitchi-specific hash of your Mac's hardware identifier for device checks. It sends this hash, your device name, and activation timestamps to the license service. The raw hardware identifier is not sent to the service. You can rename or deactivate your listed devices from Account settings. Deactivation frees a slot and does not delete your synced work.

## Purchases

Enter your email on the pricing page to start a purchase. After payment, your license is attached to a Mitchi account and a secure sign-in link is emailed to you. Secure, HTTP-only account cookies keep you signed in and refresh your session for up to 30 days. Signing out removes these cookies.

Stripe handles payment details on its hosted checkout. Mitchi receives your purchase email, payment and checkout references, payment status, amount, and currency to issue and administer your license. Mitchi does not receive or store your full card number or security code. A secure, HTTP-only checkout cookie lets the browser that started a purchase retrieve its activation key. This cookie lasts up to 30 days and is used for payment confirmation, not advertising. Full refunds deactivate the license associated with that purchase.

## Services you choose to use

Creative requests and the context needed for those requests go to the AI service connected to your app. That service has its own privacy terms and usage rules. Publishing sends the selected content and account information to Mitchi's hosted Postiz service and the social platform. Postiz stores social credentials, channel information and the publishing content you send. Disconnect a channel in Apps → Social accounts → Disconnect account. Published platform posts remain. The [social deletion instructions](https://mitchi.app/data-deletion) explain how to request deletion of retained connection and publishing data. Google Ads and Meta Ads connections use a separate hosted connection service. Its credential handling and deletion process are described in the [connection privacy notice](https://mitchi.app/privacy).

## Website analytics and advertising

With your permission, the public Mitchi website uses Google Analytics and a dedicated, self-hosted Umami installation to compare visits and purchases by traffic source. Advertising permission separately enables Meta Pixel to measure Facebook and Instagram campaigns. These optional tags stay off until you choose to enable them. Use Privacy choices in the website footer to change or withdraw your choice.

Analytics may include public page visits, campaign tags, referring websites, download and support-link clicks, checkout starts, and confirmed purchases. Purchase events contain an opaque order reference, amount and currency. Campaign attribution records the first source and most recent tagged campaign. We do not send your email, activation key, authentication or checkout token, payment-card details, designs or project content to these trackers. Private sign-in, account and connection pages do not load the tags. The payment-confirmation page sends a purchase event only after the server verifies a paid order. We do not enable session recordings or identify visitors using Mitchi account details.

Google Analytics and Meta may use their own cookies after your permission. Umami is operated on Mitchi's server. Your privacy choice is stored in this browser for 180 days; campaign attribution is kept for up to 30 days, and opaque purchase references for 90 days to reduce duplicate reporting. Essential account and checkout cookies remain available when optional tracking is rejected. Blocking tracking or declining permission does not prevent purchasing or using Mitchi.

## Storage and your choices

Account and project data is retained to provide your workspace. License and device records are retained for activation, device limits, and license administration. Infrastructure processes technical logs needed to operate and protect the services. The app stores authentication state to keep you signed in.

Email us to request access to or deletion of account data, or to resolve an activation problem. We may verify that you control the account before acting. Removing a social connection and deleting your Mitchi account are separate requests. Export the designs you need before requesting account deletion.
