MythOS Systems Inc.

Privacy Policy

Last updated: November 2026

1. Introduction

MythOS Systems Inc. ("we," "our," or "Company") operates The Workspace ("Product," "Service," or "App") at theworkspace.ai. This Privacy Policy describes how we collect, use, store, and disclose information when you use our Service. By using The Workspace, you agree to this policy. We comply with applicable data protection laws, including the GDPR (EU/EEA/UK) and the CCPA (California).

2. Information We Collect

We collect the following categories of information in connection with the Service:

  • Business owner account information (name, email, password)
  • OAuth tokens and connection data for Google, Meta (Facebook, Instagram, Threads), LinkedIn, and X (Twitter)
  • Gmail email content and metadata
  • Instagram DMs and comments
  • Facebook Page messages and comments
  • Threads messages and content
  • LinkedIn messages and profile data
  • Google Business Profile and reviews data
  • Google Analytics data
  • SMS conversations via Twilio (business owner and customer messages)
  • Customer phone numbers and contact information
  • Square booking and appointment data
  • Square transaction and payment history
  • Customer preferences and visit history
  • Conversation logs and AI interaction history with Mylo
  • Business settings and configuration data
  • Mylo receptionist activity logs
  • Customer segmentation data
  • Google Reviews and responses
  • Communication hub conversations, threads, and message metadata
  • Audit logs of account and configuration actions
  • Expense and revenue tracking data
  • Todo and task data
  • AI-generated insights and summaries
  • Daily analytics and booking heatmap data
  • Workflow and automation configuration (e.g. n8n-related settings)

3. Mobile App and Device Permissions

The Workspace mobile app asks for the following device permissions. Each is requested only at the point it is used, and the app works without any of them apart from the feature that needs it.

  • Microphone: captures your voice only while a Mylo voice session or dictation is active. Audio is streamed to our speech provider to produce a reply and is not recorded for advertising or profiling.
  • Speech recognition: converts what you say to Mylo into text. On iOS this may be processed by Apple's speech services.
  • Photo library: only the images you explicitly pick as attachments are read. The app does not browse or index your library.
  • Location (while in use): a single coarse-to-precise reading is taken at the moment you clock in or out, so your employer can confirm the shift started on site. Location is never collected in the background, and the app does not track your movement between those moments.
  • Notifications: a push token identifying this installation, used to deliver messages about your team, schedule and customers. Deleting the app or signing out discards it.
  • Local network: used only to discover a MythOS Smart Mirror on the same Wi-Fi so you can pair with it. No local network data leaves the device.

The app stores your sign-in credentials in the operating system's secure keystore (iOS Keychain / Android Keystore). It does not use advertising identifiers and contains no advertising SDKs. It uses PostHog for product analytics, as described in section 5.

Reporting a reply. If you report a problem with something Mylo said, the reason and any note you write are stored against that reply, and a member of our team may read that conversation in order to understand what went wrong. Nothing is reviewed unless you report it. Assistant conversations are not read for any other purpose, and are never used to train a model.

4. How We Use Your Information

We use the information to provide, operate, and improve The Workspace; to sync and display communications across channels; to power the Mylo AI receptionist and insights; to process bookings and payments; to send transactional and product communications; to comply with law; and to protect our rights and users. We do not sell your personal information. We may use de-identified or aggregated data for analytics and product improvement.

5. Third-Party Services and Data Sharing

We use the following third-party services. Each has its own privacy policy governing their use of data:

  • Google: Gmail, Google Analytics, Google Business Profile
  • Meta: Facebook, Instagram, Threads
  • LinkedIn: LinkedIn messaging and profile data
  • Twilio: SMS
  • Square: Payments and bookings
  • Supabase: Database and authentication
  • OpenAI: Mylo messages, selected attachments, and relevant Workspace context for AI responses
  • Deepgram, ElevenLabs, and LiveKit: speech recognition, synthesized speech, and live voice transport
  • Apple or Google speech services: device dictation, depending on your device and speech service
  • OpenClaw: Optional LLM agent (Mylo responses)
  • n8n: Workflow automation and callbacks (when configured)
  • X (Twitter): X API for DMs (when connected)
  • PostHog (United States): product analytics for The Workspace on the web and in the mobile app

Product analytics.To learn which parts of The Workspace are used, the web app and the mobile app send PostHog a record of named actions (for example, that an invoice was sent or a page of the dashboard was opened), with counts and categories only. You are identified by your account ID and your business by its ID, never by name or email. These records never include the content of messages, your customers' details, amounts, or the full addresses of the pages you visit. There is no session recording and no tracking of clicks or typing, and nothing is sent from the pages your customers see, such as booking, payment and member pages. The data is stored in the United States and is not used for advertising.

We share data only as necessary to provide the Service (e.g., with these providers) or as required by law. We require appropriate contracts where applicable (e.g. data processing agreements).

The Workspace mobile app asks for your permission before using Mylo AI or speech features. Depending on the feature, the providers above receive your messages, selected files, relevant business context, audio, transcripts, or text to read aloud. You can withdraw this permission under Settings > Data > Mylo AI data sharing. New Mylo requests and queued messages then wait until you allow sharing again. Other Workspace features remain available.

6. SMS Communications and Privacy

MythOS Systems Inc. may send SMS communications to users of The Workspace who have provided appropriate consent. These messages may include account verification codes, security alerts, account notifications, transaction updates, service-related communications, and promotional messages where separately authorized.

Users may request one-time verification codes through the application. Optional recurring SMS notifications and marketing communications require the appropriate consent. Promotional SMS messages require separate, explicit consent and are not a condition of using The Workspace.

Message frequency varies based on account activity and communication preferences. Message and data rates may apply.

Users may opt out of SMS communications by replying STOP. For assistance, reply HELP or contact support@theworkspace.ai.

We do not sell, rent, or share mobile phone numbers, SMS opt-in data, or messaging consent information with third parties or affiliates for their marketing or promotional purposes.

We may share mobile phone numbers with trusted service providers, including Twilio, solely as necessary to deliver SMS communications and operate our messaging services. SMS opt-in data and consent information will not be shared with third parties for their own marketing purposes.

The Workspace also provides SMS communication tools that allow subscribing businesses to communicate with their customers, including through the Mylo AI receptionist. Such communications are sent on behalf of the respective businesses, which are responsible for obtaining appropriate customer consent and complying with applicable messaging laws and regulations. MythOS Systems Inc. processes this information as necessary to provide the messaging services.

7. Data Retention and Security

Deleting your account.You can delete your account at any time from Settings in the mobile app, or from the page linked below. Deletion is scheduled rather than immediate: you are signed out of every device straight away, and the account and its personal data are permanently removed 30 days later. Signing in again before that date cancels the deletion. If you own a business account, deleting it also deletes that business and the records belonging to it, including your team's access. Records we are required to keep for legal, tax or accounting reasons are retained for the period the law requires.

We retain your data for as long as your account is active or as needed to provide the Service, comply with law, or resolve disputes. We implement technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

8. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to: access, correct, delete, or port your personal data; restrict or object to processing; withdraw consent; and lodge a complaint with a supervisory authority. California residents may have additional rights (e.g., know, delete, opt-out of “sale”; we do not sell personal information). To exercise these rights, contact us at support@theworkspace.ai.

9. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards (e.g., standard contractual clauses or adequacy decisions) where required by applicable law.

10. Children

The Workspace is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us at support@theworkspace.ai.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

MythOS Systems Inc.
Product: The Workspace
Website: theworkspace.ai
Contact: support@theworkspace.ai