Privacy policy

Last updated October 13, 2026

MessageMediator ("we") helps a member send a reviewed email or text message to another person and helps that person reply. This policy explains exactly what the service stores and why. Questions or requests: use the contact form.

What we collect

• Your account. Your email address (verified through our network sign-in), the name you choose to show recipients, your network account id, your settings, and the date you joined.
• Your messages. For every message: the text you first wrote (your original), the reviewed text that was delivered, the subject, the AI review results (scores, suggestions, the calmer rewrite), which suggestions you accepted, timestamps, and delivery, delivered and read status.
• Your recipients. The name you give each person and their email address or mobile number, so we can deliver and route replies. Addresses are also stored as a one-way keyed hash to honour opt-outs and blocks.
• Replies. Replies sent to you through the reply page, by email or by text, including the reply as the other person wrote it and the reviewed version delivered to you. The other person's original is kept for their record; we show you the reviewed version.
• Attachments. Files you attach to an email (photos, PDFs, plain text, up to 5 MB each) and attachments that come back in email replies, stored privately.
• References. Dates, amounts, commitments and attachment names extracted from messages to build your record.
• Payments. Your credit balance, purchases and plan status. Card details are handled by Stripe; we never see or store full card numbers.
• Voice and media. Voice notes you record are transcribed and then discarded (the audio is not stored). Photos and videos you attach are stored privately and checked for safety before delivery; for videos we receive a few still frames from your browser and transcribe the soundtrack. Read-aloud audio is generated on request and not stored.
• Mediation rooms and Align. Posts, your private notes (visible only to you), summaries and agreements in rooms you create or join. If you opt in to Align: the display name, values, interests, region and short introduction you choose to share, and your introductions. You can withdraw from Align at any time.
• Organizer and desks. Follow-ups, commitments, and the schedule, expense and other entries you add.
• Abuse prevention. Counters for rate limits (keyed by your account, and briefly by IP address for a few public forms), Cloudflare Turnstile checks, reports and blocks.
• Contact form and newsletter. Your name, email and message if you contact us; your email and subscription status if you subscribe.

Calls

For calls we process: the names people join with, who was on the call and for how long (to meter credits), live captions, the AI mediator's notes, the summary and agreement, and audio recordings only when everyone agreed. Audio and video travel through Cloudflare Realtime and are not stored unless recorded. Captions are produced by your browser's speech service (where available) or by our transcription service. Recordings are encrypted with our key before storage and deleted after the host's retention period (30 days by default).

Read receipts

A message counts as "read" when the recipient opens its private reply page. We do not use tracking pixels. Recipients can turn read receipts off on that page.

Cookies

We use a sign-in session cookie, a short-lived cookie during network sign-in, and Cloudflare Turnstile's anti-bot check. No advertising or cross-site tracking cookies.

Who processes your data

• Cloudflare: hosting, database, private file storage, a backup AI model (Workers AI) and bot protection.
• Anthropic: the Claude models that review messages, write mediation summaries and answer the Ask box. Messages are sent for review only, and not used by us to train models.
• ElevenLabs: reads messages aloud when you ask (the text only).
• Resend: delivers email. Twilio: delivers and receives text messages. Stripe: payments.
• Our network sign-in service: one account shared by the sites in our network (email address and network id only).

We never sell your data, share it with advertisers, or use message content for marketing.

Who can see what

• You see your messages (original and reviewed) and the reviewed versions of replies.
• Your recipient sees the reviewed messages you sent them and their own replies (including their originals) through their private link. Anyone holding that link can see that conversation, so keep it private.
• If you share a mediation summary, the other person can see it.
• Our team accesses messages only to investigate abuse reports, at your request, or when the law requires it.

How long we keep it

Your record is kept until you delete it, or for the period you choose in Settings (30 days to 3 years), after which older messages are removed automatically. Data is stored on Cloudflare's infrastructure, which encrypts it at rest; it is not end-to-end encrypted, because the AI review needs to read the text you ask it to review. You can delete drafts at any time and delete your whole account in Settings, which removes your account, contacts, conversations, messages, references and files. Opt-out records are kept as hashes so opt-outs keep working. Payment records are kept as the law requires.

Your rights

You can export any conversation as a PDF and all your data as a file from Settings, correct your name, and delete your account. For other requests (access, correction, deletion, objection) use the contact form. If you are a recipient and want your data removed, contact us with the private link you received.

Children

MessageMediator is for people 18 and older.

Security

Data is encrypted in transit and stored on Cloudflare's encrypted infrastructure. Files are private and served only to the conversation's participants.

Changes

We will post changes here and, for significant changes, tell members in the app.