MultiverseAI Logo
    Legal

    Privacy Policy

    AW3 Technology, Inc. ("we," "us," "our") operates Multiverse AI. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

    Effective Date: January 1, 2026 | Last Updated: October 16, 2026

    1. Introduction

    Welcome to Multiverse AI. We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website, applications, and services (collectively, the "Service").

    By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

    Data Controller: AW3 Technology, Inc. is the data controller responsible for your personal information. For questions about this policy or our data practices, contact us at privacy@multiverseai.com.

    2. Information We Collect

    2.1 Information You Provide

    We collect information you voluntarily provide when you:

    • Create an Account: Name, email address, password (encrypted), and profile information
    • Use AI Features: Prompts, messages, uploaded files, and generated content
    • Configure Workflows: Workflow definitions, trigger settings, and automation rules
    • Contact Support: Support inquiries, feedback, and communications
    • Make Payments: Billing information processed through our payment providers

    2.2 Information Collected Automatically

    When you access our Service, we automatically collect:

    • Device Information: IP address, browser type, operating system, device identifiers
    • Usage Data: Pages visited, features used, time spent, click patterns
    • Performance Data: Error logs, response times, service metrics
    • Location Data: Approximate location based on IP address (country/region level)

    2.3 Information from Third Parties

    We may receive information from:

    • OAuth Providers: When you sign in with Google, we receive your basic profile information
    • Connected Services: When you connect Google Workspace or other integrations (see Section 3)
    • Payment Processors: Transaction confirmation and fraud prevention data

    3. Google API Services User Data Policy

    Multiverse AI's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

    3.1 Data We Access from Google

    When you connect your Google account, we may access:

    • Gmail: Email messages, labels, and metadata (for workflow automation features)
    • Google Drive: Files and documents you explicitly select (for AI context import and content export)
    • Google Docs: Document content for export functionality
    • Google Photos: Photos and albums for workflow automation
    • Google Sheets, Slides, Docs and Forms: The files your workflows create, read or update, and the responses to forms you choose
    • Google Calendar, Tasks and Meet: Events, tasks and meeting links your workflows create, read or update
    • Google Contacts: Contacts your workflows look up, add or update
    • Google Chat: Spaces you choose and the messages your workflows post there
    • YouTube: Your channel's ID and name, and the videos you choose to upload to it (see Section 3.7)
    • Profile Information: Basic profile data for authentication

    3.2 How We Use Google User Data

    Google User Data is used exclusively for:

    • Authenticating your identity and maintaining your session
    • Executing user-initiated workflow automations (e.g., reading/sending emails you configure)
    • Exporting AI-generated content to your Google Drive or Google Docs
    • Importing documents you select as context for AI features
    • Uploading the videos you choose to your own YouTube channel

    3.3 Critical Data Segregation Commitment

    Google User Data obtained via Google APIs is NEVER sent to, processed by, or used with any third-party AI models, including but not limited to:

    • OpenAI (GPT-4, GPT-4o, or any other models)
    • Anthropic (Claude or any variants)
    • Google Gemini (when used as a third-party AI service)
    • Perplexity AI
    • Meta AI (LLaMA or any variants)
    • Any other external AI/ML service

    Our architecture ensures complete, auditable data isolation. Google User Data is stored and processed separately from data used with AI services. This segregation is enforced through separate data stores, API boundary controls, metadata tagging, and comprehensive audit logging.

    3.4 Technical Data Segregation Architecture

    To ensure compliance with Google's Limited Use requirements, we implement:

    • Separate Data Stores: Google User Data is stored in isolated database tables with strict access controls
    • API Boundary Enforcement: Our backend validates and blocks any attempt to pass Google-sourced data to AI model endpoints
    • Metadata Tagging: All data is tagged with source identifiers to ensure proper handling
    • Audit Logging: All access to Google User Data is logged for compliance verification
    • Runtime Validation: Real-time checks prevent Google data from entering AI processing pipelines

    3.5 Data Retention for Google Data

    Google User Data is retained only for the duration necessary to provide the specific feature you requested:

    • OAuth Tokens: Stored securely until you revoke access
    • Cached Data: Automatically purged within 24 hours
    • Workflow Execution Data: Retained for 30 days for debugging, then anonymized

    You may revoke Google access at any time through yourGoogle Account Permissions. Upon revocation, we immediately delete stored tokens and cached data.

    3.6 No Training on Google Data

    We do not use Google User Data to train, improve, or develop any AI or machine learning models.This includes our own internal models and any third-party models. Google User Data is used solely to provide the specific functionality you requested.

    3.7 YouTube API Services

    MultiverseAI uses YouTube API Services to publish videos to your YouTube channel when you connect one. By using these features you agree to be bound by theYouTube Terms of Serviceand acknowledge theGoogle Privacy Policy.

    • What we access: Your channel's ID and name (to show which channel is connected) and, when you or your workflow publishes a video, the upload itself with the title, description, tags, privacy setting and publish time you chose.
    • What we store: OAuth access and refresh tokens (encrypted at rest), the channel ID and name, and the ID and link of each video we upload for you. We do not download, store or analyze other YouTube content.
    • How we use it: Only to upload the videos you ask us to and to show the result to you. We do not use it for advertising or to train AI models.
    • Who we share it with: No one. The data stays in our infrastructure providers (Supabase, Lovable) and is sent only to YouTube to perform your upload. If a partner app (such as MoviePro) posts through our API on your behalf, it sees only the result of the uploads it requested.
    • Cookies and device data: Our YouTube features do not place, access or recognize cookies or other device identifiers beyond the session cookie that keeps you signed in to MultiverseAI.
    • Deletion: Disconnecting YouTube (Settings → Integrations, or your project's channels) deletes the stored tokens and channel data immediately. You can also ask us to delete it by emailing privacy@multiverseai.com; we delete it within 7 days. If you revoke access in Google's security settings, the stored tokens stop working at once, and we delete them when we next detect the revocation.

    You can revoke MultiverseAI's access to your YouTube and Google data at any time on theGoogle security settings page.

    4. How We Use Your Information

    We use collected information for the following purposes:

    4.1 Service Delivery

    • Providing, maintaining, and improving the Service
    • Processing AI requests and generating responses
    • Executing workflow automations
    • Managing your account and preferences

    4.2 Communication

    • Sending service-related notifications
    • Responding to support requests
    • Sending product updates and announcements (with your consent)
    • Security alerts and important notices

    4.3 Safety and Security

    • Detecting and preventing fraud, abuse, and security incidents
    • Enforcing our Terms of Service and policies
    • Protecting the rights and safety of users

    4.4 Analytics and Improvement

    • Understanding usage patterns and trends
    • Improving service performance and features
    • Conducting research and development

    Important: We do not use data obtained from Google APIs to improve our AI models or any generalized AI/ML systems. AI model improvements are conducted only using non-Google-API data with appropriate consent.

    5. Data Sharing and Disclosure

    We do not sell your personal information. We may share your information only in the following situations:

    5.1 Service Providers

    We share data with trusted third-party service providers who assist in operating our Service, including:

    • Cloud infrastructure providers (hosting, storage)
    • Payment processors
    • Analytics providers
    • Customer support tools

    5.2 Legal Requirements

    We may disclose information when required by law, court order, or government request.

    For any request from a public authority for users' personal data:

    • Legality review: every request is reviewed to confirm it is valid and lawful before any data is disclosed
    • Challenge: we challenge requests we consider unlawful, overbroad or unclear
    • Data minimization: when we must comply, we disclose only the minimum data the request legally requires
    • Documentation: we keep a record of each request, our response, the legal basis and the people involved
    • Notice: where the law allows, we tell affected users before disclosing their data

    5.3 Business Transfers

    In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and your options regarding your data.

    5.4 With Your Consent

    We may share information with third parties when you explicitly consent.

    5.5 Data from Meta (Facebook, Instagram, WhatsApp)

    When you connect a Facebook Page, Instagram business account or WhatsApp Business account, we receive only what the permissions you grant allow, and use it only to run the features you set up:

    • Your Page, Instagram business account and WhatsApp Business account IDs and names, and the access tokens that let us act for them
    • Messages people send to your Page, Instagram account or WhatsApp number, with the sender's ID and display name
    • Comments on your posts, and your posts' captions, media and insights
    • Ad account, campaign and catalog data, if you connect Marketing or Catalog features

    This data is processed for us by:

    • Supabase Inc. (database, storage and server functions)
    • Lovable (hosting of the web app)
    • AI model providers (OpenRouter, OpenAI, Anthropic, Google), only when a workflow you build sends message or comment text to an AI step
    • Resend, Inc., only when a workflow you build emails that content

    We never sell Meta data or use it for advertising profiles. Disconnecting Meta in Settings stops access immediately, and you can have the data deleted at any time; see Data Deletion.

    Critical: Google User Data is never shared with third-party AI service providers. This is a non-negotiable data protection commitment enforced at the technical level.

    6. Third-Party AI Services

    Multiverse AI integrates with multiple third-party AI providers. When you use AI features, content you manually provide may be sent to these providers:

    • OpenAI (GPT-4, GPT-4o, GPT-4o-mini)
    • Anthropic (Claude 3.5 Sonnet, Claude 3 Opus)
    • Google AI (Gemini Pro, Gemini Flash)
    • Perplexity AI
    • OpenRouter (routes requests to the model you choose)

    Each provider has their own privacy policies and data handling practices. We encourage you to review:

    As stated in Section 3.3, data obtained through Google APIs is never sent to these AI providers.

    7. Cookies and Tracking Technologies

    We use cookies and similar technologies to:

    • Essential Cookies: Enable core functionality and security
    • Analytics Cookies: Understand usage patterns (with consent)
    • Preference Cookies: Remember your settings and preferences

    You can manage cookie preferences through our cookie consent banner or your browser settings. For more details, see our Cookie Policy.

    8. Data Security

    We implement comprehensive security measures to protect your information:

    • Encryption: TLS 1.3 in transit; AES-256 at rest
    • Access Controls: Role-based access, principle of least privilege
    • Authentication: Multi-factor authentication, secure session management
    • Infrastructure: SOC 2 compliant cloud providers, regular security audits
    • Monitoring: 24/7 security monitoring, intrusion detection
    • Employee Training: Regular security awareness training
    • Incident Response: Documented procedures for security incidents

    For Google User Data, we implement additional isolation controls as described in Section 3.4.

    9. Your Privacy Rights

    Depending on your location, you may have the following rights:

    • Access: Request a copy of your personal information
    • Correction: Request correction of inaccurate data
    • Deletion: Request deletion of your personal information
    • Portability: Receive your data in a portable format
    • Objection: Object to certain processing activities
    • Restriction: Request restriction of processing
    • Withdraw Consent: Withdraw previously given consent

    To exercise these rights, contact us at privacy@multiverseai.comor use the data management tools in your account settings.

    10. Data Retention

    We retain your information for as long as necessary to:

    • Provide the Service and maintain your account
    • Comply with legal obligations
    • Resolve disputes and enforce our agreements

    Specific retention periods:

    • Account Data: Duration of account + 30 days after deletion
    • AI Conversation History: User-controlled, deletable anytime
    • Usage Logs: 12 months
    • Google User Data: As described in Section 3.5

    11. International Data Transfers

    Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place:

    • Standard Contractual Clauses (SCCs) for EU/EEA transfers
    • Data Processing Agreements with service providers
    • Compliance with applicable data protection laws

    12. Children's Privacy

    Our Service is not intended for children under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@multiverseai.com.

    13. California Privacy Rights (CCPA)

    California residents have additional rights under the CCPA:

    • Right to Know: What personal information we collect, use, and disclose
    • Right to Delete: Request deletion of personal information
    • Right to Opt-Out: Opt-out of "sale" of personal information (we do not sell data)
    • Right to Non-Discrimination: Equal service regardless of privacy choices

    To exercise these rights, email privacy@multiverseai.comwith "California Privacy Request" in the subject line.

    14. European Privacy Rights (GDPR)

    For users in the European Economic Area (EEA), UK, or Switzerland:

    • Legal Basis: We process data based on consent, contract performance, legitimate interests, or legal obligations
    • Data Protection Officer: Contact dpo@multiverseai.com
    • Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

    15. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes through:

    • Email notification to your registered email address
    • Prominent notice on our website
    • In-app notification

    Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

    16. Contact Us

    If you have questions about this Privacy Policy or our data practices, please contact us:

    AW3 Technology, Inc. (Multiverse AI)

    Privacy Inquiries: privacy@multiverseai.com

    Data Protection Officer: dpo@multiverseai.com

    General Support: support@multiverseai.com

    Website: https://multiverseai.com