moreismore
Back to home

Privacy Policy

Effective: 2026-08-06

DRAFT — NOT LEGALLY REVIEWED. Do not open the platform to paying customers on this text.

Placeholder so the portal serves moreismore content instead of MTG's defaults. Start from mtg-system/docs/reference/content-page-templates/b2b/legal/privacy.md, then have it reviewed together with the DPA in the same directory.

The data inventory has to be reconciled to what this platform actually stores, which is split across four systems that each hold something different:

  • MTG (this server) — account identity: email, password hash, sessions, 2FA, Stripe customer linkage, GDPR export artifacts in MinIO.
  • The control plane (Modal + Neon, Frankfurt) — a customer row keyed to the MTG user id, API key hashes (never the keys), the append-only token ledger, per-API spending caps. Raw keys are shown once and stored only as SHA-256 (src/mim/control/keys.py).
  • The console's own database (this server) — product documentation and catalogue copy. No personal data; it is here because it is the only copy.
  • Stripe — payment data. Card details never reach our systems.

Two things a template will not say and a reviewer will ask about:

  • Customer content passes through inference. Audio submitted to speech-to-text and text submitted to speech synthesis are processed on GPU workers. State the retention truthfully — including that request metadata (request_id, billed tokens, timestamps) is retained in the ledger for billing, because an append-only ledger is exactly the kind of record a deletion request runs into.
  • Erasure meets an append-only ledger. A GDPR erasure removes the MTG identity, but the ledger is append-only by design and is the billing record. Say what is deleted, what is retained under a legal-obligation basis, and for how long — do not promise a hard delete the architecture will not do.

Sub-processors to name: Modal (compute, EU region), Neon (Postgres, Frankfurt), Hetzner (this server), Stripe (payments), Postmark (transactional email).

LEGAL_PRIVACY_VERSION in the Coolify environment must keep matching the version above.

Placeholder

The privacy policy for this platform is being finalised. For any question about your personal data, or to exercise a data-subject right, contact info@moreismore.cz.