Privacy Policy
Last updated: April 17, 2026. We take your privacy seriously. Here is exactly what we collect, why, and how we protect it.
1. Who We Are
MetafyAI ("MetafyAI", "we", "us", or "our") operates the website metafyai.com and the MetafyAI platform. We provide AI commerce intelligence software to ecommerce brands.
For questions about this policy, contact us at privacy@metafyai.com.
2. Information We Collect
Account information: When you register, we collect your name, email address, company name, and password (hashed).
Product and catalog data: Data you upload or connect (product names, descriptions, attributes, pricing) to power the enrichment and visibility features.
Usage data: Pages visited, features used, clicks, and session information collected via cookies and analytics tools.
Lead form submissions: Name, email, company, and optional message when you book a demo or contact us.
Payment information: Processed via Stripe. We do not store card numbers on our servers.
3. How We Use Your Information
We use collected data to: provide and improve the MetafyAI platform; send product updates, security alerts, and support messages; process payments; and respond to inquiries.
We do not sell your personal data to third parties. We do not use your product catalog data to train AI models without explicit consent.
4. Cookies & Tracking
We use essential cookies for authentication and session management, and optional analytics cookies (e.g. PostHog) to understand feature usage. You can opt out of analytics cookies at any time via our Cookie Policy.
5. Data Retention
We retain account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where required by law.
6. Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise these rights, email privacy@metafyai.com. We respond within 30 days.
7. Security
We use industry-standard encryption (TLS 1.3) in transit and AES-256 at rest. Access to production data is limited to authorised engineers and logged.
8. Third-Party Services
We use trusted sub-processors including: Vercel (hosting), Google Cloud (infrastructure), Stripe (payments), MongoDB Atlas (database), and PostHog (analytics). Each is bound by data processing agreements.
9. Changes to This Policy
We will notify registered users via email of material changes at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance.