Privacy Policy

011. Our Privacy Principles

• Local-first by design. The MeghaOS desktop software processes your content on your own device. In ordinary local use it does not send your conversations, files, or documents to MeghaOS Inc.
• Minimal collection. On the Site we collect only what you choose to submit (for example, to join the waitlist or contact us), standard technical logs, and aggregate analytics about how the Site and our downloads are used.
• No sale of personal data. We do not sell your personal information, and we do not use your prompts, files, or conversations to train our AI models.
• You are in control of integrations. The software connects to third-party services only when you choose to enable them, and only sends what those features require.

022. Information We Collect, by Product

2.1 The Website (meghaos.ai)

Information you submit. When you use our waitlist form we collect your name, email address, the product you are interested in, and any optional notes. When you use our contact form we collect your name, email address, subject, and message. These submissions are stored in Google Firebase Realtime Database and are configured so that they cannot be publicly read.

Information collected automatically. Our hosting provider records standard server logs, including your IP address, browser type, device and operating system, referring page, and access times, which we use to operate, secure, and troubleshoot the Site. When you submit a form, we also record your browser user-agent string to help prevent spam and abuse.

Analytics. We use two analytics services on the Site.Cloudflare Web Analytics is a privacy-first, cookieless service that measures aggregate traffic without cookies, cross-site tracking, profiling, or fingerprinting. We also use Google Analytics for Firebase to understand which pages and downloads people use, so we can prioritize our roadmap. Google Analytics does set first-party cookies (for example _ga) and collects standard measurement data such as page views, referring source, approximate location derived from IP address, device type, browser, and operating system. It is used only for our own aggregate product analytics. The Site usesno advertising cookies and no marketing or cross-site tracking, we have not enabled Google Signals or ads personalization, and we do not use analytics data for advertising.

Downloads. Our installers and applications are served fromGoogle Cloud Storage, and each download request appears in that provider’s standard server logs, including your IP address and user agent. When you click a download button we also record an analytics event in Google Analytics noting which file, product, and version you chose, together with the standard measurement data described above. We do not attach your name or email address to these events.

2.2 MeghaOS for Mac and the MeghaOS Desktop Environment

Local storage on your device. The application runs an assistant that operates on your device and stores the data it creates locally, within the application’s data folder on your computer. This local data can include: a memory store of facts you have shared and summaries of your conversations; your chat history; files you upload, attach, or drop into the app; calendar entries; the history of tasks and agent runs; and interface, widget, and workflow state. This information stays on your device. MeghaOS Inc. does not receive or store it, and the application does not send usage telemetry about your activity back to us.

AI processing and your model provider. To answer your requests, the application sends your prompts to the AI model provider you configure. You may configure a fully local model (for example, a model running on your own machine) so that your prompts never leave your device, or a cloud model provider, in which case the content of those prompts is transmitted to that provider and processed under its terms and privacy policy. If you subscribe to MeghaOS Pro, requests routed through it are handled as described in Section 2.5.

Integrations you choose to connect. The application can connect to third-party services at your direction to perform tasks you request. These integrations are off until you set them up, and include, for example: calendar (such as Google Calendar), email (over IMAP and SMTP), messaging platforms (such as Telegram, Slack, Discord, Signal, iMessage, and Google Chat), social platforms (such as X/Twitter and LinkedIn), news, code hosting (such as GitHub), and web search. When you enable an integration, the credentials or access tokens you provide are stored locally on your device, and the application exchanges only the data necessary for that feature directly with the relevant third party, under that third party’s terms and privacy policy. We do not receive those credentials.

Device access. With the permissions you grant through your operating system, the application may access device capabilities to carry out your instructions, such as reading screen contents and windows, opening and editing files, using the camera or screen for vision tasks, using audio, and controlling network, Bluetooth, display, power, and other system functions. This processing happens locally on your device to perform the task you asked for.

Optional diagnostics. Any crash reporting or diagnostics is optional and off unless you opt in. Diagnostic reports are limited to technical information needed to fix problems, and we make reasonable efforts to exclude the contents of your files and prompts.

2.3 The MeghaOS Operating System

The MeghaOS operating system runs the same local-first assistant described in Section 2.2, with the same on-device storage, model-provider, integration, and device-access behavior. As an operating system, it also processes system and device information locally in order to run your computer. Any system telemetry (for example, for stability or security) is limited, described in the software, and subject to the choices offered to you during setup or in system settings.

2.4 The Megha AI Model

When the Megha AI Model runs on your device, it processes your inputs locally as part of the desktop software described above. When you access it through MeghaOS Pro, it is handled as described in Section 2.5. In all cases,we do not use your prompts, files, or conversations to train our AI models.

2.5 MeghaOS Pro (login.meghaos.ai)

Account information. To use MeghaOS Pro you create an account with your name, email address, and a password. Authentication is handled byFirebase Authentication (Google); your password is managed securely by that service and is not visible to us in plain text. We may send you a verification email and keep a record of your account status. To keep you signed in across MeghaOS properties, we set a strictly necessary authentication cookie on the meghaos.ai domain.

Subscription and payment. MeghaOS Pro is a paid subscription. Payments are processed by Stripe, our third-party payment processor, which collects and handles your payment details (such as your card information) directly under its own privacy policy. We do not store your full card number. We retain subscription records such as your plan tier, subscription status, billing history, and invoice metadata to provide and manage your subscription.

Cloud AI service. When you use the MeghaOS Pro cloud AI service, the prompts you submit are transmitted to our servers and forwarded to our third-partycloud AI provider, which runs the model that generates responses.Your prompts and responses are not retained: our cloud AI provider does not store the content of your prompts or the AI’s responses and does not use them to train AI models; it processes each request only to generate a response and then discards the content. On our own systems we likewise do not store the content of your Pro prompts or responses; we retain only usage metadata, such as token counts, number of requests, estimated cost, and your last-active time, to enforce plan limits, prevent abuse, and bill you accurately.

Access to the cloud service. Access to the MeghaOS Pro cloud AI service is authenticated with a secret key that is tied to your account and issued only to active subscribers. The MeghaOS application obtains and stores this key on your device and uses it to authorize your requests, so you do not need to enter or manage it manually. We may revoke or rotate the key if we detect misuse. The separate credential our servers use to reach the underlying cloud AI provider is held on our servers and is never disclosed to you.

033. How We Use Information

• Communicate with you: respond to inquiries, provide support, and send waitlist, release, and account notices you have asked to receive.
• Provide MeghaOS Pro: create and authenticate your account, process your subscription and payments through Stripe, authorize and route your requests to our cloud AI provider, enforce plan limits, and bill you accurately.
• Operate and secure the Services: deliver downloads, maintain and improve the Site and software, and detect, prevent, and address technical issues, fraud, spam, and abuse.
• Understand interest: use aggregate analytics, including which products and versions are downloaded, together with waitlist interest, to prioritize our roadmap.
• Comply with the law: meet legal, regulatory, and security obligations, and enforce our Terms of Service.

044. How We Share Information

We share personal information only in the limited circumstances below, and never sell it:

• Service providers: Google Firebase and Google Cloud(hosting, database, account authentication, file storage for software downloads, and analytics), Cloudflare Web Analytics (cookieless, aggregate traffic measurement), Stripe (subscription payments and billing), a third-party cloud AI provider (MeghaOS Pro inference, which processes prompts only to generate a response and does not retain their content or use them to train models), and Apple (signing and notarizing our macOS application). Each provider processes data under its own terms and only as needed to deliver the Services.
• Integrations you enable: when you connect a third-party service in the software, data flows directly between your device and that service under its terms; we are not a party to that exchange.
• Legal and safety: we may disclose information if required by law or legal process, or where necessary to protect the rights, property, or safety of MeghaOS Inc., our users, or the public.
• Business transfers: in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction, subject to this Policy.

055. Cookies

The Site uses no advertising cookies and no third-party marketing trackers. Our infrastructure providers may set strictly necessary cookies required to serve and secure the Site. When you sign in to MeghaOS Pro, we set a strictly necessary authentication cookie on the meghaos.ai domain so you stay signed in across MeghaOS properties; it is functional, not used for advertising or tracking.

We use two analytics services, and they differ on cookies.Cloudflare Web Analytics is cookieless.Google Analytics for Firebase does set first-party analytics cookies(for example _ga and _ga_<id>, which distinguish visitors and sessions and typically expire after up to two years). These are analytics cookies, not advertising cookies: we have not enabled Google Signals or ads personalization, and we do not use them for advertising or cross-site tracking. You can block or delete them through your browser settings, or by using a browser or extension that blocks analytics scripts; the Site works normally without them.

066. Data Security

We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit (HTTPS/TLS), access controls, and security rules that prevent public reads of form submissions and gate sensitive account and billing fields to server-side access only. Passwords for MeghaOS Pro are managed by our authentication provider and are not stored by us in plain text. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

077. Data Retention

We keep the information you submit for as long as needed to fulfill the purposes described in this Policy (for example, to keep you on the waitlist, respond to your inquiry, or maintain your subscription) and as required to comply with our legal obligations. Data stored locally by the desktop software remains under your control on your device until you delete it. You may ask us to delete information we hold about you using the contact details below.

088. Your Privacy Rights

Depending on where you live (for example, California, the European Economic Area, or the United Kingdom), you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the California Consumer Privacy Act, as amended by the CPRA, including the rights to know, delete, and correct, and the right not to be discriminated against for exercising them; because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale is required. To exercise any right, email info@meghaos.ai, and we will respond within the time required by applicable law.

099. Children’s Privacy

The Services are not directed to children under 13 (or under 16 where a higher age of consent applies), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

1010. International Users

MeghaOS Inc. is based in the United States, and our service providers may process and store data in the United States and other countries. If you access the Services from outside the United States, your information may be transferred to and processed in countries whose data-protection laws differ from those of your own. We rely on appropriate safeguards for such transfers where required by law.

1111. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.