Privacy Policy
Last updated: August 4, 2026
1. Overview
This policy describes how Mylos AI, Inc. ("Mylos", "we", "us") handles information across our website, our customer account portal, and the Mylos software. We collect the minimum needed to sell, deliver, and support the product. You can browse our public website without an account.
2. Information We Collect
- Account information. If you create an account in our customer portal, we store your email address and sign-in records. We use passwordless sign-in links, so we never store a password for you.
- Billing information. Purchases are processed by Stripe. Stripe collects your payment card and billing details directly; we do not receive or store full card numbers. We do receive and retain your subscription status, plan, billing email, invoice history, and the last four digits and brand of your card as reported by Stripe.
- Customer Data. If you use the software or send us files, we may receive part files, CAD models, drawings, tooling libraries, machine configurations, feeds and speeds, and similar production data.
- Support correspondence. Emails you send us, including any attachments.
- Usage and diagnostics. Basic records of portal activity, such as sign-ins and download requests, used to operate and secure the service.
- Analytics. Vercel Analytics gives us aggregate traffic figures such as page views, country, device type, and referrer. It does not use cookies and does not track you across other sites.
- Server logs. Our hosting provider logs standard technical data such as IP address and request time.
3. How We Use Information
We use this information to provide and deliver the Services, authenticate you, process payments and renewals, provide support, adapt the software to your shop's preferences, secure our systems, meet legal and accounting obligations, and improve the product.
We do not sell your personal information, and we do not use it for advertising or behavioral profiling.
4. Your Production Data
We treat your part files and related production data as confidential. We use them to provide and support the Services for you, including tuning the software to how your shop programs parts.
We will not use your proprietary production data to train models made available to other customers without your prior written permission. We are glad to sign a non-disclosure agreement, and we will delete your files on request. See Section 9 of our Terms of Service for the contractual commitment.
You are responsible for confirming you have the right to share data with us, including data belonging to your own customers, and for telling us in advance about anything subject to export control, defense, or similar restrictions.
4a. How Mylos Processes Your Parts
Mylos plans parts on our servers, not on your computer. When you build a plan from the add-in, the part model you selected is uploaded to us as a STEP file, together with the stock model if you supplied one and the options on screen. Feature recognition, operation planning, feeds and speeds, and toolpath generation all run on our infrastructure, and the result is returned to your machine.
Your posted G-code does not leave your computer. Posting happens inside Fusion, on your machine, and the output is written to your own disk. Nor do we receive your Fusion design file, or any file you did not select.
Mylos may use a third-party AI model to choose which machining operation suits each recognised feature. What that model receives is deliberately narrow: the part's file name, the material you chose, and for each recognised feature its classification and dimensions. The AI provider does not receive your CAD model, your drawing, or your G-code. The model returns a choice of operation and never a number — every dimension, feed, speed, depth and coordinate is derived by us from your model.
We do not currently hold a zero-retention agreement with our AI provider. What that provider does with what it receives — including how long it keeps it, and whether it is used for training — is governed by that provider's own terms. We do not control those terms, they can change, and we make no representation about them on its behalf; read them yourself if the answer matters to you. If your work cannot tolerate a third party receiving feature classifications and dimensions at all, tell us before you send it.
If your work is subject to export control, security classification or customer confidentiality rules that prevent geometry leaving your premises, Mylos is not suitable for that work.
5. Service Providers
We share information with a small number of providers who process it on our behalf, under contractual confidentiality and security obligations:
- Vercel for website and portal hosting, and for aggregate analytics.
- Supabase for account authentication, database, and encrypted file storage.
- Amazon Web Services for the hosted planning engine, and for storage of uploaded part models and returned results. Processing takes place in the United States, in AWS region us-east-1.
- OpenAI for the AI planner described in section 4a. Anthropic may be used as an alternative provider.
- Stripe for payment processing, subscription billing, and invoicing.
- Our email provider for sign-in links and transactional messages.
- Google Fonts, which may receive your IP address when fonts load on our pages.
We may also disclose information where required by law, to enforce our Terms, or in connection with a merger or acquisition. We are not responsible for the privacy practices of third-party sites we link to.
6. Data Retention
We keep account and billing records for as long as your subscription is active and afterwards as required for tax, accounting, and legal purposes. Part models you upload for planning, and the results we return, are deleted automatically after one day by a storage lifecycle rule. Job records — who ran what, when, which stage it reached and any error text, containing no geometry — are deleted after 30 days. Your shop preferences, proven machining history, shop notes and tool library are kept until you delete them, because losing them would lose months of your input. Other Customer Data you send us is deleted on request or within a reasonable period after your licence ends. Support emails are kept as long as needed to handle your inquiry and for reasonable business records. Aggregate analytics are retained per our provider's policy.
7. Security
Data is encrypted in transit. Installer files and uploaded materials are held in private storage that is not publicly accessible, and download links are individually signed and short-lived. Access to customer data within Mylos is limited to people who need it to deliver or support the product. No system is perfectly secure, but we will notify affected customers promptly if we become aware of a breach involving their data.
8. International Transfers
We operate in the United States, and our providers may process data there. If you are outside the United States, you understand your information will be transferred to and processed in the US.
9. Your Rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information we hold about you, or to object to certain processing. To make a request, email us at the address below and we will respond as required by applicable law. You can also delete your account by contacting us. Note that we may need to retain certain billing records even after account deletion.
10. Children
The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from them.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date above reflects the most recent revision. For material changes affecting customers, we will give reasonable notice by email.
12. Contact
Privacy questions and requests can be sent to support@mylosai.com.