Privacy policy
This Privacy Policy explains how Mltitude collects, uses, stores, and shares personal data when you use the website at mltitude.com and the Mltitude application (together, the "Service"). It applies to all users globally and is written to be compatible with the EU General Data Protection Regulation (GDPR), the UK GDPR, and India's Digital Personal Data Protection Act 2023. Mltitude is operated by Edoth Electronics, the legal entity behind the Mltitude brand.
1. Who we are
The Mltitude Service is operated by Edoth Electronics, a private limited company incorporated in India, with its registered office in Hyderabad, Telangana. Edoth Electronics is the data controller for personal data processed through the Service. You can reach us at info@edothsoft.com for any privacy-related question.
2. What we collect
2.1 Information you provide
- Account data — name, email address, password (hashed), and organisation name when you create an account.
- Billing data — billing contact, billing address, and tax identifier where applicable. Card details are handled by our payment processor and never reach our servers.
- Content — the briefs you write, decks and modules you generate, files you upload, and any data you enter into the Service.
- Communications — emails you send to us, and feedback you submit through the app.
2.2 Information collected automatically
- Usage data — pages viewed, features used, error logs, timestamps, and approximate location derived from IP.
- Device data — browser type, operating system, screen size, and device identifiers required for the application to function.
- Cookies — strictly necessary cookies for authentication and session management. We do not use advertising cookies.
3. How we use your data
We use personal data only for the following purposes, each tied to a lawful basis under GDPR:
| Purpose | Categories of data | Lawful basis |
|---|---|---|
| Provide and maintain the Service | Account data, content, usage data | Contract |
| Authenticate users and secure accounts | Account data, device data, IP address | Contract / legitimate interest |
| Bill paying customers | Account data, billing data | Contract |
| Send transactional emails (account, password reset, invoices) | Account data | Contract |
| Improve the Service (aggregated, non-identifying analytics) | Usage data | Legitimate interest |
| Comply with legal obligations | As required | Legal obligation |
4. What we never do
- We do not sell personal data. Not to advertisers, not to data brokers, not to anyone.
- We do not use your content for model training. Your briefs, decks, modules, and files are not used as training data — by us, or by our sub-processors. See Section 7.
- We do not run advertising trackers. No Google Ads pixel, no Meta pixel, no third-party ad cookies.
5. Where your data lives
Customer content and account data are stored in the European Union, on infrastructure provided by Hetzner Online GmbH in Germany. Backups are encrypted at rest and held in the same region. Some operational metadata (such as billing records) may be processed in India by authorised personnel — these transfers are covered by Standard Contractual Clauses and applicable adequacy provisions.
6. Retention
- Account data is retained while your account is active and for 90 days after deletion, after which it is permanently removed.
- Content (decks, modules, briefs) is retained for as long as your account exists. You can delete individual items at any time, in which case they are permanently removed within 30 days.
- Billing records are retained for seven years to meet tax and accounting obligations under Indian and EU law.
- Backups are retained for 30 rolling days and then overwritten.
7. Sub-processors
We use a small number of carefully selected sub-processors to deliver the Service. Each operates under a written data-protection agreement that prohibits using your content to train models, sell data, or repurpose it for any reason outside delivering the Service. The current list is published at /subprocessors.
8. Your rights
You have the following rights with respect to your personal data:
- Access — request a copy of the data we hold about you.
- Correction — ask us to fix data that is wrong or incomplete.
- Deletion — ask us to permanently erase your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — where we relied on consent, you can withdraw it at any time.
- Complain — lodge a complaint with your local data protection authority. EU residents can also complain to the Hessian Commissioner for Data Protection (Germany).
Email dpo@edothsoft.com to exercise any of these rights. We respond within 30 days.
9. Security
Our security practices are described in detail at /security. In short: data is encrypted in transit (TLS 1.3) and at rest (AES-256), access to production systems is restricted and logged, and the Service is hosted in EU data centres with physical security operated by Hetzner.
10. Children
The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We will update this policy when our practices change. Material changes will be announced in-app and by email at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the current version.
12. Contact
Privacy and data-subject requests: dpo@edothsoft.com. Mltitude is operated by Edoth Electronics, Hyderabad, Telangana, India — the legal entity acting as data controller.