Publication statusThis page is an implementation draft. Open operator decisions and legal review must be completed before publication.
01Who controls what
For Customer Content we act on your instructions as processor. For the account and business data needed to run Mainframe, Inflection Systems is the controller.
Customer Content includes files, uploads, connected-service data, agent conversations, and CRM records. You, or your business, control that content and the personal data inside it.
Account and Business Data includes your name, email, billing details, subscription state, support messages, and website analytics.
The exact contracting entity, registration details, address, lead supervisory authority, and availability of a standard DPA must be confirmed before publication.
Data we process
Three broad groups: what you add, what you connect, and what is needed to operate your account.
| Category | Examples | Source |
|---|
| Workspace content | Files, uploads, notes, agent history, CRM records | You and your agents |
| Connected-service data | Email, calendar, messages, selected folders, CRM data | Services you connect with the scopes shown at consent |
| Channel messages | Messages and voice notes sent through Telegram or another paired channel | You, through that channel |
| Account and billing | Name, email, region, plan, invoices, VAT data | You and Stripe. Card numbers remain with Stripe |
| Usage and technical data | AI-credit metering, machine health, operational audit events | Generated by the service |
Why we process it
To provide Mainframe, manage billing, protect the service, communicate about it, and meet legal duties.
- Service delivery and account management rely on contract performance. Customer Content is processed on your documented instructions.
- Tax and accounting records rely on legal obligation. Security and abuse prevention rely on legitimate interests.
- Marketing communications require the consent or opt-out mechanism applicable in your location.
- We do not sell personal data and do not use Customer Content to train AI models.
Files and connected services
Connected data flows into your Mainframe only through connectors you install and scopes you approve.
- Connector defaults are read-only or draft-only. Disconnecting removes the stored credential and revokes the upstream token where supported.
- Data pulled from connected services is stored on your dedicated machine and its region-local backups, not in a shared workspace.
- Uploaded files are version-controlled. You can delete them and retain control of the repository history.
Telegram and other channels
If you choose an external messenger, that provider carries the message under its own privacy terms.
- The Telegram bot is locked to the paired Telegram account. Messages received are processed on your machine like other instructions.
- Telegram operates worldwide. Future WhatsApp support would use Meta's WhatsApp Business Cloud API and be disclosed at setup.
- The web application remains available if you do not want to use an external messenger.
AI models and routing
Prompts and relevant context go to the provider selected for that request.
- Your Claude or ChatGPT subscription and your own API keys operate under your agreement with that provider.
- Bundled-credit requests route through OpenRouter under a separate key for your account, then to the model serving the request.
- Voice transcription uses an AI model. Voice replies, when enabled, use ElevenLabs.
The bundled lane's final routing and data-policy configuration must be documented before publication.
Retention, export, and deletion
Content remains on your Mainframe while your subscription is active, with export offered before the wind-down ladder reaches deletion.
- Rolling backups use a 14-day snapshot catalog.
- The non-payment lifecycle is 7 days grace, 30 days suspended, 90 days archived, then deletion with two notices and an export link.
- Export includes the git repository, files, database, and installed connector code.
Voluntary-cancellation timing, an immediate erasure path, statutory billing retention, log retention, and the final deletion service level remain subject to operator and legal review.
International transfers and subprocessors
Your machine remains in your selected region. Some providers and channels may process data elsewhere.
- The EU machine region is Belgium. The US machine region is Iowa.
- Where GDPR applies, external transfers will use an adequacy decision or Standard Contractual Clauses with appropriate supplementary measures.
- A live subprocessor register and its change-notice process must be finalized before publication.
Your rights
Access, correction, deletion, portability, restriction, objection, and withdrawal of consent where applicable.
For data Inflection Systems controls, you may exercise applicable rights and complain to your supervisory authority. For personal data inside Customer Content, we support the controller by making content searchable, exportable, and deletable.
The privacy contact address and lead supervisory authority depend on confirmation of the contracting entity.
Cookies, minors, and changes
Essential product sessions only, minimal website analytics, and a business service for adults.
- The product uses essential session and security tokens.
- The website analytics choice is not final. Cookie-less analytics is preferred; a cookie-based tool would require consent controls.
- Mainframe is for business use by adults and is not directed to anyone under 18.
- Material policy changes will be dated and announced by email.