Privacy Policy
1. Introduction
StarMLX AI ("StarMLX," "we," "us," or "our") is committed to protecting the privacy of everyone who uses our platform, mobile applications, and services (collectively, the "Services"). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you have over your data.
By creating an account, accessing, or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of the Services immediately.
Plain-language summary: We collect your sign-up information, usage data, and conversation inputs to run and improve StarMLX AI. We do not sell your personal data to third parties. You have the right to access, correct, or delete your data at any time.
2. About StarMLX AI — Capabilities and Features
StarMLX AI is a conversational artificial intelligence platform designed to assist users with a broad range of tasks. Understanding what our system can and cannot do helps you make informed decisions about the information you share with it.
2.1 Core AI Capabilities
- Natural language understanding: StarMLX interprets and responds to text in multiple languages, handling complex queries, nuanced phrasing, and ambiguous prompts with contextual awareness.
- Long-form content generation: The system can draft essays, reports, emails, code, scripts, summaries, and other structured documents based on your instructions.
- Code assistance: StarMLX can write, explain, debug, and refactor code across major programming languages including Python, JavaScript, TypeScript, Java, C++, Rust, Go, and more.
- Reasoning and analysis: StarMLX applies step-by-step logical reasoning to solve problems, evaluate arguments, perform arithmetic and mathematical derivations, and break down complex topics.
- Research and summarisation: The system can synthesise information from your provided context, summarise long documents, and help you navigate large volumes of text efficiently.
- Creative writing: StarMLX assists with fiction, poetry, worldbuilding, dialogue, brainstorming, and other creative tasks across genres and styles.
- Instruction following: StarMLX adheres to structured prompts, system-level configurations, and operator-defined constraints, making it suitable for custom integrations and specialised workflows.
2.2 Platform Features
- Persistent conversation history: Your chats are saved and retrievable within your account, allowing you to resume sessions and reference past interactions.
- Multi-model access: StarMLX provides access to one or more underlying AI models. The specific models available may vary by subscription tier and are detailed in the platform.
- File and document input: Users may upload documents (e.g., PDFs, text files) to be used as context within a conversation. These files are processed to generate responses and are subject to the data handling described in this Policy.
- API access: Developers and enterprise users may access StarMLX capabilities programmatically through our API. API usage is governed by this Policy and our API Terms of Service.
- Custom instructions: Users can set persistent preferences that influence how StarMLX responds across sessions, including tone, format, and focus areas.
- Conversation sharing: Where enabled, users may share specific conversation threads via a link. Shared conversations are accessible to anyone with the link; users are responsible for what they choose to share.
2.3 Important Limitations
StarMLX AI generates responses based on patterns learned during training and from the context you provide. Its outputs may be incomplete, inaccurate, or outdated. StarMLX should not be relied upon as a substitute for professional medical, legal, financial, or other regulated advice. Users assume sole responsibility for how they use and act on StarMLX's outputs.
3. Information We Collect
We collect information in three ways: information you give us directly, information generated by your use of the Services, and information from third parties.
3.1 Information You Provide at Sign-Up
When you create a StarMLX AI account, we collect the following:
| Data point | Why we collect it | Retention |
|---|---|---|
| Email address | Account creation, authentication, service communications, password recovery, and to send you important updates about StarMLX. | Until account deletion |
| Display name / username | To personalise your experience and identify your account within the platform. | Until account deletion |
| Password (hashed) | To authenticate your identity. Passwords are stored as one-way cryptographic hashes; we cannot retrieve your raw password. | Until account deletion or password change |
| Profile photo (optional) | To personalise your account interface. | Until removed by user or account deletion |
| Date of birth / age verification (where required) | To comply with age-restriction requirements in applicable jurisdictions and ensure appropriate access controls. | Until account deletion |
| Payment information | To process subscription fees. Payment card data is handled exclusively by our third-party payment processor and is not stored on StarMLX servers. | Managed by payment processor per their policy |
| Country / region | To apply the correct legal terms, currency, tax treatment, and content restrictions applicable in your jurisdiction. | Until account deletion |
3.2 Information Generated by Your Use of the Services
- Conversation content: The messages, prompts, and files you submit to StarMLX AI, and the responses generated. This data is used to deliver the Service and, where you have not opted out, to improve our models.
- Usage data: Features you interact with, session duration, queries per session, and navigation patterns within the platform.
- Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and general geographic location derived from your IP address.
- Log data: Timestamps, error logs, API request records (for API users), and performance diagnostics.
- Cookies and similar technologies: We use session cookies for authentication, preference cookies to remember your settings, and analytics cookies to understand usage patterns. See Section 8 for full details.
3.3 Information from Third Parties
- OAuth / social sign-in: If you choose to sign in via Google, Apple, or another third-party identity provider, we receive your name and email address from that provider. We do not receive your password.
- Payment processors: We receive transaction confirmations and billing status from our payment processor, but not full card details.
- Analytics partners: Aggregated or anonymised signals from analytics services we use (described in Section 7).
4. How We Use Your Information
We use the information we collect for the following purposes, each grounded in a lawful basis under applicable data protection law:
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide, operate, and maintain the Services | Account info, conversation data, technical data | Contract performance |
| Authenticate your identity and secure your account | Email, hashed password, device data, IP address | Contract performance / legitimate interest |
| Process payments and manage subscriptions | Email, billing info (via processor) | Contract performance |
| Send transactional communications (receipts, alerts, password resets) | Email address | Contract performance |
| Send product updates and marketing communications (opt-out available) | Email address, usage signals | Legitimate interest / consent |
| Improve and train our AI models | Conversation content (opt-out available in settings) | Legitimate interest / consent |
| Monitor platform safety, detect abuse, and enforce our Terms | All data categories above | Legitimate interest / legal obligation |
| Analyse usage patterns and product performance | Usage data, log data, anonymised conversation signals | Legitimate interest |
| Comply with legal obligations and respond to lawful requests | Relevant data as required | Legal obligation |
| Apply jurisdiction-specific rules and age restrictions | Country/region, date of birth | Legal obligation / contract performance |
We will not use your personal data for purposes materially different from those listed above without first providing notice and, where required, obtaining your consent.
5. How We Share Your Information
We do not sell your personal data. We share information only in the limited circumstances described below.
- Service providers: We engage trusted third-party vendors to help operate the Services — including cloud hosting providers, payment processors, email delivery services, and analytics platforms. These vendors process data only on our behalf and under contractual obligations consistent with this Policy.
- AI model providers: Conversation inputs may be transmitted to the underlying AI model infrastructure that powers StarMLX responses. This is necessary to deliver the Service. We select providers who maintain appropriate data processing standards and do not use transmitted data to train their own models beyond what our agreement permits.
- Business transfers: If StarMLX AI is involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
- Legal and safety disclosures: We may disclose your information if required by law, subpoena, or court order; to protect the rights, property, or safety of StarMLX, our users, or the public; or to investigate fraud, abuse, or security incidents.
- With your consent: We share information for any other purpose with your explicit consent.
6. AI Model Training and Your Conversations
By default, conversation data may be used to improve StarMLX AI models and evaluate system performance. This helps us make StarMLX more helpful, accurate, and safe over time.
If you do not wish your conversations to be used for model training, you may opt out at any time in Settings → Privacy → Data usage for AI training. Opting out does not affect the quality of service you receive.
In all cases, we apply data minimisation practices: data used in model improvement pipelines is reviewed, filtered for sensitive content, and de-identified where possible before any human reviewer or automated training system processes it.
Note on uploaded files: Files you upload within a conversation are processed to generate your requested response. They are not stored beyond the active session unless you have enabled conversation history, in which case the file reference is retained with that conversation record.
7. Analytics and Tracking Technologies
We use analytics tools to understand how users interact with StarMLX AI and to improve the platform. These may include:
- First-party analytics: Aggregated usage metrics collected directly by StarMLX servers, such as feature adoption rates, session lengths, and error frequencies.
- Third-party analytics services: We may use services such as Google Analytics or similar platforms configured to anonymise IP addresses and prevent cross-site tracking. These services process data in accordance with their own privacy policies.
- Session recording and heatmaps: We may use tools (such as Microsoft Clarity or equivalent) to record anonymised user interaction sessions — mouse movement, scrolling, and clicks — for the sole purpose of diagnosing UX issues and improving interface design. No personally identifiable conversation content is captured in these recordings.
You may opt out of non-essential tracking via the cookie preference centre accessible in the website footer, or by configuring your browser's privacy settings.
8. Cookies
Cookies are small text files placed on your device by your browser when you visit our platform. StarMLX uses the following categories of cookies:
- Strictly necessary cookies: Required for core functionality including login sessions and security tokens. These cannot be disabled without breaking the Service.
- Preference cookies: Remember your settings and personalisation choices (e.g., theme, language, custom instructions) across visits.
- Analytics cookies: Collect aggregated data on how users navigate the platform. These are non-essential and you may opt out.
- Marketing cookies: Where applicable, used to measure the effectiveness of campaigns that directed you to StarMLX. These are non-essential and you may opt out.
We never place personally identifiable information in cookies. You can control cookie preferences through our consent banner or your browser settings. Disabling non-essential cookies will not impair access to core features.
9. Data Retention
We retain personal data for as long as your account is active or as needed to provide the Services. Specific retention periods are:
- Account data: Retained until you delete your account, after which it is permanently erased within 30 days, except where retention is required by law.
- Conversation history: Retained while your account is active and for 30 days following account deletion. You can delete individual conversations or all history at any time via your account settings.
- Payment records: Retained for 7 years to comply with financial record-keeping obligations.
- Log and security data: Retained for up to 12 months for security monitoring and fraud prevention purposes.
- Anonymised/aggregated analytics: May be retained indefinitely as they cannot be linked to any individual.
10. Your Privacy Rights
Depending on your country or region of residence, you may have some or all of the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention obligations.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format where technically feasible.
- Right to object: Object to processing based on legitimate interest, including profiling and use for model training.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Right not to be subject to automated decision-making: Request human review of any decision made solely by automated means that significantly affects you.
To exercise any of these rights, please contact us at support@starmlx.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with a supervisory authority, you also have the right to lodge a complaint with that authority if you believe we have not handled your data lawfully.
11. Account Deletion and Data Removal
You may delete your StarMLX AI account at any time from Settings → Account → Delete Account. Deleting your account will:
- Permanently remove your profile, email, and account credentials.
- Erase all saved conversation history associated with your account.
- Cancel any active subscription (subject to our Refund Policy).
- Remove your email address from marketing communications immediately.
Account deletion is irreversible. We strongly advise you to export any conversation data you wish to retain before initiating deletion. Certain data — such as anonymised usage signals and records required by law — may be retained after deletion as described in Section 9.
12. Children's Privacy
StarMLX AI is not directed at children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal data from children below the applicable minimum age. If we become aware that a user is below the minimum age, we will promptly delete their account and associated data. If you believe a child has provided us with their data, please contact us at support@starmlx.com.
13. Data Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS) and at rest, access controls limiting data access to authorised personnel, regular security audits and vulnerability assessments, and incident response procedures.
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.
14. International Data Transfers
StarMLX AI may process and store data on servers located outside your country of residence. If you are located in the European Economic Area or United Kingdom, we ensure that any transfer of your personal data to countries not deemed adequate by the relevant authority is covered by appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission.
15. Third-Party Links and Services
The StarMLX platform may contain links to third-party websites, tools, or services not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party service you access via StarMLX. We are not responsible for the content or privacy practices of external sites.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and/or by displaying a prominent notice within the platform at least 14 days before the changes take effect. The updated Policy will be identified by a revised "Last updated" date at the top of this page.
Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree to the updated terms, you should delete your account before the changes take effect.
17. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
- Email: support@starmlx.com
- Support portal: starmlx.com/support
We aim to respond to all privacy-related inquiries within 5 business days and to fulfill formal data subject requests within 30 days.
This Privacy Policy was last updated on June 1, 2026 and supersedes all prior versions. By using StarMLX AI, you acknowledge that you have read and understood this Policy.