Privacy policy

Mission Control OS (“Mission Control”, “we”) is operated by the Enterprise Technology Association. This policy explains what we collect when you use missioncontrolforwork.com and the Mission Control app, why, and the choices you have.

What we collect

• Account details: your name, work email, organization and role, and how you sign in.
• Your organization's content: the tasks, contacts, projects, files, website pages and other records you and your team put into Mission Control.
• Connected apps: when an admin connects an app such as Google, Microsoft, Slack, GitHub, Vercel or Supabase, we store an access token, encrypted, and read only what that connection lists before you approve it. We never read source code, environment variables or database table data through these connections.
• Google user data: with Google, we read calendar events, contacts, and only the Drive files a person picks. If a person connects Gmail to their own Inbox, we read their messages live, read-only, to show them; messages aren't stored, only reply drafts that person asks for, and nobody else in their organization can see their inbox. Mission Control's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google data, use it for ads, or use it to train AI models, and people at Mission Control can't read it except with your permission, for security, or where the law requires.
• Payments: Stripe processes card details for subscriptions and for sales on your sites. We see the result (amount, status, last four digits), never the full card number.
• Website visitors: on sites built with Mission Control, we count page views per day without storing visitor identities, and keep form submissions for the site owner. To limit spam we keep a one-way, daily-rotated hash of the sender's network address.
• Usage and logs: basic technical logs (pages requested, errors, timestamps) to keep the service running and secure. On missioncontrolforwork.com we count page views with Vercel Web Analytics, which uses no cookies and doesn't identify visitors.

How we use it

To provide and secure Mission Control, run the AI crew on your instructions, support you, bill you, and improve the product. We do not sell personal information and we do not use your organization's content to train AI models.

AI processing

When you ask the crew to do something, the relevant content is sent to our AI provider to produce a result. Providers we use do not train on this data. Anything that sends, charges, signs, publishes or deletes waits for a person's go.

Who processes data for us

Supabase (database and storage), Vercel (hosting), Stripe (payments), Anthropic (AI), Resend (email delivery), and the apps you choose to connect. Each processes data only to provide its service to us.

Security

Every table is locked to your organization in the database itself. Connection tokens are encrypted at rest. Every change by people and agents is recorded in a tamper-evident Mission Log. Details are in our trust center.

Your choices

• Admins can disconnect any app at any time, which deletes its stored token.
• You can export or delete your organization's data. Ask us and we'll do it within 30 days.
• You can ask to see, correct or delete your personal information.

Retention

We keep your organization's data while your account is active and delete it within 90 days after you close it, except where we must keep records by law (for example, billing records). The Mission Log keeps a permanent record of changes for security.

Contact

Questions or requests: hello@joineta.org.