M87 PRIVACY POLICY

Last Updated: September 8, 2025

  1. Introduction

Welcome to M87, an AI creation and editing platform operated by Cosmic Intelligence, LLC (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use M87 (the “Service”). By using M87, you agree to this Privacy Policy. If you do not agree, do not use the Service.

For terms that govern your use of M87, please see our Terms of Service.

  1. Information We Collect

2.1 Information You Provide • Account Information. Name/username, email address, and password (bcrypt-hashed). • Content & Activity. Prompts, messages, and other content you submit, including text, images, audio files/stems, and metadata (e.g., timestamps). • Support & Communications. Information you provide when you contact us (e.g., email address, message contents). • Billing Signals. We receive limited billing/entitlement info from our payment processor (e.g., plan status, successful/failed charges). We do not store full card numbers.

2.2 Information Collected Automatically • Usage Data. Interactions with the Service (features used, request counts, generation types, timestamps, and referral/UTM data if present). • Device & Connection Data. IP address (which may indicate approximate location), operating system, browser type/version, device identifiers, language, and crash/error logs. • Cookies & Similar Technologies. We use HTTP-only cookies for authentication/session management and other session cookies for security and functionality. Blocking cookies may break core features. • Safety & Abuse Signals. Automated scans and limited human review of inputs/outputs (including images/audio) to detect abuse, prevent fraud, enforce rate limits, and maintain system integrity.

2.3 Information from Third Parties • Service Providers. Data from vendors such as cloud hosting, analytics, error monitoring, payment processing (Stripe), and AI model providers (e.g., OpenAI, Google, Anthropic) necessary to operate the Service. • Single Sign-On (if enabled). If you choose a third-party sign-in option (e.g., Google/Apple), we receive basic profile and authentication data from that provider according to their terms.

  1. How We Use Your Information

We use information to: • Provide & Operate the Service. Authenticate you; process requests; generate AI outputs; enforce quotas/rate limits; provide customer support. • Maintain, Secure & Improve. Monitor performance; debug; prevent abuse and fraud; develop new features; improve quality and reliability. • Personalize. Tailor the experience (e.g., default settings, recently used features). • Communicate. Send service messages (e.g., transactional emails, policy updates). You can opt out of non-essential communications. • Legal & Compliance. Comply with law; enforce our Terms of Service; protect our rights, users, and the public.

Model Training/Provider Use. We use your data to operate and improve M87 (including safety systems and quality). For third-party AI providers, we limit or disable provider training on your content where controls are available and instruct providers to use data only to deliver the requested service, subject to their terms.

  1. How We Share Information

We do not sell or rent your personal information. We share only as described: • Vendors/Processors. Cloud infrastructure, analytics, error monitoring, payment processing (Stripe), storage/CDN, and AI model providers that process data on our behalf under contractual safeguards. • Moderation/Safety. With specialized vendors or tools to detect abuse or illegal content (limited access, minimum necessary). • Business Transfers. In connection with a merger, acquisition, financing, or sale of assets. • Legal. When required by law or to protect rights, safety, and security. • With Your Direction or Consent. For example, when you connect an external service.

  1. Payments

Payments are processed by Stripe (or its successor). We receive limited billing metadata (e.g., subscription status) but do not store full payment card numbers on our servers. Please review Stripe’s privacy practices for more details.

  1. Cookies & Tracking

We use essential cookies (e.g., session, CSRF/security) and limited functional/analytics cookies. Most browsers let you block or delete cookies; core functionality may fail without essential cookies. We currently do not respond to “Do Not Track” signals.

  1. Data Retention • General Retention. We may retain account data, prompts, and outputs (including images and audio) and related logs indefinitely for operation, security, analytics, and improvement unless you request deletion or close your account. • No Routine Purge. We do not currently run an automatic purge schedule. • Session Timeout. Sessions typically expire after ~45 minutes of inactivity (subject to change for security/reliability). • Deletion Requests. Email root@cosmicai.dev. We will process requests consistent with applicable law. Residual copies may remain in backups for a limited period.

  2. Security

We implement technical and organizational safeguards, including HTTPS in transit, encryption at rest where available, bcrypt password hashing, access controls, and monitoring. However, no method of transmission or storage is 100% secure.

  1. International Data Transfers

We are based in the United States and may process your data in the U.S. and other countries with different data protection laws. Where required, we use legally recognized transfer mechanisms (e.g., standard contractual clauses) and appropriate safeguards.

  1. Children & Age Restrictions

M87 is not for individuals under 18, and certain features (e.g., audio/image generation) are 18+ only. We do not actively verify age and rely on your representation. If you believe we collected data from a minor, contact root@cosmicai.dev and we will take appropriate steps.

  1. Your Rights & Choices

Depending on your location, you may have rights to: • Access your data and obtain a copy. • Correct inaccurate data. • Delete data (subject to legal/legitimate business needs). • Restrict or object to certain processing. • Portability in a commonly used, machine-readable format. • Withdraw consent where processing is based on consent.

How to exercise: Email root@cosmicai.dev. We may verify your request and identity as permitted by law.

11.1 U.S. State Privacy Disclosures (e.g., CA/CO/VA/CT/UT) • We do not “sell” personal information and do not “share” it for cross-context behavioral advertising as defined by applicable state laws. • You have the right to know, delete, and correct personal information, and to appeal denials. We will not discriminate against you for exercising rights.

11.2 EEA/UK Disclosures • Controller. Cosmic Intelligence, LLC is the controller for your personal data. • Legal Bases. Contract (to provide the Service), legitimate interests (security, improvement, fraud prevention), consent (where required), and legal obligation. • Transfers. See Section 9 (SCCs and safeguards). • Supervisory Authority. You may lodge a complaint with your local authority.

  1. AI-Specific Notices • Prompts & Outputs. Your prompts and outputs (including images and audio) may be processed by third-party AI providers to fulfill your requests. • Safety Review. Automated tools and limited human review may be used to detect and prevent abuse and to improve safety systems. • No Rights Clearance. We do not provide rights clearance for names, likenesses, voices, trademarks, or samples contained in your content or outputs. See the Terms of Service.

  2. Third-Party Links & Services

M87 may link to or integrate third-party services. Their privacy practices are governed by their own policies. Please review them before providing information.

  1. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the “Last Updated” date and, if changes are material, provide additional notice (e.g., in-app or email). Your continued use of M87 after changes means you accept the updated Policy.

  1. Contact Us

Cosmic Intelligence, LLC Email: root@cosmicai.dev