Privacy Policy

Last updated: March 26, 2026

Mistflow ("we", "us", "our") operates the mistflow.ai website and the Mistflow MCP server. This page explains how we collect, use, and protect your information.

What We Collect

• Account information: Email address and name via Clerk authentication when you sign up.
• Project data: App names, build plans, deployment metadata, and provenance records you create through the MCP tools.
• Environment variables: Stored encrypted at rest (AES-256). Never logged, never exposed in error messages, never returned in plaintext to the dashboard.
• Build artifacts: Uploaded tar.gz files for deployment. Stored in Cloudflare R2 for rollback capability.
• Usage data: Deploy counts, plan counts, and feature usage for billing and product improvement.

What We Don't Collect

• AI conversations: Mistflow's MCP server never calls an LLM. Your AI conversations stay in your editor (Claude Code, Cursor, etc.) and never pass through our servers.
• Source code: We receive compiled build artifacts for deployment, not your source code repository.
• Tokens or API keys for AI services: We never proxy, intercept, or bill for your AI editor's token usage.

How We Use Your Data

• To deploy and host your applications on Cloudflare
• To provision databases (Turso/Neon) and authentication (Clerk) for your apps
• To track usage for billing purposes
• To improve the product based on aggregate usage patterns

Third-Party Services

We use the following third-party services to operate Mistflow:

• Clerk — Authentication and user management
• Cloudflare — App hosting (Workers/Pages), asset storage (R2), DNS
• Turso — SQLite database hosting for user apps
• Neon — Postgres database hosting for user apps
• Sentry — Error tracking (no PII included in error reports)

Data Retention

• Account data: retained while your account is active.
• Project data: retained while the project exists. Deleted when you delete a project.
• Build artifacts: retained for rollback capability. Deleted when you delete a project.
• Ephemeral projects: automatically deleted 24 hours after creation.

Your Rights

You can delete your projects and all associated data at any time from the dashboard. To delete your account entirely, email hello@mistflow.ai.

Contact

Questions about this policy? Email hello@mistflow.ai.