01 Who we are

Mythox ("we", "us", "our") is a Florida limited liability company. Our mailing address is 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA. Mythox is a web and desktop application that helps creators and entrepreneurs bring their finances, time, energy, goals and work together in one place.

This Privacy Policy applies to the Mythox application (web and desktop) where you sign in and where you may connect your bank through Plaid. If you have any question about it, email support@mythox.ai.

02 What we collect

We collect only what we need to run the features you use. Depending on what you connect, that can include:

Connecting a data source is always optional and in your control. If you don't connect a bank or Rize, we don't receive that data.

Support conversations on this website, including the messages you send and the answers you receive, are recorded and stored so we can answer you and improve support.

03 Signup protection and your browser

When you create a Mythox account we save one random code inside your own browser and keep it for up to 90 days. It is not your name, your email, or anything about you. It exists only so we can see when the same browser opens many free trials, which is how free trial abuse is spotted.

That code never leaves your browser in a readable form. Before we store anything, it is scrambled with a secret key so it cannot be turned back into the code your browser holds.

It never blocks a signup on its own. Clearing your browser data, or signing up in a private window, simply removes the code, and you can create your account exactly as normal.

We also record a scrambled version of the internet address and email address used at signup, for the same reason and under the same rules.

04 Bank data & Plaid

To let you connect a bank account, we use Plaid Inc. ("Plaid"). When you choose to connect, Plaid securely collects your login with the bank on your behalf and gives us access to the account and transaction information needed to power your finance features. You enter your bank credentials into Plaid's secure interface, so Mythox never sees or stores your bank username or password. Bank connections through Plaid are available for banks in the United States only.

By connecting an account, you also agree to Plaid's handling of your information as described in the Plaid End User Privacy Policy. When you connect, we receive from Plaid an access token plus the account and transaction data you authorized; these are kept server-side and encrypted, isolated to your account. (Bank connection is live; it runs on the encrypted, per-user-isolated platform described in Section 8.)

05 Why we collect it

• To provide the service - show your finances, time, energy, goals and work, and the insights built on them.
• To power the AI guide - give you relevant suggestions based on your own data (see Section 7).
• To handle billing - manage your subscription tier through Stripe.
• To support you - answer questions and fix problems.
• To keep the app secure - protect against fraud, abuse and unauthorized access.

We do not sell your personal information, and we do not use your bank or financial data for advertising.

If you create and verify a Mythox account and accept our trial terms, we may send you up to four emails to help you finish setting up your account, and you can stop these reminders at any time using the stop link in any reminder or by contacting support@mythox.ai.

The short legal version, for readers in the EU, UK and similar places. We process your data (a) to deliver the service you signed up and paid for, which is a contract; (b) because you chose to connect an optional source, which is consent you can withdraw at any time; (c) to keep the service secure and prevent abuse, which is a legitimate interest; and (d) where the law requires it, such as tax and billing records, which is a legal obligation. Where a mandatory law gives you more than this page says, that law wins.

06 Consent & your choices

We collect, process and store your data with your consent, which you give by creating an account and by choosing to connect each data source:

• Connecting a bank requires you to actively authorize it through Plaid - an explicit, per-connection consent.
• Connecting Rize or importing a CSV is similarly your choice, each time.
• You can withdraw consent at any time by disconnecting a source, or by deleting your account and asking us to erase the associated data (see Section 12).

07 AI features & your data

Mythox includes an in-app AI assistant (Midas) that guides you using your own data. When you use it, the relevant pieces of your data needed to answer you may be sent to the AI model provider you select (for example, providers behind GPT, Claude or Gemini) so it can generate a response.

• This only happens when you use the AI features.
• Providers process that data under their own terms to return your answer; we do not permit them to use it to advertise to you, and we do not sell it.
• On the highest tier you may use your own API key, in which case your AI usage runs directly under your own provider account.

Your memory

Midas keeps a per-user memory that stores what you give it (your goals, preferences, context, journal entries, and similar personal information) so it can give you personalized results over time. This memory is tied to your account and persists across sessions until you delete it. Your memory is private by default and stored securely under your account. You can delete it at any time from your settings (see Section 12).

The "Share my data with Midas" toggle

Your settings include a master "Share my data with Midas" toggle that controls whether Midas may use your memory and data to personalize its answers:

• When it is on, Midas may draw on your stored memory and data to personalize what it generates.
• When it is off, your data is kept private and Midas runs in a limited mode that does not use your personal memory.
• Per-entry and per-feature controls. On top of the master toggle, you can mark specific entries or features as private, so they stay private no matter how the master toggle is set.

You can change the toggle and your per-entry settings at any time, and changes take effect immediately.

Training and who can see your data

Mythox does not train its own AI models on your content. Access to account data is limited to authorized personnel (currently the founder), and only for support you ask for, security, or abuse prevention.

08 How we store & protect it

Your data is stored in a managed PostgreSQL database (Supabase) hosted in the United States, with the following protections:

• Encryption in transit: all traffic uses HTTPS with TLS 1.2 or higher.
• Encryption at rest: data is encrypted at rest with AES-256.
• Per-user isolation: the database enforces Row-Level Security, so your account can only access your own data - no other user can read or change it.
• Least-privilege keys & server-side secrets: powerful keys and the Plaid secret are never exposed to the browser; secrets are kept in a secure store, never in our code.
• Security review before every release.

No system can be guaranteed 100% secure, but we apply these reasonable, layered measures and continue to strengthen them (see our Information Security Policy).

09 Who we share with (sub-processors)

We share data only with the trusted providers needed to run Mythox, and only the data each one needs. We do not sell personal data.

Adding a provider. If we add a new provider that handles your personal data, we update this table and the "Last updated" date at the top of this policy before it goes live.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.

Business transfers. If Mythox is ever involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that deal. We will give you notice before your information becomes subject to a different privacy policy.

10 How long we keep it

We keep your data for as long as your account is active and you find it useful. When you disconnect a source, we remove the associated data; when you delete your account, we keep it until you ask us to erase it, as described in our Data Retention & Deletion Policy. In short: keep what you use, delete what you ask us to.

Sign-ups we could not confirm: if your sign-up reaches us but we cannot confirm it came from our sign-up form, we keep your name, email, and the internet address and country it came from, for up to 30 days so it is not lost, and you can ask us to see or delete them at any time.

11 Your rights

You have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Export a copy of your data.
• Delete your data (see Section 12).
• Withdraw consent and disconnect any source at any time.

Depending on where you live (for example under the GDPR or California's CCPA/CPRA), you may have additional rights, such as the right to object to or restrict certain processing and the right not to be discriminated against for exercising your rights. To exercise any of these, email support@mythox.ai and we will respond within the timeframe required by applicable law.

12 Deleting your data

Deleting your account in the app closes your account and ends your sign-in. We keep your content and records. To have your personal data and content permanently erased, email support@mythox.ai from your account email with the subject 'Erase my data'. We erase it within 30 days, except billing and tax records we must keep by law (up to 7 years).

You can ask us to erase your data at any time by emailing support@mythox.ai. When you do:

• We erase your account and personal data from our active database within 30 days.
• We revoke any Plaid access tokens so your bank connection is severed.
• Copies remaining in routine encrypted backups are purged on the normal backup rotation cycle.
• We may keep the minimum records the law requires us to retain (for example, certain billing/tax records).
• One short email after a quick exit. If you delete your account within 7 days of a payment, we use your email address one last time to send you one short email asking what you wanted Mythox to do and offering to help.

See the Account & Data Deletion page for the step-by-step request.

13 Children, changes & contact

Children

Mythox is intended for adults (18+) and is not directed to children. We do not knowingly collect data from anyone under 18. In particular, Mythox is not directed to children under 13, and in line with the U.S. Children's Online Privacy Protection Act (COPPA) we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

International users

Mythox is operated from the United States, and your data is processed and stored there. If you access Mythox from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where data-protection laws may differ from those in your country. We take reasonable steps to protect your data consistent with this policy.

Changes to this policy

We may update this policy as the product evolves. We'll change the "Last updated" date above and, for material changes, give you at least 14 days notice by email or in-app before the change takes effect. Continuing to use Mythox after that means you accept the updated policy.

Contact

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA · support@mythox.ai

14 YouTube API Services

YouTube API Services. Mythox uses YouTube API Services. When you choose to connect your YouTube channel, you authorize Mythox to access your own YouTube data through Google/YouTube's OAuth login. Mythox uses this data solely to show you your own channel and video analytics and revenue, and to generate recommendations for you. Mythox also uses the YouTube Data API to search public videos to help you research product demand. Mythox does not scrape, resell, or build a competitor-analytics database of other people's channels.

By using these features you agree to be bound by the Google Privacy Policy: https://policies.google.com/privacy .

Data we store and how long. We store only the tokens and the summarized analytics/revenue figures needed to show you your dashboard, for as long as your channel stays connected. Stored YouTube data is refreshed or removed in line with the YouTube API Services Developer Policies.

Disconnecting and deleting your data. You can disconnect your YouTube channel from Mythox at any time in Settings > Connections, which deletes the stored tokens and the YouTube data we hold for you. You can also revoke Mythox's access directly through your Google account at https://myaccount.google.com/permissions . Revoking access there stops all further data access and we delete the associated stored data.

15 Wellness and health-related data

Some of the data you can type in is about your body and mind: energy, recovery, or mood figures you enter yourself. The law in some places (for example Washington State's My Health My Data Act) calls this consumer health data, and we treat it that way:

• We never sell it, and we never use it for advertising.
• It is used for one thing: showing you your own patterns and, if you switch it on, letting Midas personalize around them.
• Midas uses wellness data only if you turn that on in Settings. It is off by default.
• When it is on, the relevant parts go to the AI provider running the model you picked, exactly as described in Section 7.
• We erase it when you ask us to erase your data, as described in Section 12.

Apple Health. The Mythox iPhone app can read four things from Apple Health: steps, sleep, heart rate and active minutes. It asks only when you tap "Allow reading for this session", and it only reads: it never writes anything to Apple Health. These readings stay on your phone. They are never sent to our servers or to any AI, and never used for advertising.

01 Acceptance

By creating an account or using Mythox in any way, you agree to these Terms of Service ("Terms"). If you don't agree, please don't use Mythox. These Terms form a binding agreement between you and Mythox ("we", "us"), a Florida limited liability company with a mailing address at 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

If you use Mythox on behalf of a business or organization, you represent that you have the authority to bind that entity to these Terms, and "you" refers to that entity.

02 What Mythox is

Mythox is a web and desktop application that helps creators, entrepreneurs, and online business owners bring their finances, time, energy, goals, and work together in one place - with an AI guide (Midas) built in.

03 Eligibility

You must be at least 18 years old to use Mythox. By using the service, you confirm that you meet this requirement. Mythox is not directed at children, and we do not knowingly collect data from anyone under 18.

You must also comply with all applicable laws in your jurisdiction when using Mythox.

04 Your account

When you create an account, you are responsible for:

• Keeping your login credentials confidential. Do not share your password with anyone.
• All activity that happens under your account, whether or not you authorized it.
• Notifying us promptly at support@mythox.ai if you believe your account has been compromised.

One account per person. You may not create or operate more than one account to get around plan limits, free trials, or a suspension. We may suspend or terminate accounts that do.

Two-factor authentication. We offer optional two-factor authentication (2FA) to help protect your account, and we strongly encourage you to turn it on.

We may suspend or terminate accounts that violate these Terms or that we reasonably believe pose a risk to the service or other users.

05 Acceptable use

You agree not to use Mythox to:

• Break any law or regulation, or facilitate illegal activity.
• Harass, abuse, or harm others.
• Attempt to reverse-engineer, decompile, or extract source code from Mythox.
• Resell, sublicense, or otherwise commercialize access to the service without our written permission.
• Scrape, crawl, or use automated means to extract data from Mythox beyond normal app use.
• Interfere with or disrupt the service, its servers, or networks connected to it.
• Upload or transmit malware, viruses, or any harmful code.
• Attempt to gain unauthorized access to another user's account or data.

We reserve the right to remove content or suspend access if we determine (in our reasonable judgment) that these rules have been violated.

06 Subscriptions & billing

Billing. Mythox is live. Every plan starts with a 3-day free trial when you add a payment method and it is checked. The trial ends at whichever of these three comes first: 3 days pass, you spend all your trial credits, or you export, download or publish a product. When it ends your card is charged for the plan you chose and your paid membership starts. No charge is made before that. Cancel before it ends and you are not charged. Paid plans are Pro ($34/mo), Scale ($100/mo), Business ($199/mo), and MAX ($249/mo), with yearly billing available at a discount.

Pricing is published clearly on the Pricing page before you are charged. Specifically:

• Subscriptions are billed securely through Stripe. We never store your card number - Stripe handles all payment data.
• Subscriptions auto-renew at the end of each billing period unless you cancel.
• You can cancel anytime from your account settings. When you cancel, you keep access until the end of the period you already paid for.
• AI credits. AI features run on credits included with your plan. See AI credits below for how they work.
• Taxes may apply depending on where you are located.

Price changes. If we change the price of a plan, we will give you at least 30 days notice by email or in-app before the new price applies to you. Continuing to use Mythox after that notice period means you accept the new price.

See the Subscription, Billing & Refunds page for full details on payments, refunds, and failed-payment handling.

07 Your content

Content you create inside Mythox - your goals, journal entries, notes, product ideas, financial data you enter manually, and anything else you add - belongs to you.

By using Mythox, you grant Mythox a limited, non-exclusive, royalty-free license to store, display, and process your content solely to operate and improve the service for you. We do not use your personal content for advertising, and we do not sell it.

You are responsible for the content you add. Don't upload content that violates others' rights or that you don't have permission to use.

08 AI features

Mythox includes an AI guide called Midas that generates responses based on your data and questions. A few important things to know:

• AI responses are generated and may be incomplete, inaccurate, or out of date. Always apply your own judgment.
• Nothing Midas says is financial advice, legal advice, tax advice, or professional advice of any kind. It is a tool to help you think, not a substitute for a qualified professional.
• You are solely responsible for any decisions you make based on AI output from Mythox.
• When you use AI features, relevant parts of your data are sent to the underlying AI model provider to generate a response. See our Privacy Policy (Section 7) for details.

09 Third-party services

Mythox integrates with third-party services to deliver its features. These providers operate under their own terms and policies, which you should review:

• Plaid - for secure bank connections (Plaid End User Privacy Policy)
• Stripe - for subscription billing (Stripe's terms and privacy policy)
• AI model providers - for generating Midas responses (their respective terms)
• Supabase - for database and authentication (Supabase's terms)

We are not responsible for the practices of these third parties. Your use of their services through Mythox is subject to their terms.

10 Disclaimers

Mythox is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the service will be uninterrupted, error-free, or completely secure. No oral or written information from Mythox creates any warranty not stated in these Terms.

This is especially true because the product is actively being developed.

11 Limitation of liability

To the fullest extent permitted by applicable law, Mythox and its founders, employees, and agents will not be liable for any indirect, incidental, special, consequential, or punitive damages - including lost profits, lost data, or business interruption - arising from your use of (or inability to use) Mythox, even if we were advised of the possibility of such damages.

Our total liability to you for any claim arising from these Terms or your use of Mythox will not exceed the amount you paid us in the 12 months before the claim arose (or $100 if you paid nothing).

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. If you are in one of those places, the above exclusions and limitations apply to the maximum extent permitted by local law.

12 Indemnity

You agree to defend, indemnify, and hold harmless Mythox and its founders, officers, and agents from and against any claims, damages, losses, costs, and expenses (including reasonable legal fees) arising from: (a) your use of Mythox, (b) your violation of these Terms, or (c) content you submit to the service that infringes or violates any third-party rights or applicable law.

13 Termination

You can stop using Mythox and close your account at any time by contacting us at support@mythox.ai.

Deleting your account in the app closes your account and ends your sign-in. We keep your content and records. To have your personal data and content permanently erased, email support@mythox.ai from your account email with the subject 'Erase my data'. We erase it within 30 days, except billing and tax records we must keep by law (up to 7 years).

We may suspend or terminate your access to Mythox at any time, with or without notice, if we believe you have violated these Terms, if continuing to provide the service is no longer feasible, or for any other reason at our sole discretion. We will try to give reasonable notice where practical.

On termination, your right to use Mythox ends immediately. The license you granted us under Section 7 (Your content) ends too, except for copies in routine backups, which are handled per our retention policy, and except that we keep your content, as our Privacy Policy explains, until you ask us to erase it. The sections that carry on after your account closes are listed in one place, in Section 20 (General terms), and that list is the only one.

14 Changes to the service and these Terms

We are actively building Mythox, which means the service will change. We may add, modify, or remove features at any time.

We may also update these Terms from time to time. When we do, we will update the "Last updated" date above. For material changes, we will take reasonable steps to notify you (such as an email or an in-app notice). Your continued use of Mythox after the effective date of any change means you accept the updated Terms.

15 Governing law

These Terms are governed by the laws of the State of Wyoming, USA, without regard to its conflict-of-law provisions. Mythox is a Wyoming limited liability company. Any dispute that cannot be resolved informally, and that is not sent to arbitration under Section 23, will be subject to the exclusive jurisdiction of the state and federal courts located in Laramie County, Wyoming, USA, and you consent to personal jurisdiction there.

If you are a consumer in the EU or UK, you may also have rights under the mandatory consumer protection laws of your country, and nothing in these Terms limits those rights.

16 The Builder

The Mythox Builder ("the Builder") is the AI-assisted tool inside Mythox that lets you describe, configure, and generate websites, landing pages, digital products, templates, and related assets ("Builder Outputs"). This section governs your use of the Builder and applies on top of the rest of these Terms.

What you own, and what stays ours

• Your inputs. You keep ownership of the original content you put into the Builder - your prompts, text, images, and materials.
• Your outputs are yours, permanently. You own the unique, you-specific parts of the Builder Outputs you generate on a paid plan. We assign those rights to you and that assignment does not expire. Cancelling does not take away ownership of anything you made.
• Ownership and hosting are two different things. Owning what you built is permanent. Us hosting it for you, and keeping it in your Mythox account, is part of what your subscription pays for. If your subscription ends, access to whatever is still sitting in your account ends with it. That includes products you built and never downloaded.
• So download what you want to keep. Export or download a product and you have your own copy, and you keep it forever whatever happens to your account. Leave it only in your Mythox account and it lives and dies with the subscription. This is the single most important sentence on this page: if it matters to you, download it.
• What stays ours. Builder Outputs may include Mythox platform templates, design systems, UI components, code scaffolding, and security patterns. These remain the property of Mythox and are licensed to you, not assigned. Owning a Builder Output does not give you a claim to the Mythox components built into it. Any third-party open-source code keeps its own licence.

Trial outputs

Builder Outputs created during a free trial are watermarked and for evaluation only. They are not licensed for commercial use until you are on a paid plan.

Acceptable use of the Builder

On top of the acceptable-use rules above, you may not use the Builder to generate: content that infringes anyone's intellectual property; fraudulent, deceptive, or misleading products or sites; defamation, harassment, hate speech, or incitement to violence; phishing pages, malware, or any malicious code; content that exploits or harms minors; or anything designed to get around a legal or regulatory requirement. We may refuse, remove, or disable Builder Outputs that break these rules, and suspend accounts that do.

Security scaffolding is assistance, not a guarantee

Builder Outputs may include Mythox-generated security scaffolding, authentication patterns, and IP-protection structures. This is provided to assist you, not as a guarantee of security or IP protection for your finished product. You are responsible for reviewing and testing every security component before you deploy, and you should have a qualified professional review any output that handles sensitive data, payments, or regulated information.

Generated code is provided as-is

Builder Outputs, including any generated code, are provided "as is" with no warranty of any kind. We do not warrant that they are error-free, secure, or ready for production without your own review and testing. You assume all risk for the use, deployment, or distribution of any Builder Output, and you are solely responsible for what you build and ship.

Liability for the Builder

To the fullest extent permitted by law, our total liability to you for any claim arising from the Builder or any Builder Output will not exceed the amount you paid Mythox in the 12 months before the claim arose (or $100 if you paid nothing). This is the same single cap set out in Section 11, and it is not a separate or additional cap.

Changes to these Builder terms

We may update these Builder terms from time to time. For material changes we will give you at least 30 days notice by email or in-app. Continuing to use the Builder after the change takes effect means you accept the updated terms.

17 AI credits

AI-powered features in Mythox run on credits. How credits work:

• Each paid plan includes a set amount of AI credits per billing cycle. The current amounts are shown on the Pricing page.
• Credits are tied to your billing cycle and do not roll over to the next cycle unless your plan page says otherwise.
• If you run out, additional credits may be available to purchase.

18 Intellectual property and feedback

Mythox platform IP. All intellectual property in the Mythox platform - the software, interfaces, brand, trademarks, design systems, and underlying technology - belongs to Mythox. These Terms give you a limited licence to use the service; they do not transfer any of those rights to you. Mythox is our trademark.

Feedback. If you send us suggestions or feedback about Mythox, you grant Mythox a perpetual, royalty-free, worldwide licence to use that feedback for any purpose, with no obligation to you.

19 Copyright and DMCA

Mythox respects intellectual property rights and responds to valid notices under the U.S. Digital Millennium Copyright Act (DMCA). If you believe content on Mythox infringes your copyright, send a written notice with the information required by 17 U.S.C. 512(c)(3) to our designated agent:

• Designated DMCA agent: Mythox
• Email: support@mythox.ai
• DMCA registration number: DMCA-1074510

What your notice must include: the work you say was infringed; where the material appears on Mythox; your contact details; a statement that you believe in good faith the use is not authorized; a statement, under penalty of perjury, that you are the owner or authorized to act for them; and your signature.

Counter-notice. If your content was removed and you believe that was a mistake or a misidentification, you may send a counter-notice to the same agent with: what was removed and where it appeared; a statement under penalty of perjury that you believe in good faith it was removed by mistake; your name, address, phone number and email; your consent to the jurisdiction of the federal court for the district where you live (or, if you are outside the United States, the federal court covering Laramie County, Wyoming); and your signature. We forward valid counter-notices to the person who complained. Unless they tell us within 10 to 14 business days that they have gone to court, we may restore the material.

20 General terms

• Entire agreement. These Terms, together with the Privacy Policy and the other policies linked here, are the entire agreement between you and us about Mythox.
• Severability. If any part of these Terms is found invalid or unenforceable, the rest stays in full force.
• No waiver. If we do not enforce a part of these Terms right away, that is not a waiver of our right to enforce it later.
• Assignment. You may not transfer your rights or obligations under these Terms without our written consent. We may assign ours, for example as part of a business transfer.
• Survival. These sections continue after your account ends, and this is the single list: Your content (Section 7), AI features (Section 8), the Builder (Section 16), Intellectual property and feedback (Section 18), Disclaimers (Section 10), Limitation of liability (Sections 11 and 24), Indemnity (Section 12), Governing law (Section 15), Binding arbitration (Section 23), and these General terms (Section 20).

21 Contact

Questions about these Terms? Email us at support@mythox.ai.

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

22 How these additions apply

Sections 22 through 36 below were added to strengthen and clarify these Terms. They apply in addition to, not in place of, everything above. Read together, nothing in them removes a right or protection given to you by an earlier section.

23 Binding arbitration, class action waiver & jury trial waiver

Please read this section carefully. It affects your legal rights, including your right to go to court.

Agreement to arbitrate. You and Mythox agree that any dispute, claim, or controversy arising out of or relating to these Terms, your use of Mythox, or the relationship between you and Mythox (a "Dispute") will be resolved through binding individual arbitration, and not in court, except as set out below. This agreement to arbitrate is governed by the Federal Arbitration Act.

Informal resolution first. Before filing an arbitration, you agree to first contact us at support@mythox.ai and attempt to resolve the Dispute informally for at least 30 days.

Arbitration process. If informal resolution fails, the Dispute will be resolved by a single arbitrator through binding arbitration administered by a recognized arbitration provider (such as the American Arbitration Association) under its consumer or commercial arbitration rules then in effect, applying Wyoming law. The arbitration will take place in Laramie County, Wyoming, or remotely by video or phone at your election. The arbitrator's decision is final and binding, subject only to limited judicial review under the Federal Arbitration Act.

Class action waiver. You and Mythox agree that any Dispute will be brought only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not otherwise preside over any form of a class or representative proceeding. If this class action waiver is found unenforceable as to a particular Dispute, that Dispute (and only that Dispute) will proceed in court rather than in arbitration, and the rest of this section remains in effect.

Jury trial waiver. To the extent any Dispute proceeds in court rather than arbitration for any reason, you and Mythox each irrevocably waive any right to a trial by jury.

Small claims exception. Either party may bring an individual claim in small claims court instead of arbitration if the claim qualifies.

Opt-out. You may opt out of this arbitration agreement by emailing support@mythox.ai with the subject line "Arbitration Opt-Out" within 30 days of first accepting these Terms, including your name and account email. If you opt out, Disputes will be resolved under Section 15 (Governing law) instead, including the exclusive jurisdiction of the Laramie County, Wyoming courts, but the class action waiver in this section still applies to the fullest extent permitted by law.

Severability of this section. If any part of this arbitration agreement is found unenforceable, the rest of it remains in force, except that if the class action waiver is found unenforceable in its entirety and cannot be severed, this entire arbitration section is null and Section 15 (Governing law) applies instead.

24 Reaffirmed limitation of liability

There is one liability cap in these Terms, and it is the one in Section 11. To the fullest extent permitted by applicable law, Mythox's total cumulative liability to you for all claims arising from or relating to these Terms, the Builder, or your use of Mythox will not exceed the amount you actually paid to Mythox in the 12 months before the claim arose, or $100 if you paid nothing. That single cap applies regardless of the legal theory of the claim (contract, tort, statute, or otherwise) and even if a remedy fails of its essential purpose. Section 11's exclusion of indirect, incidental, special, consequential, and punitive damages remains in full force and is not narrowed by this section.

25 Assumption of risk: AI, Midas & financial features

You expressly acknowledge and agree that:

• Midas and every other AI-generated output in Mythox is produced by probabilistic models and may be wrong, incomplete, outdated, or misleading, even when it sounds confident or authoritative.
• Mythox is not a bank, broker-dealer, investment adviser, accountant, bookkeeper, tax preparer, law firm, or fiduciary of any kind. Nothing generated by Mythox, including any bookkeeping summary, categorization, projection, insight, or recommendation, is financial, investment, accounting, tax, or legal advice, and none of it creates any advisory, fiduciary, or professional relationship between you and Mythox.
• Financial data displayed in Mythox (whether imported via Plaid, uploaded by CSV, or entered manually) is provided for informational and organizational purposes only. Balances, categorizations, and calculations may contain errors due to third-party data feeds, sync delays, categorization mistakes, or bugs. You are solely responsible for independently verifying any financial figure before relying on it for any decision, filing, or representation to a third party.
• You assume all risk arising from any action you take, or decision you make, in reliance on Midas or on any financial or bookkeeping data or feature in Mythox, including business, investment, tax, and legal decisions. You should consult a qualified, licensed professional before acting on anything Mythox shows or generates.
• This section applies in addition to, and does not narrow, the AI disclaimers in Section 8 or the general disclaimers in Section 10.

26 No proration, chargebacks & collection costs

• No proration. When you cancel, you keep access through the end of your paid period, but no partial-period or prorated refund is issued for the unused portion of any billing cycle, except where required by law.
• Chargebacks. If you see a charge for Mythox access you already received, please contact us first at support@mythox.ai so we can fix it fast. If a chargeback or bank reversal is filed for a charge that matches access you received, we may suspend or terminate the account while it is resolved. Nothing in these Terms limits your rights with your bank or card provider, including for unauthorized, duplicate, or incorrect charges, and nothing here makes a lawful dispute a breach of contract.
• Collection costs. If we refer unpaid amounts to collections or pursue legal action to recover them, you agree to pay our reasonable costs of collection, including reasonable attorneys' fees, to the extent permitted by law.
• Account forfeiture on abuse. Where an account is terminated for violating Section 5 (Acceptable use), Section 31 below, or engaging in fraud or chargeback abuse, any unused subscription time, AI credits, or balance is forfeited and no refund is owed.

27 No SLA & no uptime guarantee

This section restates and hardens the service note in Section 2. Mythox is offered with no service level agreement. We do not guarantee any specific uptime percentage, response time, or availability. Scheduled or unscheduled downtime, data migrations, feature removal, and breaking changes may occur without notice. No credit, refund, or compensation is owed for downtime or unavailability, except where required by law. This section governs over any implied uptime expectation elsewhere in these Terms or in any marketing material.

28 User data-loss disclaimer

While we maintain routine encrypted backups as described in our Data Retention & Deletion Policy, you are responsible for maintaining your own independent copies of any critical information you store in Mythox, including financial records, journal entries, goals, product content, and Builder Outputs. To the fullest extent permitted by law, Mythox is not liable for any loss, corruption, or unavailability of your data, however caused (including bugs, third-party provider failures, service interruptions, account termination, or your own actions), beyond our obligation to attempt routine backup recovery on a commercially reasonable, best-efforts basis.

29 Third-party data & AI provider disclaimer

Mythox depends on third-party providers, including Plaid for bank connectivity and one or more AI model providers for Midas. You acknowledge that:

• Bank and transaction data displayed in Mythox reflects what these third parties return to us, which may be delayed, incomplete, miscategorized, or temporarily unavailable due to circumstances outside our control (including a bank or provider outage, API change, or rate limit).
• AI-generated output reflects the underlying model provider's behavior at the time of generation and may change, degrade, or be unavailable if that provider changes or discontinues its service.
• Mythox is not responsible for, and disclaims all liability arising from, the acts, omissions, downtime, data errors, or policy changes of Plaid, Stripe, Supabase, any AI model provider, or any other third-party service integrated with Mythox, beyond our obligation to use commercially reasonable efforts to select and maintain reputable providers.

30. (Removed.)

31 Anti-abuse enforcement & account forfeiture

In addition to the acceptable-use rules in Section 5, if we reasonably determine, in our sole discretion, that your account is engaged in abuse of the service, including but not limited to circumventing usage or credit limits, sharing or reselling account access, automating interactions with Midas to extract training data or exceed fair use, exploiting a bug or vulnerability rather than reporting it, or creating multiple accounts to obtain trial or promotional benefits more than once, we may immediately suspend or terminate the account without notice and without refund, and any AI credits, subscription time, or balance associated with that account are forfeited.

We may also do less than that. Where closing or suspending the account is more than the situation needs, we may instead revoke any trial or promotional credits on the account, end the free trial before any charge is made, and require an active paid subscription before paid features can be used again. We tell you in the app and by email when we do this.

32 Force majeure

Mythox will not be liable for any delay or failure to perform any obligation under these Terms where the delay or failure results from any cause beyond our reasonable control, including but not limited to acts of God, natural disaster, war, terrorism, riot, labor dispute, internet or telecommunications failure, power outage, governmental action, pandemic, or failure or outage of a third-party provider (including Supabase, Plaid, Stripe, or any AI model provider).

33 Export control & sanctions compliance

You may not access or use Mythox if you are located in, or a national or resident of, any country subject to a comprehensive U.S. trade embargo, or if you are listed on any U.S. government restricted-party list (including the U.S. Treasury's Specially Designated Nationals list or the U.S. Commerce Department's Denied Persons or Entity List). By using Mythox, you represent that you are not subject to any such restriction. You agree to comply with all applicable U.S. and foreign export control and economic sanctions laws in your use of Mythox.

34 Additional Builder license restrictions

This section applies on top of Section 16 (The Builder). Your license to use the Builder does not permit you to: (a) sublicense, resell, or white-label the Builder itself as a standalone product or service separate from Mythox; (b) represent the Builder or its underlying AI as a tool you built or trained independently; or (c) use the Builder to build, train, or launch a product or service that directly competes with or substantially replicates the core functionality of Mythox or the Builder. We may terminate your access to the Builder, without affecting the rest of your Mythox account, if we reasonably determine you have violated this section.

35 DMCA repeat infringer policy

In addition to the process in Section 19, Mythox will, in appropriate circumstances and at our sole discretion, terminate the accounts of users who are determined to be repeat infringers of third-party intellectual property rights. A user may be treated as a repeat infringer if we receive two or more valid, unretracted DMCA takedown notices concerning content associated with that user's account within any 12-month period.

36 YouTube API Services

YouTube API Services. Mythox's YouTube features use YouTube API Services. By using them, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and the YouTube API Services Terms of Service (https://developers.google.com/youtube/terms/api-services-terms-of-service). You must comply with Google's and YouTube's terms when you connect your account. Mythox's access to YouTube API Services may be limited, suspended, or revoked by Google/YouTube at any time, and Mythox may lose the ability to provide these features if that happens. You can disconnect and delete your YouTube data as described in our Privacy Policy.

01 What are cookies

Cookies are small text files that a website or app stores in your browser. They are used for things like keeping you logged in, remembering your preferences, and understanding how a site is used. Local storage is a similar browser feature that lets apps save data on your device without sending it back to a server on every request.

This policy covers how Mythox uses cookies and local storage.

02 What Mythox uses

We keep cookie and local-storage use to the minimum needed to run the app. Here is what we use:

Measurement and advertising tags on the public website

These run on the public marketing website (mythox.ai) only. They do not run inside the Mythox app at app.mythox.ai. They tell us which advertising actually brings people who sign up. Each one sets its own cookies and reports a page view and, on the thank-you page, a signup, to the platform named.

Each of these platforms is a separate company that handles what it collects under its own privacy policy: Google, Meta, TikTok, X, OpenAI.

We also record which advertising campaign a visit came from (the utm_ values in the address bar) so a signup can be matched back to the ad that caused it.

03 What we don't do

• We do not put advertising or measurement tags inside the Mythox app itself, at app.mythox.ai. They run on the public marketing website only.
• We do not send your financial data, bank data, account contents, or anything you create in Mythox to any advertising platform. The tags see page visits and signups on the public site, nothing from inside the product.
• We do not sell your personal information for money.
• We do not use these tags to make any decision about you, your pricing, or your account.

04 Why we run them at all

Advertising is how people find Mythox, and these tags are the only way to tell which ads brought someone who actually signed up, instead of guessing and burning money. That is the whole reason they exist. They are not used to build a profile of you, to price you differently, or to follow you around for its own sake.

If we add or remove a platform, we update the table in Section 02 and the "Last updated" date at the top of this policy before the change goes live.

03a How to switch the advertising tags off

You can use Mythox completely with all of them off. Nothing in the product depends on them. Any one of these works:

• Turn on Global Privacy Control in your browser. We honour it. Firefox and Brave have it built in; Chrome, Edge and Safari take a free extension from globalprivacycontrol.org. When we see that signal we treat it as you telling us not to share your information for advertising.
• Block third-party cookies in your browser. Safari and Firefox already do this by default, which stops most of these tags on their own.
• Use any tracker-blocking extension. We do not work around blockers and we never will.
• Email us. Write to support@mythox.ai with the subject "Do not share my information" and we will action it and confirm.

05 How to control cookies

You can control and delete cookies through your browser settings. Here are links to the instructions for common browsers:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Safari: Preferences > Privacy > Manage Website Data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Edge: Settings > Cookies and site permissions

Note: if you delete or block the essential session cookie, you will be signed out of Mythox and will need to log in again. The theme and mode preferences stored in local storage can be cleared from your browser's developer tools or site-data settings without affecting your account.

06 Contact

Questions about cookies or privacy? Email us at support@mythox.ai.

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 Trial access

Read the three end-triggers carefully, because two of them are not about time. The trial is meant for deciding, not for producing. If you spend all your trial credits inside the first hour, the trial is over and you are charged then. If you export, download or publish a product on your first day, the trial is over and you are charged then. That is deliberate: exporting, downloading or publishing is you taking the finished thing, and the plan starts at that point.

Auto-renewal. When the trial ends your paid plan begins and renews automatically, monthly or yearly depending on the plan you chose, at the price shown on the Pricing page, until you cancel. You can cancel at any time from Settings inside the app, in the plan and billing section. Cancelling stops the next renewal; it does not refund the period you are already in.

We show paid plans clearly on the Pricing page before any billing begins.

The trial is for deciding, not for working around paying. If we reasonably believe a trial is being abused, for example many accounts opened by the same person or false billing details, we may end the trial before any charge is made and remove any trial or promotional credits, and paid features then need an active paid subscription. We tell you in the app and by email if that happens. See Section 31 of the Terms.

02 Available plans

Current Mythox plans are Pro ($34/mo), Scale ($100/mo), Business ($199/mo), and MAX ($249/mo). Every plan starts with the 3-day free trial described in Section 01 when you add a payment method and it is checked:

• Pricing is published clearly on the Pricing page before any billing begins.
• You will be notified in advance and given the chance to choose a plan or opt out.
• Early customers may receive special early-adopter pricing, with details shown before any charge.

The Pricing page is the source of truth for current prices.

03 How billing works

Here is how billing works:

• Secure payments via Stripe. All payment processing is handled by Stripe. We never see or store your card number, CVV, or full payment details - Stripe handles all of that under their own PCI-compliant systems.
• Auto-renewal. Subscriptions renew automatically at the end of each billing period (monthly or annual, depending on the plan you choose) unless you cancel beforehand.
• Billing date. You are billed on the date you start your paid plan, and then on the same date each period thereafter.
• Receipts. Stripe sends an email receipt after each successful charge.

04 Cancellation

• You can cancel your subscription at any time from your account settings inside Mythox.
• When you cancel, your subscription does not renew at the next billing date.
• You keep full access to Mythox until the end of the billing period you already paid for. Cancellation is not immediate loss of access.
• After the period ends, your account moves to the Trial plan (if available) or access ends, depending on the plan structure at that time.

05 Refunds

All fees are non-refundable except where required by law or expressly stated in a written offer from Mythox. Here is how that works in practice:

• If you were charged by mistake or due to a technical error on our end, we will refund you promptly - just email support@mythox.ai.
• Outside the cases above, fees are non-refundable. If something is not working for you, email us and we will do our best to make it right inside the service.
• No cooling-off or trial-period refund. Mythox does not offer a 14-day money-back period, a satisfaction guarantee, or any refund window. The free trial exists so you can decide before you pay. Where the law of your country gives you a mandatory statutory right that cannot be waived, that right still applies and nothing here removes it; but by starting the service immediately at signup you ask us to begin performance right away, which in most places ends any withdrawal right once the service has started.

To request a refund, email support@mythox.ai with your account email and a brief description of the issue.

06 Failed payments

If a payment fails (for example, because a card expired), here is what happens:

• Stripe will automatically retry the charge a few times over the following days.
• You will receive an email from Stripe notifying you of the failed payment and asking you to update your payment method.
• If payment cannot be collected after retries, your subscription may be paused or downgraded. We will notify you before access is affected.
• You can update your payment method at any time - see Section 7 below.

07 Updating your payment method

You can update your card or payment method at any time from your account settings inside Mythox. Changes take effect on your next billing cycle (or immediately if you are fixing a failed payment).

If you have trouble updating your payment method, email us at support@mythox.ai and we will help.

08 Taxes

Applicable taxes (such as VAT, GST, or sales tax) may be added to your subscription price depending on where you are located. If taxes apply to your account, they will be shown clearly before you complete any purchase. Stripe handles tax calculation and collection where required.

09 Contact

Billing questions, refund requests, or anything else: email support@mythox.ai.

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 Purpose & scope

This policy describes the security controls we apply to Mythox - a web and desktop application that helps creators and entrepreneurs see their finances, time, energy, goals and work in one place. It covers the application, its database, the connections it makes to third-party services (including a user's bank, via Plaid), and the systems and accounts used to operate it.

02 Governance & responsibility

Mythox is the accountable owner for information security and the single point of contact for any security or privacy matter, reachable at support@mythox.ai.

• This policy is reviewed and, if needed, updated at least once a year and whenever there is a material change to the product, the data we handle, or the systems we use.
• Security is treated as a release requirement, not an afterthought: every release goes through a security review gate before it ships (Section 7).
• If contractors or employees are added in future, they will be granted the least access needed for their role and will be required to follow this policy.

03 Access control

Access to production systems and user data is restricted on a least-privilege basis - people and components get only the access they need, and nothing more.

Per-user data isolation (enforced by the database)

User data is stored in a PostgreSQL database (Supabase) with Row-Level Security (RLS) turned on. RLS means the database itself is configured to only let an account read or write its own rows, so one user's data is walled off from every other user at the data layer, not just in the app.

Application & API keys

• The app uses restricted, least-privilege API keys. The public (browser) key can only act through the per-user RLS rules above. The powerful service-role key is never placed in client code or sent to the browser.
• Server-side secrets (including the Plaid secret and any bank access tokens) are held only on the server and are never exposed to the browser.

Administrative access

• Administrative consoles (the database/hosting provider, the payment provider, the code repository) are accessible only to the founder.
• Logout clears in-browser data and cached state so a shared device never exposes the previous session.

04 Encryption

• In transit: all connections to Mythox and its database use HTTPS with TLS 1.2 or higher. Plain, unencrypted connections are not used.
• At rest: user data stored in the database and file storage is encrypted at rest using AES-256, provided by our managed database platform (Supabase).
• Bank data from Plaid (account and transaction information, and the access token that represents a user's connection) is handled server-side and stored encrypted at rest, alongside the same per-user isolation as the rest of the data. Bank connect is live and runs to this standard on the already-encrypted platform above.

05 Secrets handling

• API keys, tokens and other secrets live in environment variables and managed secret stores - never hard-coded in source files and never committed to the code repository.
• Secrets are never printed, logged, or echoed into application output or build logs.
• Keys are scoped to the minimum permissions required for their job (restricted keys).
• If a secret is suspected to be exposed, it is rotated (replaced) promptly and the exposure is investigated.

06 Vulnerability management

• Pre-deployment security review: every meaningful code change is reviewed for bugs, security issues, and broken behavior by an automated AI code-review gate before it is deployed. Findings are fixed and re-verified before release.
• Managed-platform patching: the underlying database, hosting and serverless platform (Supabase) is patched and maintained by the provider, so infrastructure-level fixes are applied without us managing servers directly.
• Dependencies are kept reasonably current and reduced to what is necessary.

07 Secure development

• Code is kept in version control (git) with a clear change history.
• Builds are additive - existing protections are not removed to release a feature.
• Changes are tested locally before any deploy, and pass the security-review gate described above.
• The data model was designed multi-user and access-controlled from the start, so security is structural rather than bolted on.

08 Agent & API access (locked scopes)

Mythox lets a user connect their own AI assistants (e.g. via a command-line tool or an MCP connector) to act on their data. This access runs through a frozen, least-privilege scope policy that is enforced in code and cannot be weakened at runtime:

• Read-only on financial data and credentials, and credential-like values are redacted before they are ever returned.
• Write only to a small allow-list (a user's next-actions, journal entries, and systems). It can never delete data, never change transactions, never run raw database commands, and never expose bank/connection tokens.
• The agent signs in as the user, so the same per-user isolation that protects the app protects the agent path too - it never uses an administrator key.

09 Incident response

If a security incident or data breach is suspected, we follow a defined process:

1. 1Detect & contain - stop the issue spreading (e.g. rotate keys, disable an affected path).
2. 2Assess - determine what data and which users were affected.
3. 3Notify - inform affected users and relevant parties (including Plaid where bank-related data is involved, and regulators where the law requires) without undue delay.
4. 4Remediate & document - fix the root cause, record what happened, and improve controls to prevent recurrence.

Report a suspected issue to support@mythox.ai.

10 Third-party providers (sub-processors)

We rely on a small set of established providers, chosen for their security posture, and share with them only what is needed to run the service:

• Supabase - database, authentication & hosting
• Plaid - secure bank connections
• Stripe - subscription payments
• AI model providers - only when a user uses the AI features

The current list and what each one handles is kept up to date in our Privacy Policy.

11 Current security controls

A summary of the security controls in place:

In place today

• Per-user Row-Level Security (data isolation enforced by the database).
• TLS 1.2+ in transit; AES-256 at rest.
• Restricted, least-privilege API keys; secrets in env / secret store, never in code.
• Frozen least-privilege agent scope policy with credential redaction.
• Automated security-review gate before every release.
• Two-factor authentication (2FA) available to all users, required to connect a bank, and protecting administrative consoles.

01 Principle

Keep what you use. Delete what you ask us to. Hold nothing longer than we need.

Mythox retains personal data only for as long as it is needed to provide Mythox to you, to meet a legal obligation, or to resolve disputes and enforce our agreements. When data is no longer needed for those purposes, it is deleted or anonymized.

You are always in control. You can see the data we hold about you, request a full export, delete your account, and have all associated data erased at any time through Account & Data Deletion below. We do not retain data beyond what you have consented to, and we never sell your personal information.

02 What we keep & how long

03 How you delete your data

You can delete your data at any time:

• By email - write to support@mythox.ai from your account email with the subject 'Erase my data'. We verify the request comes from you, then carry it out. We erase your data within 30 days, except billing and tax records we must keep by law (up to 7 years).
• In the app - disconnecting a connected source removes that data; a one-click "Delete account" control is available inside the app, in Settings.

See the Account & Data Deletion page for the step-by-step request process.

04 What happens when you delete

Deleting your account in the app closes your account and ends your sign-in. We keep your content and records. To have your personal data and content permanently erased, email support@mythox.ai from your account email with the subject 'Erase my data'. We erase it within 30 days, except billing and tax records we must keep by law (up to 7 years).

• Your account and personal data are erased from our active database within 30 days of your erase request.
• Any Plaid access tokens are revoked, severing the bank connection so no further data is received.
• Per-user Row-Level Security means your data was already isolated to your account; erasure removes those rows entirely.
• We confirm to you when deletion is complete.
• One short email after a quick exit. If you delete your account within 7 days of a payment, we use your email address one last time to send you one short email asking what you wanted Mythox to do and offering to help.

05 Backups

We keep routine, encrypted backups of the database so data can be recovered after a failure. Backups are kept for a short rolling window and then automatically overwritten. When you delete your data, any copy still present in a backup is purged on the normal backup rotation - it is not restored into the live system except as part of a genuine disaster recovery, after which the deletion is re-applied.

06 Legal & tax retention

We may retain the minimum information the law requires us to keep even after you delete your account - for example, certain billing, tax and accounting records, or records needed to comply with a legal obligation, resolve a dispute, or prevent fraud. We keep only what is required, for only as long as required, and then delete it.

07 Periodic review

This policy and our retention periods are reviewed at least once a year (and when the law or our product materially changes) to confirm we are not holding data longer than necessary and that our practices are reviewed against our obligations under applicable privacy laws such as the GDPR and California's CCPA/CPRA. The Founder is responsible for this review.

08 Contact

Questions or deletion requests: support@mythox.ai

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 How to request deletion

You can delete your account yourself in the app, in Settings. If you would rather do it by email, here is what to do:

1. 1Send an email from the email address linked to your Mythox account to support@mythox.ai.
2. 2Use the subject line: "Delete my account"
3. 3You don't need to explain anything further. We will verify the request comes from you and then carry it out.

02 What gets deleted

Deleting your account in the app closes your account and ends your sign-in. We keep your content and records. To have your personal data and content permanently erased, email support@mythox.ai from your account email with the subject 'Erase my data'. We erase it within 30 days, except billing and tax records we must keep by law (up to 7 years).

When we process your erase request, here is what we remove:

• Your account (email, name, password hash, settings).
• All personal data associated with your account in our active database.
• All content you created inside Mythox (goals, journal entries, notes, product ideas, systems, and any other app content).
• Any financial data you connected or entered (Plaid transactions, CSV imports, manual entries).
• Your Plaid access tokens are revoked, which severs your bank connections permanently so we can no longer receive data from those accounts.

We will confirm by email when deletion is complete.

One short email after a quick exit. If you delete your account within 7 days of a payment, we use your email address one last time to send you one short email asking what you wanted Mythox to do and offering to help.

03 Timeline

We aim to process deletion requests within 30 days of receiving a verified request. In most cases it happens much faster.

Copies of your data that exist in routine encrypted backups are purged on the normal backup rotation cycle after deletion - they are not restored into the live system.

04 What may be legally retained

There is a small category of records we may be legally required to keep even after you delete your account:

• Billing and tax records - for example, records of transactions processed through Stripe, which may need to be retained for accounting and tax purposes (typically up to 7 years under applicable law).
• Any records required by law to resolve a dispute, comply with a legal obligation, or prevent fraud.

We keep only the minimum required, only for as long as required, and then delete it. See our Data Retention Policy for full details.

05 Disconnect vs. delete

These are two different things:

• Disconnecting a source (like a bank account or Rize) stops new data from syncing and revokes the connection for that source only. Your account and other data remain intact.
• Deleting your account closes your account and ends your sign-in, and we keep your content and records; an erase request removes everything - your account, all personal data, all content, and all connected-source data - subject only to the legally required records above.

If you just want to stop syncing a particular data source, you can disconnect it from within the app without deleting your whole account.

06 Delete your account in the app

You do not have to email us. Open Settings inside the Mythox app and use the "Delete account" option. It closes your account and ends your sign-in, cancels any active subscription, and keeps your content and records until you ask us to erase them. The email method still works if you prefer it, and we will respond and process it promptly.

01 The access model

Access to production assets and sensitive data in Mythox follows the principle of least privilege: every person and every component is granted only the minimum access required, and access to financial data is constrained at the data layer itself.

02 Controls in place

03 Access to sensitive data, by component

• Browser app: only the signed-in user's own data, via the per-user RLS rules. No service-role key.
• Server functions: hold the Plaid secret and exchange tokens server-side, with bank tokens never returned to the client (bank-connect is live).
• Agent / API access: signs in as the user, runs under the same RLS, and is further constrained by the frozen scope guard (read-only on financial data and credentials, redacted).
• Administrators (founder): console access for operations, governed by this policy and the Information Security Policy.

04 Contact

Security questions: support@mythox.ai

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 Our commitment

Mythox is committed to making the Mythox website (mythox.ai), the Mythox application (app.mythox.ai), the Mythox desktop app and the Mythox mobile app usable by as many people as possible, regardless of disability, device, or assistive technology.

We treat an accessibility barrier the same way we treat any other defect: it gets reported, prioritized and fixed.

02 The standard we work to

We are working toward Web Content Accessibility Guidelines (WCAG) 2.1, Level AA, published by the World Wide Web Consortium. WCAG 2.1 AA is the standard most commonly referenced in connection with Title III of the Americans with Disabilities Act (ADA), Section 508 of the US Rehabilitation Act, and the European Accessibility Act.

Current status: substantially conformant. Mythox has been worked through against the standard, screen by screen, and the defects found were fixed rather than disclosed. The only things not covered are named in Section 04 below, and they are parts we do not build. We do not claim a formal certification, because we do not hold one.

03 What works

Every item below has been checked on the real product, not assumed. It covers the website, the web app, the Mac app and the iPhone app.

If you use a screen reader

• Every control has a name. Every button, link, text box, dropdown, slider, checkbox and switch is announced with what it actually is and does. That includes icon-only buttons, which say "Delete", not "multiplication sign".
• Messages are spoken. Success messages, error messages and validation problems are announced the moment they appear. When a form field is wrong, the field itself is marked as wrong and points at the message explaining why.
• Numbers that change are announced. Your credit balance, your progress count and the notification badge are read out when they update.
• Charts have descriptions. Every chart is named and described, so a chart is never a silent blank.
• Headings step down properly on every page and every screen, with exactly one main heading each, so you can jump through a long page by heading instead of reading it all.
• Landmarks are marked on every page and screen: header, navigation, main content, footer. The navigation says which screen you are currently on.
• Images. Images that carry meaning have text alternatives. Purely decorative graphics are hidden from the screen reader so they do not add noise.

If you use a keyboard, or cannot use a mouse

• Everything is reachable and operable by keyboard. There are no mouse-only controls and no keyboard traps.
• You can always see where you are. Every control shows a clear outline when you tab to it. Text field edges are visible against their background.
• "Skip to content" is the first thing on every page and every screen, so you never have to tab through the whole menu to reach the page.
• Pop-up windows keep your place. When a dialog opens, the keyboard stays inside it instead of wandering into the page behind. Escape closes it, and closing returns you to exactly where you were.
• Menus and dropdowns work with the arrow keys, plus Home and End, and announce whether they are open or closed and which item is selected.
• Expandable panels say whether they are open or shut.

On the iPhone app

• VoiceOver stays inside sheets and dialogs instead of drifting into the screen underneath.
• Every text field, button, tab, switch and section heading is named and announced with its role, so you can navigate by heading and know what is tappable.
• Text grows with your settings. Larger Text is respected throughout; nothing is locked to a fixed size.
• Tap targets are large enough. Small controls have an enlarged touch area, so a small tick or checkbox is still easy to hit.

Everywhere

• Reduce Motion is respected. Turn it on in your device settings and animations, sliding reveals, smooth scrolling and looping progress bars all stop.
• Zoom works. Nothing blocks pinch-zoom or browser zoom. You can magnify to 200% and beyond.
• No autoplaying sound. There is no audio or video anywhere in Mythox, so nothing ever talks over your screen reader.
• The website still works without scripts. If a script fails to load, the content is still there and readable.
• Light and dark both work, and so does every colour theme. You are never forced into one.

04 Where we are not finished

We will keep this section here permanently and keep it accurate, because a page that claims perfection is worth nothing to the person who runs into a wall.

• Parts of Mythox we do not build. The payment screens are provided by Stripe and the bank connection screens are provided by Plaid. We chose providers that do their own accessibility work, but we do not control those screens. If one of them blocks you, email us and we will complete that step with you another way.
• Things you build with Mythox. If you use the Builder to make a site or product, its accessibility is yours to manage. We do not check or certify what the Builder produces, and you should test it before you publish it.

If you find anything else, tell us and it goes on this list until it is fixed.

05 How we test

• Manual keyboard-only walkthroughs of the site and the application.
• Automated checks against the WCAG 2.1 AA success criteria.
• Colour contrast measured on the actual colour values used in each theme, in both light and dark mode.
• Testing with VoiceOver on macOS and iOS.
• A full pass over every screen of the web app and every screen of the iPhone app, control by control, most recently in August 2026.

We do not currently hold a third-party accessibility certification, and we do not claim one.

06 If something blocks you, tell us

What we commit to:

• We aim to reply within 5 business days.
• We tell you whether we can fix it, and by when.
• Where a fix will take time, we offer you another way to complete the task in the meantime, including doing it for you on request.
• You are never charged for help with an accessibility problem.

If you are not satisfied with our response, you may escalate by writing to Mythox at the postal address below, marked "Accessibility".

07 Scope and limits of this statement

This statement covers mythox.ai, app.mythox.ai, the Mythox desktop app and the Mythox mobile app. It does not cover third-party websites we link to, or content generated by users of the Builder. If you build a site or product with Mythox, the accessibility of what you publish is yours to manage. We do not warrant that anything the Builder produces is accessible, and you should check it against the same standard before you publish it.

This statement describes our commitments and our current status. It is not a warranty that every part of Mythox is free of accessibility defects, and nothing in it creates a right of action that does not otherwise exist under applicable law.

08 Contact

Accessibility questions and reports: support@mythox.ai, subject line "Accessibility".

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 No professional advice

Nothing produced by Mythox, by the Midas assistant, by any AI model available inside Mythox, or by any Mythox page, email, video or document is:

• financial advice or investment advice,
• tax advice or tax preparation,
• accounting, audit or bookkeeping certification,
• legal advice,
• medical, psychological or health advice,
• or professional advice of any other kind.

It is general information and software output. Before you act on anything you see in Mythox, and especially before you file anything with a tax authority, sign anything, borrow, invest, or make a decision that costs money, check it with a qualified professional who knows your situation.

02 What Mythox is not

Mythox is a software company. It is not:

• a bank, credit union, or other depository institution,
• a money transmitter or payment processor (payments are handled by Stripe),
• a registered investment adviser, broker, or dealer,
• a certified public accountant or accountancy firm,
• a law firm,
• a credit repair organisation or credit counselling service,
• or a fiduciary of any kind to you.

No relationship of trust, agency or fiduciary duty is created by your use of Mythox. We do not hold, move or have custody of your money. Bank connections are read-only and are provided by Plaid.

03 AI output can be wrong

Mythox uses large language models from several providers. These models are useful and they are also, at times, confidently wrong. They can invent facts, misread a number, misunderstand a rule, and produce different answers to the same question.

• Check anything that matters. Treat AI output as a first draft to be verified, never as a final answer.
• We do not guarantee accuracy, completeness or fitness for any purpose of anything an AI feature produces.
• Model behaviour changes. Providers update and retire models. Output you got last month may not be reproducible today.
• You are responsible for what you do with it. If you publish, send, file or act on AI output, that is your decision and your responsibility.

04 Money figures, bookkeeping and tax

Figures shown in Mythox, including balances, categories, profit, projections, tax estimates and bookkeeping summaries, are estimates generated from data supplied by you and by third parties. They are not certified accounts and they are not a tax return.

• Bank data comes through Plaid and reflects what your institution reports. It can be delayed, incomplete, duplicated or miscategorised.
• Categorisation, including any automatic categorisation, is a guess that you should review.
• Tax figures are rough indications only. Tax rules differ by country, state and situation and change over time.
• Any projection or forecast is a model of the future, not a prediction of it.

You remain responsible for your own books, your own filings and your own compliance. Reconcile against your bank and your accountant before relying on anything.

05 No guaranteed results

Mythox is a tool for building and running a business. Whether a business makes money depends on the market, the offer, the effort, the timing, the skill and a great deal of luck, none of which is under our control.

• We make no promise of any income, revenue, profit, growth, audience, ranking or business outcome.
• Any example, case study, screenshot, number or story shown anywhere by Mythox is an illustration of what has happened for someone, not a typical result and not a promise of your result.
• The typical purchaser of any product should expect to get little or no result unless they do the work.
• Past performance, ours or anyone else's, does not indicate future results.

06 Things the Builder makes

The Builder generates software, sites and content from your instructions. We do not review, approve or certify what it produces.

• Generated code, copy and design may contain errors, security weaknesses, accessibility defects, or material that resembles someone else's work.
• Any security scaffolding the Builder adds is assistance, not a guarantee, and is not a substitute for a security review.
• Before you publish anything the Builder made, you are responsible for checking it: that it works, that it is lawful where you publish it, that it does not infringe anyone's rights, that it handles other people's data lawfully, and that it is accessible.

07 Third-party information and links

Mythox displays information from third parties, including banks, Plaid, Stripe, AI model providers, and any service you connect. We do not control that information and do not warrant it. Links to outside websites are provided for convenience only and are not an endorsement. What happens on someone else's site is governed by their terms, not ours.

08 How this fits with the rest of the legal terms

This Disclaimer is part of, and is read together with, the Terms of Service. Where the Terms of Service set out limitations of liability, assumption of risk, or disclaimers of warranty, those provisions apply to everything described on this page. Nothing here limits any right you have that cannot be limited under the law that applies to you.

09 Contact

Questions: support@mythox.ai.

Mythox · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.