Legal.

01 Who we are

Mythox is operated by Reis Media LLC ("Reis Media", "we", "us", "our"), a Florida limited liability company with a principal place of business at 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA. Mythox is a web and desktop application that helps creators and entrepreneurs bring their finances, time, energy, goals and work together in one place.

This Privacy Policy applies to the Mythox application (web and desktop) where you sign in and where you may connect your bank through Plaid. If you have any question about it, email support@mythox.ai.

02 What we collect

We collect only what we need to run the features you use. Depending on what you connect, that can include:

Connecting a data source is always optional and in your control. If you don't connect a bank, Rize, or Whoop, we don't receive that data.

03 Signup protection and your browser

When you create a Mythox account we save one random code inside your own browser and keep it for up to 90 days. It is not your name, your email, or anything about you. It exists only so we can see when the same browser opens many free trials, which is how free trial abuse is spotted.

That code never leaves your browser in a readable form. Before we store anything, it is scrambled with a secret key so it cannot be turned back into the code your browser holds.

It never blocks a signup on its own. Clearing your browser data, or signing up in a private window, simply removes the code, and you can create your account exactly as normal.

We also record a scrambled version of the internet address and email address used at signup, for the same reason and under the same rules.

04 Bank data & Plaid

To let you connect a bank account, we use Plaid Inc. ("Plaid"). When you choose to connect, Plaid securely collects your login with the bank on your behalf and gives us access to the account and transaction information needed to power your finance features. You enter your bank credentials into Plaid's secure interface, so Mythox never sees or stores your bank username or password. Bank connections through Plaid are available for banks in the United States only.

By connecting an account, you also agree to Plaid's handling of your information as described in the Plaid End User Privacy Policy. When you connect, we receive from Plaid an access token plus the account and transaction data you authorized; these are kept server-side and encrypted, isolated to your account. (Bank connection is live; it runs on the encrypted, per-user-isolated platform described in Section 7.)

05 Why we collect it

• To provide the service - show your finances, time, energy, goals and work, and the insights built on them.
• To power the AI guide - give you relevant suggestions based on your own data (see Section 6).
• To handle billing - manage your subscription tier through Stripe.
• To support you - answer questions and fix problems.
• To keep the app secure - protect against fraud, abuse and unauthorized access.

We do not sell your personal information, and we do not use your bank or financial data for advertising.

06 Consent & your choices

We collect, process and store your data with your consent, which you give by creating an account and by choosing to connect each data source:

• Connecting a bank requires you to actively authorize it through Plaid - an explicit, per-connection consent.
• Connecting Rize, Whoop, or importing a CSV is similarly your choice, each time.
• You can withdraw consent at any time by disconnecting a source, or by deleting your account, which removes the associated data (see Section 11).

07 AI features & your data

Mythox includes an in-app AI assistant (Midas) that guides you using your own data. When you use it, the relevant pieces of your data needed to answer you may be sent to the AI model provider you select (for example, providers behind GPT, Claude or Gemini) so it can generate a response.

• This only happens when you use the AI features.
• Providers process that data under their own terms to return your answer; we do not permit them to use it to advertise to you, and we do not sell it.
• On the highest tier you may use your own API key, in which case your AI usage runs directly under your own provider account.

Your memory

Midas keeps a per-user memory that stores what you give it (your goals, preferences, context, journal entries, and similar personal information) so it can give you personalized results over time. This memory is tied to your account and persists across sessions until you delete it. Your memory is private by default and stored securely under your account. You can delete it at any time from your settings (see Section 11).

The "Share my data with Midas" toggle

Your settings include a master "Share my data with Midas" toggle that controls whether Midas may use your memory and data to personalize its answers:

• When it is on, Midas may draw on your stored memory and data to personalize what it generates.
• When it is off, your data is kept private and Midas runs in a limited mode that does not use your personal memory.
• Per-entry and per-feature controls. On top of the master toggle, you can mark specific entries or features as private, so they stay private no matter how the master toggle is set.

You can change the toggle and your per-entry settings at any time, and changes take effect immediately.

08 How we store & protect it

Your data is stored in a managed PostgreSQL database (Supabase) hosted in the United States, with the following protections:

• Encryption in transit: all traffic uses HTTPS with TLS 1.2 or higher.
• Encryption at rest: data is encrypted at rest with AES-256.
• Per-user isolation: the database enforces Row-Level Security, so your account can only access your own data - no other user can read or change it.
• Least-privilege keys & server-side secrets: powerful keys and the Plaid secret are never exposed to the browser; secrets are kept in a secure store, never in our code.
• Security review before every release.

No system can be guaranteed 100% secure, but we apply these reasonable, layered measures and continue to strengthen them (see our Information Security Policy).

09 Who we share with (sub-processors)

We share data only with the trusted providers needed to run Mythox, and only the data each one needs. We do not sell personal data.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.

Business transfers. If Reis Media LLC is ever involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that deal. We will give you notice before your information becomes subject to a different privacy policy.

10 How long we keep it

We keep your data for as long as your account is active and you find it useful. When you disconnect a source or delete your account, we remove the associated data as described in our Data Retention & Deletion Policy. In short: keep what you use, delete what you ask us to.

11 Your rights

You have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Export a copy of your data.
• Delete your data (see Section 11).
• Withdraw consent and disconnect any source at any time.

Depending on where you live (for example under the GDPR or California's CCPA/CPRA), you may have additional rights, such as the right to object to or restrict certain processing and the right not to be discriminated against for exercising your rights. To exercise any of these, email support@mythox.ai and we will respond within the timeframe required by applicable law.

12 Deleting your data

You can ask us to delete your data at any time by emailing support@mythox.ai (or from inside the app, in Settings). When you do:

• We delete your account and personal data from our active database, normally within 30 days.
• We revoke any Plaid access tokens so your bank connection is severed.
• Copies remaining in routine encrypted backups are purged on the normal backup rotation cycle.
• We may keep the minimum records the law requires us to retain (for example, certain billing/tax records).

See the Account & Data Deletion page for the step-by-step request.

13 Children, changes & contact

Children

Mythox is intended for adults (18+) and is not directed to children. We do not knowingly collect data from anyone under 18. In particular, Mythox is not directed to children under 13, and in line with the U.S. Children's Online Privacy Protection Act (COPPA) we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

International users

Mythox is operated from the United States, and your data is processed and stored there. If you access Mythox from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where data-protection laws may differ from those in your country. We take reasonable steps to protect your data consistent with this policy.

Changes to this policy

We may update this policy as the product evolves. We'll change the "Last updated" date above and, for material changes, give you at least 14 days notice by email or in-app before the change takes effect. Continuing to use Mythox after that means you accept the updated policy.

Contact

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA · support@mythox.ai

14 YouTube API Services

YouTube API Services. Mythox uses YouTube API Services. When you choose to connect your YouTube channel, you authorize Mythox to access your own YouTube data through Google/YouTube's OAuth login. Mythox uses this data solely to show you your own channel and video analytics and revenue, and to generate recommendations for you. Mythox also uses the YouTube Data API to search public videos to help you research product demand. Mythox does not scrape, resell, or build a competitor-analytics database of other people's channels.

By using these features you agree to be bound by the Google Privacy Policy: https://policies.google.com/privacy .

Data we store and how long. We store only the tokens and the summarized analytics/revenue figures needed to show you your dashboard, for as long as your channel stays connected. Stored YouTube data is refreshed or removed in line with the YouTube API Services Developer Policies.

Disconnecting and deleting your data. You can disconnect your YouTube channel from Mythox at any time in Settings > Connections, which deletes the stored tokens and the YouTube data we hold for you. You can also revoke Mythox's access directly through your Google account at https://myaccount.google.com/permissions . Revoking access there stops all further data access and we delete the associated stored data.

01 Acceptance

By creating an account or using Mythox in any way, you agree to these Terms of Service ("Terms"). If you don't agree, please don't use Mythox. These Terms form a binding agreement between you and Reis Media LLC ("Reis Media", "we", "us"), a Florida limited liability company.

If you use Mythox on behalf of a business or organization, you represent that you have the authority to bind that entity to these Terms, and "you" refers to that entity.

02 What Mythox is

Mythox is a web and desktop application that helps creators, entrepreneurs, and online business owners bring their finances, time, energy, goals, and work together in one place - with an AI guide (Midas) built in.

03 Eligibility

You must be at least 18 years old to use Mythox. By using the service, you confirm that you meet this requirement. Mythox is not directed at children, and we do not knowingly collect data from anyone under 18.

You must also comply with all applicable laws in your jurisdiction when using Mythox.

04 Your account

When you create an account, you are responsible for:

• Keeping your login credentials confidential. Do not share your password with anyone.
• All activity that happens under your account, whether or not you authorized it.
• Notifying us promptly at support@mythox.ai if you believe your account has been compromised.

One account per person. You may not create or operate more than one account to get around plan limits, free trials, or a suspension. We may suspend or terminate accounts that do.

Two-factor authentication. We offer optional two-factor authentication (2FA) to help protect your account, and we strongly encourage you to turn it on.

We may suspend or terminate accounts that violate these Terms or that we reasonably believe pose a risk to the service or other users.

05 Acceptable use

You agree not to use Mythox to:

• Break any law or regulation, or facilitate illegal activity.
• Harass, abuse, or harm others.
• Attempt to reverse-engineer, decompile, or extract source code from Mythox.
• Resell, sublicense, or otherwise commercialize access to the service without our written permission.
• Scrape, crawl, or use automated means to extract data from Mythox beyond normal app use.
• Interfere with or disrupt the service, its servers, or networks connected to it.
• Upload or transmit malware, viruses, or any harmful code.
• Attempt to gain unauthorized access to another user's account or data.

We reserve the right to remove content or suspend access if we determine (in our reasonable judgment) that these rules have been violated.

06 Subscriptions & billing

Billing. Mythox is live. Every plan starts with a 3-day free trial that requires a card at signup. Unless you cancel during the trial, you are charged when it ends. Paid plans are Pro ($34/mo), Scale ($100/mo), and MAX ($200/mo), with yearly billing available at a discount.

Pricing is published clearly on the Pricing page before you are charged. Specifically:

• Subscriptions are billed securely through Stripe. We never store your card number - Stripe handles all payment data.
• Subscriptions auto-renew at the end of each billing period unless you cancel.
• You can cancel anytime from your account settings. When you cancel, you keep access until the end of the period you already paid for.
• AI credits. AI features run on credits included with your plan. See AI credits below for how they work.
• Taxes may apply depending on where you are located.

Price changes. If we change the price of a plan, we will give you at least 30 days notice by email or in-app before the new price applies to you. Continuing to use Mythox after that notice period means you accept the new price.

See the Subscription, Billing & Refunds page for full details on payments, refunds, and failed-payment handling.

07 Your content

Content you create inside Mythox - your goals, journal entries, notes, product ideas, financial data you enter manually, and anything else you add - belongs to you.

By using Mythox, you grant Reis Media a limited, non-exclusive, royalty-free license to store, display, and process your content solely to operate and improve the service for you. We do not use your personal content for advertising, and we do not sell it.

You are responsible for the content you add. Don't upload content that violates others' rights or that you don't have permission to use.

08 AI features

Mythox includes an AI guide called Midas that generates responses based on your data and questions. A few important things to know:

• AI responses are generated and may be incomplete, inaccurate, or out of date. Always apply your own judgment.
• Nothing Midas says is financial advice, legal advice, tax advice, or professional advice of any kind. It is a tool to help you think, not a substitute for a qualified professional.
• You are solely responsible for any decisions you make based on AI output from Mythox.
• When you use AI features, relevant parts of your data are sent to the underlying AI model provider to generate a response. See our Privacy Policy (Section 6) for details.

09 Third-party services

Mythox integrates with third-party services to deliver its features. These providers operate under their own terms and policies, which you should review:

• Plaid - for secure bank connections (Plaid End User Privacy Policy)
• Stripe - for subscription billing (Stripe's terms and privacy policy)
• AI model providers - for generating Midas responses (their respective terms)
• Supabase - for database and authentication (Supabase's terms)

We are not responsible for the practices of these third parties. Your use of their services through Mythox is subject to their terms.

10 Disclaimers

Mythox is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the service will be uninterrupted, error-free, or completely secure. No oral or written information from Reis Media creates any warranty not stated in these Terms.

This is especially true because the product is actively being developed.

11 Limitation of liability

To the fullest extent permitted by applicable law, Reis Media LLC and its founders, employees, and agents will not be liable for any indirect, incidental, special, consequential, or punitive damages - including lost profits, lost data, or business interruption - arising from your use of (or inability to use) Mythox, even if we were advised of the possibility of such damages.

Our total liability to you for any claim arising from these Terms or your use of Mythox will not exceed the amount you paid us in the 12 months before the claim arose (or $50 if you paid nothing).

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. If you are in one of those places, the above exclusions and limitations apply to the maximum extent permitted by local law.

12 Indemnity

You agree to defend, indemnify, and hold harmless Reis Media LLC and its founders, officers, and agents from and against any claims, damages, losses, costs, and expenses (including reasonable legal fees) arising from: (a) your use of Mythox, (b) your violation of these Terms, or (c) content you submit to the service that infringes or violates any third-party rights or applicable law.

13 Termination

You can stop using Mythox and close your account at any time by contacting us at support@mythox.ai.

We may suspend or terminate your access to Mythox at any time, with or without notice, if we believe you have violated these Terms, if continuing to provide the service is no longer feasible, or for any other reason at our sole discretion. We will try to give reasonable notice where practical.

On termination, your right to use Mythox ends immediately. Sections 7 (Your content - the license you granted us ends except for copies in routine backups, which are handled per our retention policy), 10, 11, 12, and 15 survive termination.

14 Changes to the service and these Terms

We are actively building Mythox, which means the service will change. We may add, modify, or remove features at any time.

We may also update these Terms from time to time. When we do, we will update the "Last updated" date above. For material changes, we will take reasonable steps to notify you (such as an email or an in-app notice). Your continued use of Mythox after the effective date of any change means you accept the updated Terms.

15 Governing law

These Terms are governed by the laws of the State of Florida, USA, without regard to its conflict-of-law provisions. Any dispute that cannot be resolved informally will be subject to the exclusive jurisdiction of the state and federal courts located in Miami-Dade County, Florida, USA, and you consent to personal jurisdiction there.

If you are a consumer in the EU or UK, you may also have rights under the mandatory consumer protection laws of your country, and nothing in these Terms limits those rights.

16 The Builder

The Mythox Builder ("the Builder") is the AI-assisted tool inside Mythox that lets you describe, configure, and generate websites, landing pages, digital products, templates, and related assets ("Builder Outputs"). This section governs your use of the Builder and applies on top of the rest of these Terms.

What you own, and what stays ours

• Your inputs. You keep ownership of the original content you put into the Builder - your prompts, text, images, and materials.
• Your outputs. While you are on a paid plan and in good standing, you own the unique, you-specific parts of the Builder Outputs you generate. We assign those rights to you.
• What stays ours. Builder Outputs may include Mythox platform templates, design systems, UI components, code scaffolding, and security patterns. These remain the property of Reis Media LLC and are licensed to you, not assigned. Owning a Builder Output does not give you a claim to the Mythox components built into it. Any third-party open-source code keeps its own licence.

Trial outputs

Builder Outputs created during a free trial are watermarked and for evaluation only. They are not licensed for commercial use, deployment, or export until you are on a paid plan and have removed the trial watermark through the paid-plan workflow.

Acceptable use of the Builder

On top of the acceptable-use rules above, you may not use the Builder to generate: content that infringes anyone's intellectual property; fraudulent, deceptive, or misleading products or sites; defamation, harassment, hate speech, or incitement to violence; phishing pages, malware, or any malicious code; content that exploits or harms minors; or anything designed to get around a legal or regulatory requirement. We may refuse, remove, or disable Builder Outputs that break these rules, and suspend accounts that do.

Security scaffolding is assistance, not a guarantee

Builder Outputs may include Mythox-generated security scaffolding, authentication patterns, and IP-protection structures. This is provided to assist you, not as a guarantee of security or IP protection for your finished product. You are responsible for reviewing and testing every security component before you deploy, and you should have a qualified professional review any output that handles sensitive data, payments, or regulated information.

Generated code is provided as-is

Builder Outputs, including any generated code, are provided "as is" with no warranty of any kind. We do not warrant that they are error-free, secure, or ready for production without your own review and testing. You assume all risk for the use, deployment, or distribution of any Builder Output, and you are solely responsible for what you build and ship.

Liability for the Builder

To the fullest extent permitted by law, our total liability to you for any claim arising from the Builder or any Builder Output will not exceed the amount you paid Mythox in the 12 months before the claim arose.

Changes to these Builder terms

We may update these Builder terms from time to time. For material changes we will give you at least 30 days notice by email or in-app. Continuing to use the Builder after the change takes effect means you accept the updated terms.

17 AI credits

AI-powered features in Mythox run on credits. How credits work:

• Each paid plan includes a set amount of AI credits per billing cycle. The current amounts are shown on the Pricing page.
• Credits are tied to your billing cycle and do not roll over to the next cycle unless your plan page says otherwise.
• If you run out, additional credits may be available to purchase.

18 Intellectual property and feedback

Mythox platform IP. All intellectual property in the Mythox platform - the software, interfaces, brand, trademarks, design systems, and underlying technology - belongs to Reis Media LLC. These Terms give you a limited licence to use the service; they do not transfer any of those rights to you. Mythox is a trademark of Reis Media LLC.

Feedback. If you send us suggestions or feedback about Mythox, you grant Reis Media LLC a perpetual, royalty-free, worldwide licence to use that feedback for any purpose, with no obligation to you.

19 Copyright and DMCA

Reis Media LLC respects intellectual property rights and responds to valid notices under the U.S. Digital Millennium Copyright Act (DMCA). If you believe content on Mythox infringes your copyright, send a written notice with the information required by 17 U.S.C. 512(c)(3) to our designated agent:

• Designated DMCA agent: Philipe Reis, Reis Media LLC
• Email: support@mythox.ai
• DMCA registration number: DMCA-1074510

20 General terms

• Entire agreement. These Terms, together with the Privacy Policy and the other policies linked here, are the entire agreement between you and Reis Media LLC about Mythox.
• Severability. If any part of these Terms is found invalid or unenforceable, the rest stays in full force.
• No waiver. If we do not enforce a part of these Terms right away, that is not a waiver of our right to enforce it later.
• Assignment. You may not transfer your rights or obligations under these Terms without our written consent. We may assign ours, for example as part of a business transfer.
• Survival. The sections that by their nature should continue after your account ends - including Your content, AI features, the Builder, Intellectual property and feedback, Disclaimers, Limitation of liability, Indemnity, Governing law, and these General terms - survive termination.

21 Contact

Questions about these Terms? Email us at support@mythox.ai.

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

22 How these additions apply

Sections 22 through 35 below were added to strengthen and clarify these Terms. They apply in addition to, not in place of, everything above. Where anything in Sections 22 through 35 is more specific or more protective of Reis Media LLC than an earlier section on the same topic, the more specific or more protective provision governs. Nothing below removes any right or protection already given to you elsewhere in these Terms.

23 Binding arbitration, class action waiver & jury trial waiver

Please read this section carefully. It affects your legal rights, including your right to go to court.

Agreement to arbitrate. You and Reis Media LLC agree that any dispute, claim, or controversy arising out of or relating to these Terms, your use of Mythox, or the relationship between you and Reis Media LLC (a "Dispute") will be resolved through binding individual arbitration, and not in court, except as set out below. This agreement to arbitrate is governed by the Federal Arbitration Act.

Informal resolution first. Before filing an arbitration, you agree to first contact us at support@mythox.ai and attempt to resolve the Dispute informally for at least 30 days.

Arbitration process. If informal resolution fails, the Dispute will be resolved by a single arbitrator through binding arbitration administered by a recognized arbitration provider (such as the American Arbitration Association) under its consumer or commercial arbitration rules then in effect, applying Florida law. The arbitration will take place in Miami-Dade County, Florida, or remotely by video or phone at your election. The arbitrator's decision is final and binding, subject only to limited judicial review under the Federal Arbitration Act.

Class action waiver. You and Reis Media LLC agree that any Dispute will be brought only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not otherwise preside over any form of a class or representative proceeding. If this class action waiver is found unenforceable as to a particular Dispute, that Dispute (and only that Dispute) will proceed in court rather than in arbitration, and the rest of this section remains in effect.

Jury trial waiver. To the extent any Dispute proceeds in court rather than arbitration for any reason, you and Reis Media LLC each irrevocably waive any right to a trial by jury.

Small claims exception. Either party may bring an individual claim in small claims court instead of arbitration if the claim qualifies.

Opt-out. You may opt out of this arbitration agreement by emailing support@mythox.ai with the subject line "Arbitration Opt-Out" within 30 days of first accepting these Terms, including your name and account email. If you opt out, Disputes will be resolved under Section 15 (Governing law) instead, including the exclusive jurisdiction of the Miami-Dade County courts, but the class action waiver in this section still applies to the fullest extent permitted by law.

Severability of this section. If any part of this arbitration agreement is found unenforceable, the rest of it remains in force, except that if the class action waiver is found unenforceable in its entirety and cannot be severed, this entire arbitration section is null and Section 15 (Governing law) applies instead.

24 Reaffirmed limitation of liability

This section supersedes and controls over the dollar figure in Section 11 above. To the fullest extent permitted by applicable law, Reis Media LLC's total cumulative liability to you for all claims arising from or relating to these Terms, the Builder, or your use of Mythox will not exceed the greater of (a) the amounts you actually paid to Mythox in the six (6) months immediately preceding the event giving rise to the claim, or (b) one hundred dollars ($100). This cap applies regardless of the legal theory of the claim (contract, tort, statute, or otherwise) and even if a remedy fails of its essential purpose. Section 11's exclusion of indirect, incidental, special, consequential, and punitive damages remains in full force and is not narrowed by this section.

25 Assumption of risk: AI, Midas & financial features

You expressly acknowledge and agree that:

• Midas and every other AI-generated output in Mythox is produced by probabilistic models and may be wrong, incomplete, outdated, or misleading, even when it sounds confident or authoritative.
• Reis Media LLC is not a bank, broker-dealer, investment adviser, accountant, bookkeeper, tax preparer, law firm, or fiduciary of any kind. Nothing generated by Mythox, including any bookkeeping summary, categorization, projection, insight, or recommendation, is financial, investment, accounting, tax, or legal advice, and none of it creates any advisory, fiduciary, or professional relationship between you and Reis Media LLC.
• Financial data displayed in Mythox (whether imported via Plaid, uploaded by CSV, or entered manually) is provided for informational and organizational purposes only. Balances, categorizations, and calculations may contain errors due to third-party data feeds, sync delays, categorization mistakes, or bugs. You are solely responsible for independently verifying any financial figure before relying on it for any decision, filing, or representation to a third party.
• You assume all risk arising from any action you take, or decision you make, in reliance on Midas or on any financial or bookkeeping data or feature in Mythox, including business, investment, tax, and legal decisions. You should consult a qualified, licensed professional before acting on anything Mythox shows or generates.
• This section applies in addition to, and does not narrow, the AI disclaimers in Section 8 or the general disclaimers in Section 10.

26 No proration, chargebacks & collection costs

• No proration. When you cancel, you keep access through the end of your paid period, but no partial-period or prorated refund is issued for the unused portion of any billing cycle, except where required by law.
• Chargebacks are a breach. Initiating a chargeback, payment dispute, or bank reversal for a charge that corresponds to Mythox access you already received (rather than contacting us first at support@mythox.ai) is a material breach of these Terms. We may immediately suspend or terminate your account upon a chargeback, without further notice, and you remain liable for the disputed amount.
• Collection costs. If we refer unpaid amounts to collections or pursue legal action to recover them, you agree to pay our reasonable costs of collection, including reasonable attorneys' fees, to the extent permitted by law.
• Account forfeiture on abuse. Where an account is terminated for violating Section 5 (Acceptable use), Section 31 below, or engaging in fraud or chargeback abuse, any unused subscription time, AI credits, or balance is forfeited and no refund is owed.

27 No SLA & no uptime guarantee

This section restates and hardens the service note in Section 2. Mythox is offered with no service level agreement. We do not guarantee any specific uptime percentage, response time, or availability. Scheduled or unscheduled downtime, data migrations, feature removal, and breaking changes may occur without notice. No credit, refund, or compensation is owed for downtime or unavailability, except where required by law. This section governs over any implied uptime expectation elsewhere in these Terms or in any marketing material.

28 User data-loss disclaimer

While we maintain routine encrypted backups as described in our Data Retention & Deletion Policy, you are responsible for maintaining your own independent copies of any critical information you store in Mythox, including financial records, journal entries, goals, product content, and Builder Outputs. To the fullest extent permitted by law, Reis Media LLC is not liable for any loss, corruption, or unavailability of your data, however caused (including bugs, third-party provider failures, service interruptions, account termination, or your own actions), beyond our obligation to attempt routine backup recovery on a commercially reasonable, best-efforts basis.

29 Third-party data & AI provider disclaimer

Mythox depends on third-party providers, including Plaid for bank connectivity and one or more AI model providers for Midas. You acknowledge that:

• Bank and transaction data displayed in Mythox reflects what these third parties return to us, which may be delayed, incomplete, miscategorized, or temporarily unavailable due to circumstances outside our control (including a bank or provider outage, API change, or rate limit).
• AI-generated output reflects the underlying model provider's behavior at the time of generation and may change, degrade, or be unavailable if that provider changes or discontinues its service.
• Reis Media LLC is not responsible for, and disclaims all liability arising from, the acts, omissions, downtime, data errors, or policy changes of Plaid, Stripe, Supabase, any AI model provider, or any other third-party service integrated with Mythox, beyond our obligation to use commercially reasonable efforts to select and maintain reputable providers.

30 Community, leaderboard & public content

Mythox may include community features, a public or semi-public leaderboard, shared showcases, or similar areas where your activity, progress, username, or content may be visible to other users ("Community Areas").

• License to display. Anything you post, submit, or that is automatically generated and displayed in a Community Area (including your username, rank, streaks, achievements, and any text or media you choose to share) grants Reis Media LLC a non-exclusive, worldwide, royalty-free license to display, reproduce, and distribute it within Mythox and in Mythox marketing materials, for as long as it remains visible in the Community Area or your account is active, whichever is longer for reasonable archival purposes.
• Your responsibility. You are solely responsible for anything you choose to share in a Community Area. Do not share sensitive personal, financial, or confidential information there, because Community Areas are not private.
• Conduct. Section 5 (Acceptable use) applies fully to Community Areas. Additionally, you may not manipulate, game, or artificially inflate leaderboard rankings, streaks, or metrics through automation, multiple accounts, or fraudulent activity. We may reset, hide, remove, or disqualify any ranking or content, and suspend or terminate accounts, for violations of this section.
• No expectation of permanence. We may modify, reset, or discontinue Community Areas, including leaderboards, at any time without notice or liability.

31 Anti-abuse enforcement & account forfeiture

In addition to the acceptable-use rules in Section 5, if we reasonably determine, in our sole discretion, that your account is engaged in abuse of the service, including but not limited to circumventing usage or credit limits, sharing or reselling account access, automating interactions with Midas to extract training data or exceed fair use, exploiting a bug or vulnerability rather than reporting it, or creating multiple accounts to obtain trial or promotional benefits more than once, we may immediately suspend or terminate the account without notice and without refund, and any AI credits, subscription time, or balance associated with that account are forfeited.

32 Force majeure

Reis Media LLC will not be liable for any delay or failure to perform any obligation under these Terms where the delay or failure results from any cause beyond our reasonable control, including but not limited to acts of God, natural disaster, war, terrorism, riot, labor dispute, internet or telecommunications failure, power outage, governmental action, pandemic, or failure or outage of a third-party provider (including Supabase, Plaid, Stripe, or any AI model provider).

33 Export control & sanctions compliance

You may not access or use Mythox if you are located in, or a national or resident of, any country subject to a comprehensive U.S. trade embargo, or if you are listed on any U.S. government restricted-party list (including the U.S. Treasury's Specially Designated Nationals list or the U.S. Commerce Department's Denied Persons or Entity List). By using Mythox, you represent that you are not subject to any such restriction. You agree to comply with all applicable U.S. and foreign export control and economic sanctions laws in your use of Mythox.

34 Additional Builder license restrictions

This section applies on top of Section 16 (The Builder). Your license to use the Builder does not permit you to: (a) sublicense, resell, or white-label the Builder itself as a standalone product or service separate from Mythox; (b) represent the Builder or its underlying AI as a tool you built or trained independently; or (c) use the Builder to build, train, or launch a product or service that directly competes with or substantially replicates the core functionality of Mythox or the Builder. We may terminate your access to the Builder, without affecting the rest of your Mythox account, if we reasonably determine you have violated this section.

35 DMCA repeat infringer policy

In addition to the process in Section 19, Reis Media LLC will, in appropriate circumstances and at our sole discretion, terminate the accounts of users who are determined to be repeat infringers of third-party intellectual property rights. A user may be treated as a repeat infringer if we receive two or more valid, unretracted DMCA takedown notices concerning content associated with that user's account within any 12-month period.

36 YouTube API Services

YouTube API Services. Mythox's YouTube features use YouTube API Services. By using them, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and the YouTube API Services Terms of Service (https://developers.google.com/youtube/terms/api-services-terms-of-service). You must comply with Google's and YouTube's terms when you connect your account. Mythox's access to YouTube API Services may be limited, suspended, or revoked by Google/YouTube at any time, and Mythox may lose the ability to provide these features if that happens. You can disconnect and delete your YouTube data as described in our Privacy Policy.

01 What are cookies

Cookies are small text files that a website or app stores in your browser. They are used for things like keeping you logged in, remembering your preferences, and understanding how a site is used. Local storage is a similar browser feature that lets apps save data on your device without sending it back to a server on every request.

This policy covers how Mythox uses cookies and local storage.

02 What Mythox uses

We keep cookie and local-storage use to the minimum needed to run the app. Here is what we use:

03 What we don't do

• We do not use advertising or tracking cookies.
• We do not track you across other websites.
• We do not sell cookie data or share it with ad networks.
• We do not use third-party marketing or retargeting pixels.
• We do not fingerprint your browser or device for identification purposes.

04 Future analytics

We may add basic, privacy-respecting analytics in the future (for example, to understand which features are most used so we can improve them). If we do:

• We will update this page before the analytics go live.
• Where required by law (for example, under GDPR or the UK PECR), we will ask for your consent and give you a clear way to opt out.
• We will choose tools that minimize data collection and avoid cross-site tracking.

Right now, no analytics cookies or tracking scripts are running on Mythox.

05 How to control cookies

You can control and delete cookies through your browser settings. Here are links to the instructions for common browsers:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Safari: Preferences > Privacy > Manage Website Data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Edge: Settings > Cookies and site permissions

Note: if you delete or block the essential session cookie, you will be signed out of Mythox and will need to log in again. The theme and mode preferences stored in local storage can be cleared from your browser's developer tools or site-data settings without affecting your account.

06 Contact

Questions about cookies or privacy? Email us at support@mythox.ai.

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 Trial access

We show paid plans clearly and give you plenty of time to decide whether to continue before any billing begins.

02 Available plans

Current Mythox plans are Pro ($34/mo), Scale ($100/mo), and MAX ($200/mo). Every plan starts with a 3-day free trial and requires a card at signup:

• Pricing is published clearly on the Pricing page before any billing begins.
• You will be notified in advance and given the chance to choose a plan or opt out.
• Early customers may receive special early-adopter pricing, with details shown before any charge.

The Pricing page is the source of truth for current prices.

03 How billing works

Here is how billing works:

• Secure payments via Stripe. All payment processing is handled by Stripe. We never see or store your card number, CVV, or full payment details - Stripe handles all of that under their own PCI-compliant systems.
• Auto-renewal. Subscriptions renew automatically at the end of each billing period (monthly or annual, depending on the plan you choose) unless you cancel beforehand.
• Billing date. You are billed on the date you start your paid plan, and then on the same date each period thereafter.
• Receipts. Stripe sends an email receipt after each successful charge.

04 Cancellation

• You can cancel your subscription at any time from your account settings inside Mythox.
• When you cancel, your subscription does not renew at the next billing date.
• You keep full access to Mythox until the end of the billing period you already paid for. Cancellation is not immediate loss of access.
• After the period ends, your account moves to the Trial plan (if available) or access ends, depending on the plan structure at that time.

05 Refunds

All fees are non-refundable except where required by law or expressly stated in a written offer from Mythox. Here is how that works in practice:

• If you were charged by mistake or due to a technical error on our end, we will refund you promptly - just email support@mythox.ai.
• Outside the cases above, fees are non-refundable. If something is not working for you, email us and we will do our best to make it right inside the service.
• EU and UK consumers: if you are based in the EU or UK, you may have a legal right to a cooling-off period (typically 14 days) and other statutory consumer protections. We honor those rights in full.

To request a refund, email support@mythox.ai with your account email and a brief description of the issue.

06 Failed payments

If a payment fails (for example, because a card expired), here is what happens:

• Stripe will automatically retry the charge a few times over the following days.
• You will receive an email from Stripe notifying you of the failed payment and asking you to update your payment method.
• If payment cannot be collected after retries, your subscription may be paused or downgraded. We will notify you before access is affected.
• You can update your payment method at any time - see Section 7 below.

07 Updating your payment method

You can update your card or payment method at any time from your account settings inside Mythox. Changes take effect on your next billing cycle (or immediately if you are fixing a failed payment).

If you have trouble updating your payment method, email us at support@mythox.ai and we will help.

08 Taxes

Applicable taxes (such as VAT, GST, or sales tax) may be added to your subscription price depending on where you are located. If taxes apply to your account, they will be shown clearly before you complete any purchase. Stripe handles tax calculation and collection where required.

09 Contact

Billing questions, refund requests, or anything else: email support@mythox.ai.

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 Purpose & scope

This policy describes the security controls Reis Media LLC ("Reis Media", "we") applies to Mythox - a web and desktop application that helps creators and entrepreneurs see their finances, time, energy, goals and work in one place. It covers the application, its database, the connections it makes to third-party services (including a user's bank, via Plaid), and the systems and accounts used to operate it.

02 Governance & responsibility

Philipe Reis (Founder) is the accountable owner for information security and the single point of contact for any security or privacy matter, reachable at support@mythox.ai.

• This policy is reviewed and, if needed, updated at least once a year and whenever there is a material change to the product, the data we handle, or the systems we use.
• Security is treated as a release requirement, not an afterthought: every release goes through a security review gate before it ships (Section 7).
• If contractors or employees are added in future, they will be granted the least access needed for their role and will be required to follow this policy.

03 Access control

Access to production systems and user data is restricted on a least-privilege basis - people and components get only the access they need, and nothing more.

Per-user data isolation (enforced by the database)

User data is stored in a PostgreSQL database (Supabase) with Row-Level Security (RLS) turned on. RLS means the database itself only lets an account read or write its own rows - one user literally cannot see or change another user's data, even if the application code had a bug. This is enforced at the data layer, not just in the app.

Application & API keys

• The app uses restricted, least-privilege API keys. The public (browser) key can only act through the per-user RLS rules above. The powerful service-role key is never placed in client code or sent to the browser.
• Server-side secrets (including the Plaid secret and any bank access tokens) are held only on the server and are never exposed to the browser.

Administrative access

• Administrative consoles (the database/hosting provider, the payment provider, the code repository) are accessible only to the founder.
• Logout clears in-browser data and cached state so a shared device never exposes the previous session.

04 Encryption

• In transit: all connections to Mythox and its database use HTTPS with TLS 1.2 or higher. Plain, unencrypted connections are not used.
• At rest: user data stored in the database and file storage is encrypted at rest using AES-256, provided by our managed database platform (Supabase).
• Bank data from Plaid (account and transaction information, and the access token that represents a user's connection) is handled server-side and stored encrypted at rest, alongside the same per-user isolation as the rest of the data. Bank connect is live and runs to this standard on the already-encrypted platform above.

05 Secrets handling

• API keys, tokens and other secrets live in environment variables and managed secret stores - never hard-coded in source files and never committed to the code repository.
• Secrets are never printed, logged, or echoed into application output or build logs.
• Keys are scoped to the minimum permissions required for their job (restricted keys).
• If a secret is suspected to be exposed, it is rotated (replaced) promptly and the exposure is investigated.

06 Vulnerability management

• Pre-deployment security review: every meaningful code change is reviewed for bugs, security issues, and broken behavior by an automated AI code-review gate before it is deployed. Findings are fixed and re-verified before release.
• Managed-platform patching: the underlying database, hosting and serverless platform (Supabase) is patched and maintained by the provider, so infrastructure-level fixes are applied without us managing servers directly.
• Dependencies are kept reasonably current and reduced to what is necessary.

07 Secure development

• Code is kept in version control (git) with a clear change history.
• Builds are additive - existing protections are not removed to release a feature.
• Changes are tested locally before any deploy, and pass the security-review gate described above.
• The data model was designed multi-user and access-controlled from the start, so security is structural rather than bolted on.

08 Agent & API access (locked scopes)

Mythox lets a user connect their own AI assistants (e.g. via a command-line tool or an MCP connector) to act on their data. This access runs through a frozen, least-privilege scope policy that is enforced in code and cannot be weakened at runtime:

• Read-only on financial data and credentials, and credential-like values are redacted before they are ever returned.
• Write only to a small allow-list (a user's next-actions, journal entries, and systems). It can never delete data, never change transactions, never run raw database commands, and never expose bank/connection tokens.
• The agent signs in as the user, so the same per-user isolation that protects the app protects the agent path too - it never uses an administrator key.

09 Incident response

If a security incident or data breach is suspected, we follow a defined process:

1. Detect & contain - stop the issue spreading (e.g. rotate keys, disable an affected path).
2. Assess - determine what data and which users were affected.
3. Notify - inform affected users and relevant parties (including Plaid where bank-related data is involved, and regulators where the law requires) without undue delay.
4. Remediate & document - fix the root cause, record what happened, and improve controls to prevent recurrence.

Report a suspected issue to support@mythox.ai.

10 Third-party providers (sub-processors)

We rely on a small set of established providers, chosen for their security posture, and share with them only what is needed to run the service:

• Supabase - database, authentication & hosting
• Plaid - secure bank connections
• Stripe - subscription payments
• AI model providers - only when a user uses the AI features

The current list and what each one handles is kept up to date in our Privacy Policy.

11 Current security controls

A summary of the security controls in place:

In place today

• Per-user Row-Level Security (data isolation enforced by the database).
• TLS 1.2+ in transit; AES-256 at rest.
• Restricted, least-privilege API keys; secrets in env / secret store, never in code.
• Frozen least-privilege agent scope policy with credential redaction.
• Automated security-review gate before every release.
• Two-factor authentication (2FA) available to all users, required to connect a bank, and protecting administrative consoles.

01 Principle

Keep what you use. Delete what you ask us to. Hold nothing longer than we need.

Reis Media LLC retains personal data only for as long as it is needed to provide Mythox to you, to meet a legal obligation, or to resolve disputes and enforce our agreements. When data is no longer needed for those purposes, it is deleted or anonymized.

You are always in control. You can see the data we hold about you, request a full export, and delete your account and all associated data at any time through Account & Data Deletion below. We do not retain data beyond what you have consented to, and we never sell your personal information.

02 What we keep & how long

03 How you delete your data

You can delete your data at any time:

• By email - write to support@mythox.ai and ask us to delete your data. We verify the request comes from you, then carry it out. This is the current method, and it fully removes your data.
• In the app - disconnecting a connected source removes that data; a one-click "Delete account" control is available inside the app, in Settings.

See the Account & Data Deletion page for the step-by-step request process.

04 What happens when you delete

• Your account and personal data are removed from our active database, normally within 30 days of your request.
• Any Plaid access tokens are revoked, severing the bank connection so no further data is received.
• Per-user Row-Level Security means your data was already isolated to your account; deletion removes those rows entirely.
• We confirm to you when deletion is complete.

05 Backups

We keep routine, encrypted backups of the database so data can be recovered after a failure. Backups are kept for a short rolling window and then automatically overwritten. When you delete your data, any copy still present in a backup is purged on the normal backup rotation - it is not restored into the live system except as part of a genuine disaster recovery, after which the deletion is re-applied.

06 Legal & tax retention

We may retain the minimum information the law requires us to keep even after you delete your account - for example, certain billing, tax and accounting records, or records needed to comply with a legal obligation, resolve a dispute, or prevent fraud. We keep only what is required, for only as long as required, and then delete it.

07 Periodic review

This policy and our retention periods are reviewed at least once a year (and when the law or our product materially changes) to confirm we are not holding data longer than necessary and that our practices are reviewed against our obligations under applicable privacy laws such as the GDPR and California's CCPA/CPRA. The Founder is responsible for this review.

08 Contact

Questions or deletion requests: support@mythox.ai

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

01 How to request deletion

You can delete your account yourself in the app, in Settings. If you would rather do it by email, here is what to do:

1. Send an email from the email address linked to your Mythox account to support@mythox.ai.
2. Use the subject line: "Delete my account"
3. You don't need to explain anything further. We will verify the request comes from you and then carry it out.

02 What gets deleted

When we process your deletion request, here is what we remove:

• Your account (email, name, password hash, settings).
• All personal data associated with your account in our active database.
• All content you created inside Mythox (goals, journal entries, notes, product ideas, systems, and any other app content).
• Any financial data you connected or entered (Plaid transactions, CSV imports, manual entries).
• Your Plaid access tokens are revoked, which severs your bank connections permanently so we can no longer receive data from those accounts.

We will confirm by email when deletion is complete.

03 Timeline

We aim to process deletion requests within 30 days of receiving a verified request. In most cases it happens much faster.

Copies of your data that exist in routine encrypted backups are purged on the normal backup rotation cycle after deletion - they are not restored into the live system.

04 What may be legally retained

There is a small category of records we may be legally required to keep even after you delete your account:

• Billing and tax records - for example, records of transactions processed through Stripe, which may need to be retained for accounting and tax purposes (typically up to 7 years under applicable law).
• Any records required by law to resolve a dispute, comply with a legal obligation, or prevent fraud.

We keep only the minimum required, only for as long as required, and then delete it. See our Data Retention Policy for full details.

05 Disconnect vs. delete

These are two different things:

• Disconnecting a source (like a bank account or Rize) stops new data from syncing and revokes the connection for that source only. Your account and other data remain intact.
• Deleting your account removes everything - your account, all personal data, all content, and all connected-source data - subject only to the legally required records above.

If you just want to stop syncing a particular data source, you can disconnect it from within the app without deleting your whole account.

06 Delete your account in the app

You do not have to email us. Open Settings inside the Mythox app and use the "Delete account" option. It runs the same full deletion described above, cancels any active subscription, and removes your account. The email method still works if you prefer it, and we will respond and process it promptly.

01 The access model

Access to production assets and sensitive data in Mythox follows the principle of least privilege: every person and every component is granted only the minimum access required, and access to financial data is constrained at the data layer itself.

02 Controls in place

03 Access to sensitive data, by component

• Browser app: only the signed-in user's own data, via the per-user RLS rules. No service-role key.
• Server functions: hold the Plaid secret and exchange tokens server-side, with bank tokens never returned to the client (bank-connect is live).
• Agent / API access: signs in as the user, runs under the same RLS, and is further constrained by the frozen scope guard (read-only on financial data and credentials, redacted).
• Administrators (founder): console access for operations, governed by this policy and the Information Security Policy.

04 Contact

Security questions: support@mythox.ai

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.