Legal

Privacy policy

Last updated: June 2026

Overview

mlti.ai (“we”, “us”, or “our”) is a process documentation tool operated by mlti.ai. This privacy policy describes how we collect, use, and protect the information you provide when you use our service, including the browser extension, the web application, and any related features.

By using mlti.ai, you agree to the practices described in this policy. If you do not agree, please do not use the service.

Information we collect

Account information

When you create an account, we collect your name, email address, and any other information you provide during registration.

Recording session data

When you use the browser extension to record a session, we capture the actions you take in your browser: page and tab navigation, the buttons and links you click (including their on-screen labels), the text you enter into forms (with password fields masked), and content you copy or paste — along with any narration you provide. We do not take screenshots, record video, or capture raw keystrokes, and this capture happens only while a session is recording.

Process documentation

The flow charts, runbooks, and other documentation produced by mlti.ai are stored on our servers. You own this content. We do not use it to train any machine learning model.

Usage and analytics data

We use PostHog, a third-party product-analytics provider, to understand how the service is used — page views, feature usage, referral source, and error logs. PostHog also captures session replays: a reconstruction of your interactions with our web interface (clicks, navigation, and page structure) that helps us diagnose issues and improve usability. Form inputs are masked in these recordings — we do not record what you type, your passwords, or payment details. Analytics data is processed in the United States.

Cookies and tracking technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and power the product analytics and session replay described above. One cookie is shared across our marketing site (mlti.ai) and the application (app.mlti.ai) so we can understand how people discover and adopt mlti.ai.

You can block or delete cookies through your browser settings, though some features may not work as a result. To opt out of analytics and session replay, email privacy@mlti.ai or enable your browser’s tracking protection.

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR and UK GDPR, including the right to object to processing based on our legitimate interests. We rely on our legitimate interest in understanding and improving the service for analytics and session replay, and you may object at any time by contacting privacy@mlti.ai. Where local law requires your consent for these technologies, we ask for it before they are enabled.

How we use your information

  • To provide and operate the mlti.ai service
  • To generate process documentation from your recording sessions
  • To improve and develop the service
  • To communicate with you about your account or the service
  • To comply with legal obligations

Data retention

We retain your account information and process documentation for as long as your account is active or as needed to provide the service. You may delete your account and all associated data at any time by contacting us at privacy@mlti.ai.

Sharing and disclosure

We do not sell your personal data. We do not share your process documentation with third parties except as required to operate the service (such as cloud infrastructure providers) or as required by law. All third-party providers are contractually bound to appropriate data protection standards.

Service providers (subprocessors)

We rely on a small set of third-party service providers to operate mlti.ai. Each processes data only as needed to provide its part of the service and is contractually bound to appropriate data protection standards. We do not sell your data to them or permit them to use it for their own purposes.

  • Supabase — Database and authentication — stores your account and process documentation
  • Vercel — Hosting for our application and website
  • Anthropic — AI models that turn your conversation into flow charts and runbooks
  • Vapi — The voice agent that conducts the capture conversation
  • Voyage AI — Text embeddings that power search across your knowledge
  • Inngest — Background processing that runs the documentation pipeline
  • Composio — Used only when you export a process to Notion
  • Stripe — Payment processing
  • Resend — Transactional email, such as invitations and account notices
  • PostHog — Product analytics and session replay (described above)
  • Axiom — Application logging and performance monitoring

Security

We use industry-standard security practices including encryption in transit and at rest. We maintain access controls and audit logging, and we host your data on infrastructure that maintains SOC 2 Type II compliance (Supabase and Vercel).

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, contact us at privacy@mlti.ai.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via a notice in the application. Your continued use of mlti.ai after changes take effect constitutes your acceptance of the revised policy.

Contact

For privacy-related questions or requests: privacy@mlti.ai