Privacy Policy

Data May handles

May handles your email and account identifier, preferences, Business profiles and membership, saved guidance, conversations, uploaded files, images and recordings, generated results, usage and Credit records, and support requests. These records are associated with your account. Payment processing uses Stripe; May does not store your full card number.

AI recipients and shared content

When you ask May to process content, selected messages, relevant conversation history or summaries, saved guidance, Business context, images, extracted file text or audio may be sent to OpenRouter and the model hosting providers identified in its provider directory. Available models include those from OpenAI, Z.ai, Xiaomi and DeepSeek; the model developer and the hosting provider can be different organizations. OpenAI can also receive requests directly. Image generation uses Google or Alibaba Cloud through OpenRouter; document OCR uses Mistral through OpenRouter. Review the provider-directory link below for OpenRouter's hosting recipients.

Cloudflare hosts May's API and data storage, provides human verification, and processes supported documents for text extraction. If independent long-audio transcription is enabled, AssemblyAI receives the submitted recording. Not every request uses every service. Search queries and requested URLs may also be sent to the selected AI service and its search or retrieval services; visiting a requested public URL can disclose the request to that website.

Purpose and retention limits

We use this data to authenticate you, provide AI responses and file processing, save and synchronize your work, calculate usage, prevent abuse, and provide support. Third-party processing may occur outside your country. Provider retention and safety or operational processing vary by service; May does not promise zero retention, local-only processing or a user-selected processing region. Deleting data in May cannot reverse processing already performed by a provider.

AlphaBlue stores your service data under May's retention rules. Native Mobile keeps a limited local copy of loaded conversations, drafts and temporary media; signing out clears that account's local copies. Offline devices cannot learn about a remote deletion immediately. Backups and records required for accounting, security, disputes or legal obligations may outlast deletion from the active service.

Your permission

Signing in does not grant permission for AI processing. May asks you to review the current notices and explicitly select Agree and allow AI processing before new AI requests, related uploads, redemptions or purchases. You can choose Later and still access existing data, exports, account deletion and support. A material notice change requires a new confirmation, shared across Web and Mobile for your account. Your permission is not marketing consent.

To request withdrawal of permission or other data rights, use Help and feedback in May. Stopping future processing cannot undo completed requests or change a provider's existing retention. Do not submit passwords, payment secrets or content you are not authorized to share.

Account deletion and your data

Use Settings → Data and privacy on Web, or Settings → Privacy on Mobile, to request account deletion. Email verification and explicit Business confirmation protect against unintended deletion. Stop existing automatic renewal and resolve pending Checkouts first; Pro Business Owners must complete the existing Business deletion process. Mobile provides direct links to the relevant management pages and lets you check eligibility again.

Account deletion has a 7-day recovery period. The confirmation shows the scheduled date; sign in again before permanent cleanup starts to cancel. Deletion removes the account and associated service content, subject to necessary retention and cleanup delays described above. It does not itself create a refund. Export any data you need before requesting deletion.

Contact and updates

Use Help and feedback in May for privacy questions, export or deletion problems, or contact AlphaBlue using the company policy below. We update this notice when the data uses or recipients materially change and require renewed permission before covered AI processing.