Mitch (getmitch.ai) is run by Getmitch.ai LLC (referred to here as "we" or "us"). Getmitch.ai LLC is its own company. It owns and operates Mitch on its own account, and it is the data controller for everything described in this policy. No other company controls or receives your data except the processors listed below. Mitch helps trade businesses turn finished jobs into marketing: posts on their own Facebook Page, Instagram account and Google Business Profile, review requests, and a shared inbox for customer enquiries. This policy covers what we store to do that and nothing else.
Questions or requests: hello@getmitch.ai.
What we collect
Your account
Name, email, business name, trade, and your login identity (managed by Auth0). Billing runs through Stripe; we never see your card number.
Your jobs
Photos, videos and notes you upload about finished jobs. These are the raw material for the posts Mitch drafts for you.
Your connected accounts
When you connect Facebook and Instagram (or Google), we store:
- which Facebook Page and Instagram account you chose to connect, including their names, IDs and, where applicable, the Meta Business Manager they belong to;
- the access tokens Meta issues us to act on your behalf. Tokens are encrypted at rest and are never shared with anyone;
- comments and direct messages on your connected accounts, so you can read and answer customer enquiries in one inbox;
- view and reach counts for the posts Mitch published, so you can see how they performed.
We only ever act on the accounts you connected, and Mitch never posts anything you have not approved.
Site usage
We use Google Analytics 4 (property G-M5DCTEYE2N) to see which pages people visit, where they come from, and what device they're on. Google sets its own cookies for this. You can opt out via Google's Analytics opt-out.
Cloudflare, our host, logs each request (IP address, user agent, URL, timestamp) for security and abuse detection. Those logs roll over within 30 days.
Region cookie
The cookie mitch_region stores which region site (US, UK, AU) you've chosen so we don't redirect you again on the next visit. It expires after one year. You can clear it in your browser at any time.
What we do NOT do
We do not sell your data. We do not use your data, your photos or your customers' messages to advertise to anyone. We do not read anything from your personal Facebook or Instagram profile beyond the ID needed to keep your connection working.
Who else touches your data
Our infrastructure runs on Google Cloud. AI drafting uses Anthropic's Claude; your job notes and photos are sent there to draft your content and are not used to train their models. Emails go through SendGrid, texts through Twilio, payments through Stripe. Each processes your data only to provide their service to us.
How long we keep it
For as long as you have an account. Disconnecting a social account deletes the stored tokens for it immediately. Deleting your account removes your data within 30 days, except invoices we have to keep for tax law.
Your choices
You can disconnect any social account in Settings at any time. You can ask us for a copy of your data or ask us to delete it: hello@getmitch.ai. If you remove Mitch from your Facebook or Instagram settings, Meta tells us and we immediately stop being able to act on your accounts; see our Data Deletion page for what gets removed and how to check.
Children
Mitch isn't aimed at children. We don't knowingly collect data from anyone under 16. If you think we have, email us and we'll delete it.
Security
Data in transit is encrypted (HTTPS). Access tokens for your connected accounts are encrypted at rest, and only the people running Mitch have access to production systems. No system is perfectly secure, but we won't store data we don't need.
Changes
If we change how we handle data we'll update this page and bump the date at the top. Material changes (new categories of data, new third parties) will be flagged to customers by email.
Contact
Email hello@getmitch.ai. Our postal address is available on request.