Privacy notice.

This notice covers machinemachine.ai, its contact and blueprint features, and the linked agent onboarding process. Services and responsibilities for an individually agreed customer installation must be specified separately.

1. Controller and contact

You can send privacy requests to this email address.

2. Visiting the website

Loading the website involves processing technical connection data, including your IP address, requested URL, time, HTTP status, and device, browser and, where supplied, referrer information. This supports content delivery, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website.

The website runs on server infrastructure we administer. Fonts load directly from our website, without a request to an external font provider.

3. Contact and business enquiries

When you contact us, we process your contact details and message to handle and answer your enquiry. Article 6(1)(b) GDPR applies where this concerns a contract with you or steps taken at your request before a contract. For other enquiries and communication with a company's employees, we rely on Article 6(1)(f) GDPR and our legitimate interest in responding appropriately to business communications.

4. AI team blueprints and voice recordings

For a requested blueprint, we process your email address, task description, submitted links, selected language and, optionally, a voice recording and its transcript. Microphone recording starts only after your action and the required browser permission. You can enter text instead.

We use these details to create the requested result and store them with a random request identifier. Descriptions and, where applicable, transcripts are sent to the configured AI model provider. Please submit only information needed for your use case, and do not include sensitive personal data or confidential information about others.

The result link contains a random identifier and currently works without an additional login. Anyone who receives the complete link can access the result. Please treat it as confidential.

The legal basis for the requested service is Article 6(1)(b) GDPR, or Article 6(1)(f) GDPR for enquiries on behalf of a company. Microphone permission is a technical browser permission, not consent to advertising.

Anthropic and Cerebras are integrated for AI generation; the service processing a request depends on the configuration in use. Optional voice transcription uses self-hosted transcription software. Inputs, recordings, transcripts and results currently have no automatic expiry; you can request deletion using the contact above.

5. Email, CRM and internal notifications

The enquiry process includes integrations with Brevo for email and contact management, Twenty for CRM, and Telegram for internal notifications. Depending on which integration is enabled, your email address, description or excerpts, submitted links and result link may be shared.

These services support handling and communicating about your request. Submitting an enquiry is not consent to a newsletter. For questions about a message or to object to direct marketing, please contact us using the details above.

6. Analytics and browser storage

The website includes PostHog to analyse page views, clicks, scroll depth and usage steps. Generated results and onboarding also include analytics; some backend events are associated with an email address or Telegram identifier. Cookies or browser storage may be used depending on configuration.

For web analytics, we use only self-hosted open-source tools, particularly our own PostHog instance. The website configuration permits only https://posthog.machinemachine.ai for this purpose, with no fallback to PostHog Cloud. Self-hosting does not automatically make collected data anonymous. Page views and usage steps may be associated with a browser or enquiry.

7. Telegram onboarding

The separate onboarding page embeds the Telegram WebApp script. Depending on the step, it processes your email address, Telegram user identifier, verification steps, agent name and the bot token supplied for setup. The token allows access to the relevant bot and must be kept confidential. Telegram also processes data under its own privacy terms.

These details are processed on our infrastructure to set up and run the requested agent. The legal basis is Article 6(1)(b) GDPR, or Article 6(1)(f) GDPR for business enquiries. See Telegram's privacy policy for its processing practices.

8. Recipients and transfers outside the EEA

Personal data may be accessible to the providers used for hosting, communication, handling enquiries and AI processing. Where they act as processors, the requirements of Article 28 GDPR apply.

The restriction to self-hosted analytics applies to tracking tools. It does not cover the external AI, communication and email services described above, which may process data outside the European Economic Area. You can request information about the recipients and transfer arrangements used for your enquiry through our privacy contact.

9. Retention

Retention is considered by purpose and data type: technical logs, open and completed enquiries, blueprint inputs and results, audio files, CRM records, analytics data and onboarding credentials. Legal retention requirements and the establishment, exercise or defence of claims may justify keeping particular records for longer.

A fixed deletion period has not yet been implemented for every data type. In particular, blueprint data is stored without automatic expiry. You can request deletion; we will inform you if legal retention obligations or other statutory exceptions prevent it.

10. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for future processing; withdrawal does not affect the lawfulness of processing before it.

Right to object: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving a reason.

You can complain to a data protection authority, particularly in the country where you habitually live, work or believe an infringement occurred. In Poland, this is the President of the Personal Data Protection Office (UODO).

11. Required information and automated processing

You do not need to enter contact or project information simply to visit the website. Without the information necessary to handle your request, we may be unable to respond or complete the requested setup. Blueprint generation produces a proposal automatically. Onboarding checks information automatically and prepares setup steps. You can contact us about a rejection or setup issue and request a personal review.

12. Date and legal framework

Last updated: 12 September 2026. The information duties and individual rights are based on the General Data Protection Regulation, particularly Articles 12–22.