Terms and conditions

This page holds two documents: the Machinations Terms of Service, which are the contract for using our website, app, AI features and other services, and the Machinations Privacy Policy, which explains what personal data we process and why. Please read both. Our Acceptable Use Policy and our list of subprocessors are part of them.

Terms of Service

Last updated: November 4, 2026. These Terms of Service take effect on that date. The previous version is dated October 24, 2026; see the version history at the end of these Terms.

1. Agreement to these Terms

These Terms of Service (the “Terms”) are a legally binding agreement between you and Machinations S.àr.l., a company of Luxembourgish nationality headquartered at 8 Op Bierg, Mamer, Luxembourg 8217, VAT number LU30464284, national registration number B226688, business permit (autorisation) number 10089993/0 (“Machinations”, “we”, “us” or “our”).

“You” means the person who accesses or uses the Services. If you use the Services for or on behalf of a company, school or other organization, you confirm that you have the authority to bind that organization to these Terms, and “you” then means both you and that organization.

You accept these Terms when you create an account, click to accept them, place an order, or access or use any part of the Services. If you do not agree to these Terms, you must not use the Services.

These Terms incorporate the Acceptable Use Policy, the Privacy Policy below, the plan details shown on our Pricing page and at checkout, and any additional terms we show you for a specific feature. If you have signed a separate written agreement with us for the Services (for example an enterprise order form), that agreement prevails over these Terms where the two conflict.

2. Definitions

• “Services” means everything we make available to you: the machinations.io website and its successor websites (the “Website”), the my.machinations.io web application, the diagram editor and Play engine, dashboards, forecasts and charts, the AI features described in section 10, the Community, public diagram pages and embeds, Economic Zeitgeist, templates and building blocks, our application programming interfaces, Model Context Protocol (“MCP”) connector and access tokens, integrations, documentation at machinations.io/docs and machinations.io/learn, support, and any updates to any of these.
• “User Content” means anything you or your Authorized Users submit to the Services, including diagrams, models, formulas, labels, descriptions, comments, profile information, prompts and messages to the AI features, files you attach or import, links you paste, and data you connect from other services.
• “Output” means content generated for you by the AI features, such as diagrams, edits to diagrams, formulas, dashboards, layouts, descriptions, names, explanations and answers.
• “Service Content” means everything we provide as part of the Services other than User Content, including our software, the Play engine, the Machinations diagram language and its building blocks, templates we publish, documentation, Economic Zeitgeist models and articles, AI instructions, prompts and validation rules, designs, icons and trademarks.
• “Authorized Users” means the people you allow to use the Services under your account or team, such as your employees, contractors or students.
• “Credits” means the units of usage capacity described in section 7.
• “Public Content” means User Content that is visible to people outside your account and team, as described in section 9.

3. Eligibility and accounts

You must be at least 18 years old and have the legal capacity to enter into a contract to use the Services. The Services are not directed to children, and you must not allow anyone under 18 to use your account.

You must not use the Services if you are barred from doing so under the laws that apply to you, including the export control and sanctions laws described in section 24.

To use most of the Services you need an account. You can register with an email address and password, with Google sign-in or, for some teams, with single sign-on through your organization’s identity provider (SAML). You must give accurate and complete information and keep it up to date. You are responsible for keeping your password, sign-in method and access tokens secure and for all activity that happens under your account, whether or not you authorized it. Tell us at once at contact@machinations.io if you believe your account has been accessed without permission.

You may not sell, transfer or share your account, create accounts by automated means, or create several accounts to obtain more free Credits or to avoid limits, suspensions or fees.

4. Teams and organizations

Some plans include a team workspace. The person or organization that buys a team plan (the “Team Owner”) can invite Authorized Users, assign roles and seats, and manage billing, sign-in settings and access. Diagrams created in a team workspace are stored in that workspace, and the Team Owner and the team administrators it appoints can access, share, move, export and delete them, and can remove members.

The Team Owner is responsible for its Authorized Users’ compliance with these Terms and is liable for their acts and omissions as if they were its own. On request, the Team Owner will tell us who has been given access to the Services. If you join a team, the Team Owner’s administrators may be able to see your profile information, your activity in the team and the content you create there, and the Team Owner’s own policies may apply to you.

5. Your right to use the Services

Subject to these Terms and to your payment of any applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable and revocable right, for the term of your plan, to access and use the Services in accordance with the documentation and the limits of your plan: on a paid plan, for your own internal business purposes; on the free Community plan, for the uses permitted in section 6.

We and our licensors own all rights, title and interest in the Services and the Service Content, including all intellectual property rights. These Terms do not transfer any of those rights to you, and all rights not expressly granted are reserved. “Intellectual property rights” means patents, copyright and related rights, trademarks, trade names, domain names, rights in software and databases, know-how, rights in designs and in look and feel, and every similar right anywhere in the world, registered or not.

6. Plans and eligibility

The Services are offered on a free Community plan and on paid plans. The features, Credits, seats and limits of each plan are shown on our Pricing page and in the app, and may differ between monthly and yearly billing.

Unless the Pricing page states otherwise, the Community plan is available only for personal, non-profit or academic use, and for professionals and organizations whose revenue or funding, together with that of any organization on whose behalf they use the Services, was under 100,000 US dollars in the previous twelve months. Any other commercial use requires a paid plan.

When you choose a plan, you confirm that you meet its eligibility conditions. You must move to the right plan if your circumstances change. We may ask for reasonable information to check your eligibility, and we may suspend or end your access, or move you to the correct plan, if you do not provide it or if you are not eligible.

Diagrams on the Community plan are public. Private diagrams are a feature of paid plans. See section 9.

7. Fees, billing, Credits and refunds

Fees. Paid plans, extra seats and Top-up Credits are charged at the prices shown at checkout. Prices exclude value added tax and similar taxes unless stated otherwise; the taxes due are calculated at checkout and added to your invoice. You are responsible for all taxes other than taxes on our income. If you give us a tax identification number, you confirm that it is valid and that you are entitled to use it.

Payment. Payments are processed by our payment provider, Stripe, using the payment methods offered at checkout, which may include cards and wallets. We do not receive or store your full card number. You authorize us and Stripe to charge your chosen payment method for all fees you incur, including recurring fees. You must keep your billing information current.

Automatic renewal. Paid subscriptions renew automatically at the end of each monthly or yearly billing period, for the same period, at the then-current price, until you cancel. You can cancel at any time in the Billing section of the app. Unless the Billing flow offers and you choose an earlier date, cancellation takes effect at the end of the current billing period, and you keep access until then.

Free trials and promotions. If we offer you a free trial or promotional price, it converts into a paid subscription at the regular price at the end of the trial or promotion unless you cancel before then. Each trial and promotion may have additional conditions shown when you accept it, and we may decline or end one at any time.

Plan changes and proration. When you change plan, seats or billing cycle, the app shows you any charge, credit or adjustment and the date it takes effect before you confirm. That confirmed amount is the amount due.

Price changes. We may change our prices. A change applies to an existing subscription only from its next renewal, and we will tell you about it at least five calendar days in advance by email or in the app. If you do not agree, you can cancel before the renewal.

Credits. Credits measure the capacity the Services use for you, for example when you Play a diagram, run a forecast or use an AI feature. Each plan includes a monthly allowance (“Monthly Credits”), and paid plans may buy additional Credits (“Top-up Credits”). The app shows your balance, how many Credits an action used and your next refill date. The following rules apply to all Credits:

• Credits are a licence to use a measured amount of the Services. They are not money, electronic money, a deposit, a security or property. They have no cash value, earn no interest, cannot be exchanged for cash, and cannot be sold, transferred, pooled outside your team or used outside the Services.
• Monthly Credits are available until your next refill date, as shown in the app, and Monthly Credits are spent before Top-up Credits. Top-up Credits are valid for one year from purchase unless the purchase screen says otherwise. Credits that are not used before they expire are lost.
• The number of Credits an action uses depends on the work it requires, for example the size of the diagram, the number of steps and runs, the AI model chosen and the length of the conversation and attachments. Any estimate we show before an action is a guide, not a quote.
• AI features use Credits when they process your request, whether or not you find the Output useful or apply it. If an AI request fails because of an error on our side, we may restore the Credits it used, but we are not required to.
• We may change how many Credits an action uses, the allowances included in a plan, and the Top-up packs we sell. A change to an allowance takes effect from your next billing period.
• We may correct a balance that is wrong because of a technical error, and we may cancel Credits obtained by fraud, abuse, chargeback or breach of these Terms.
• When your plan ends or your account is closed or terminated, any remaining Credits are lost without compensation.

Refunds. Except where these Terms say otherwise or the law requires it, all fees are non-refundable, including for partial billing periods, unused seats, unused or expired Credits, downgrades, and accounts suspended or terminated for breach of these Terms. We may grant a refund or credit at our discretion; doing so once does not oblige us to do so again.

Consumers in the European Union, the European Economic Area and the United Kingdom. If you are a consumer in these regions, you have a statutory right to withdraw from a contract for digital services within 14 days of making it, without giving a reason. By asking us to start the Services immediately, you agree that, if you withdraw, you will pay for the Services provided until you withdraw, including Credits used, and you acknowledge that you lose the right of withdrawal once the Services have been fully provided. To withdraw, contact us at contact@machinations.io within the 14 days.

Late payment. If a payment fails or is overdue, we may retry the charge, suspend paid features or the account, or move the account to the Community plan, as described in section 9. You remain responsible for amounts due. Please contact us before starting a chargeback; an unjustified chargeback is a breach of these Terms.

Errors. We may correct errors in prices or invoices, even after an order has been placed, and we may refuse or cancel any order.

8. Your content

You keep ownership. As between you and us, you keep all rights you have in your User Content. We do not claim ownership of it.

The licence you give us. You grant us and the service providers we use to run the Services a worldwide, non-exclusive, royalty-free licence, for as long as your User Content is held in the Services and in our backups, to host, store, copy, transmit, process, analyze, display, adapt, reformat and create representations of your User Content (such as previews, thumbnails, layouts, chart images and exports), and to send it to AI model providers and other subprocessors, in each case as needed to provide, maintain, secure, support and improve the Services and to comply with the law. This licence also covers sharing your User Content with the people you choose to share it with, and the additional rights for Public Content in section 9. It continues for future technologies and providers we use for these purposes.

Private content. On paid plans, your diagrams are private unless you share them or make them public. We do not access private User Content except through automated processing that provides the Services, or when it is needed to provide support you ask for, to investigate security incidents, fraud or breaches of these Terms, or to comply with the law. We do not disclose private User Content to third parties except to our subprocessors, to the people you share it with, to your team as described in section 4, or as required by law. Where the law allows, we will try to tell you about a legal demand for your User Content before we comply, so that you can respond to it yourself.

Your promises about your content. You confirm that you have all rights, licences and consents needed to submit your User Content and to grant the licences in these Terms, including for any third-party material, confidential information or personal data it contains, and that your User Content and our use of it under these Terms will not infringe anyone’s rights or break any law or contract. Do not put into the Services, and especially into the AI features, personal data you have no right to share, special categories of personal data (such as health data), payment card numbers, passwords or other secrets.

No obligation to monitor. We do not review User Content before it is published and have no obligation to do so. We may, but need not, review, refuse, hide, restrict or remove any User Content that we believe breaches these Terms or the law or could harm the Services, our users or us.

Backups are your responsibility. We back up our systems routinely, but the Services are not a backup or archiving service. You are responsible for keeping your own copies of User Content you need, for example by exporting your diagrams.

9. Public content, the Community and Remix

What is public. User Content is Public Content when it is visible to people outside your account and team, for example a diagram on the Community plan, a diagram you set to public or publish to the Community, your public Community profile, a public diagram shown in an embed on another website, and your comments on public diagrams. Public Content can be found, viewed, Played, embedded, shared, liked and copied by anyone, including people without an account, and it may be indexed by search engines and shown on the Website, in the Community and in search results.

Remix. “Remix” (previously called “Fork”) makes a copy of a public diagram in the account of the person who remixes it. “See all possible outcomes” and similar actions in an embed also make the visitor’s own copy, after the visitor signs in or signs up. The copy belongs to the account that made it and is independent of the original; changes to or deletion of the original do not change or delete copies already made. We may show that a diagram was remixed from another diagram and who made the original.

Public domain dedication. When you make User Content public, you dedicate it to the public domain under the Creative Commons CC0 1.0 Universal Public Domain Dedication (creativecommons.org/publicdomain/zero/1.0/legalcode), to the extent you hold rights in it. Anyone may then copy, modify, distribute, Play, remix and build on it, in any medium and for any purpose, including commercial purposes, without asking permission and without giving credit. To the extent the law does not allow a dedication to the public domain, you grant everyone a worldwide, royalty-free, irrevocable and unconditional licence to do the same, and you waive, or agree not to assert, any moral rights. If you do not want to grant these rights, keep your content private on a paid plan.

Our additional rights in Public Content. In addition to the rights above, we may display, feature, promote, rank, categorize and describe Public Content anywhere in the Services, on the Website, in newsletters and emails, and in marketing material; generate titles, descriptions, tags and thumbnails for it, including with AI; and use it in templates, examples, documentation and showcases.

Making content private again. If you are on a paid plan, you can change a public diagram back to private in the app. From then on it is no longer shown publicly by us, but copies, remixes, embeds, screenshots and other uses made while it was public are not affected, and the public domain dedication remains in force for what was published.

Plan changes. If your account moves from a paid plan to the Community plan, your existing private diagrams stay private, but you may be unable to edit or Play them until you return to a paid plan, and diagrams you create on the Community plan are public.

Community conduct. Public Content, profiles and comments must follow the Acceptable Use Policy. Likes, views and Remix counts are shown as received and may be adjusted, for example to remove automated or fraudulent activity.

10. AI features

What the AI features are. The Services include features that use artificial intelligence, including the AI agent and chat that builds, edits and explains diagrams, the automatic improvement of a diagram’s clarity and layout, AI-proposed formulas, dashboards, names and descriptions, the reading of files and links you give the AI, and other AI features we add over time (together, the “AI Features”). Some of them are labeled as beta or preview.

How your requests are processed. To answer a request, we send the request, the relevant parts of your diagram and conversation, the text we extract from your attachments and the content of links you paste to third-party AI model providers, which process them on our behalf. The current providers are listed on our subprocessors page. Some AI Features may use web search provided by the model provider to answer a request, in which case parts of your request may be used as search queries. When you paste a link, our servers fetch that page or document, and you confirm you are entitled to have it read. When you attach a file, we convert it to text where we can (for example spreadsheets, documents, presentations and archives) and store it with the conversation. See the Privacy Policy for details.

Ownership of Output. As between you and us, and to the extent the law allows, you own the Output generated for you, and we assign to you any rights we may have in it. This does not give you any rights in the Service Content, including our building blocks, templates and the Machinations diagram language, which remain ours and which you may use only through the Services. Because of how AI works, Output may not be unique: other users may receive the same or similar Output, and Output that is generated for others is not yours. Output may not be protected by copyright or other rights in every country. Output you make public is Public Content under section 9.

Output can be wrong. AI Features are probabilistic and can produce Output that is inaccurate, incomplete, out of date, biased, offensive, or inconsistent with your request or with the documentation, and can describe a diagram, a Play result or a source incorrectly. Output can also resemble third-party material. You are responsible for reviewing, testing and verifying all Output before you rely on it, apply it or publish it, and for ensuring that your use of Output complies with the law and does not infringe anyone’s rights.

Not professional advice. Diagrams, Plays, forecasts, outcome ranges, Output and Economic Zeitgeist content are models and illustrations. They are not predictions or guarantees of real-world results, and they are not financial, investment, tax, accounting, legal, economic, medical or other professional advice. Nothing in the Services is an offer, recommendation or solicitation to buy or sell any security, token, cryptocurrency or other financial instrument. Decisions you make based on the Services are your own, and you should get independent professional advice where appropriate.

No high-risk uses. You must not use the AI Features, or rely on Output, as the sole basis for decisions that have legal or similarly significant effects on individuals (such as decisions about employment, credit, insurance, housing, education or access to essential services), or in the operation of critical infrastructure, medical care or other situations where an error could cause death, personal injury or serious damage.

Model providers’ rules. You must also comply with the usage policies of the AI model providers that apply to the AI Features, including the Google Generative AI Prohibited Use Policy. We may block requests or Output that we or our providers detect as unsafe or prohibited.

Training. We do not use your private User Content or your prompts to train generative AI models, and our agreements with our AI model providers do not allow them to use your content submitted through the Services to train their models. We may use your prompts, Output and feedback, including thumbs-up and thumbs-down ratings, to operate, support, secure, evaluate and improve the Services, for example to test and refine our instructions, validation rules and features.

Changes to models. We may change, add or remove the AI models and providers we use, the instructions they receive, and the AI Features themselves at any time, and Output for the same request may change as a result.

11. Economic Zeitgeist and machine-made content

Economic Zeitgeist and similar parts of the Services publish economy models, explanations and articles that are created wholly or partly by AI from public sources, such as news, articles and economic data. They are provided for education and exploration only. They may contain errors, may misread or oversimplify their sources, may be out of date, and do not represent the views of the sources or of Machinations. Links to sources are provided for convenience, and the sources remain the property of their owners. Section 10’s rules on accuracy and on professional advice apply to this content in full.

12. Embeds and sharing

You may embed public diagrams on your own website or app using only the embed code we provide, and share them using the share links we provide. You must not alter the embed, hide or obscure the Machinations name, attribution or controls, suggest that we endorse you or your website, or embed content in a way that breaks the law or the Acceptable Use Policy. You must not frame other pages of the Services.

If you embed a diagram on a website you operate, you are responsible for your website and for telling your visitors, in your own privacy notice, that the embed is provided by Machinations; the Privacy Policy below describes what the embed collects. We may change, limit or disable any embed or share feature at any time, for example if the diagram is made private or removed.

Share links to social networks open those networks’ own pages. What you post there is governed by their terms.

13. API, MCP connector and access tokens

Where we make them available, you may use our application programming interfaces, our MCP connector and access tokens to connect the Services to other software, including third-party AI assistants and agents (“Connected Apps”). Use of these interfaces is subject to these Terms, to the documentation and to the rate, size and Credit limits we set, which we may change at any time.

When you connect a Connected App, you authorize it to act on your account within the permissions you grant, for example to list and read your diagrams, create diagrams and run Plays that use your Credits. You are responsible for everything a Connected App does with your authorization and for the Connected App’s own handling of your data, which is governed by its provider’s terms, not ours. Keep your access tokens secret, and revoke a token or connection in the app if you no longer use it or believe it has been compromised. We may revoke tokens and connections, and suspend access through these interfaces, to protect the Services or our users.

You must not use these interfaces to build a product that replicates or substitutes for the Services, to scrape or bulk-extract Public Content or Service Content, or to exceed or evade the limits of your plan.

14. Acceptable use

You must follow the Acceptable Use Policy. In addition, and without limiting it, you must not, and must not help or allow anyone else to:

• use the Services in breach of any law or regulation, or to infringe, misappropriate or violate anyone’s intellectual property, privacy, publicity or other rights;
• copy, modify, translate, decompile, disassemble or reverse engineer the Services or any part of them, or attempt to derive their source code, models, algorithms, AI instructions or system prompts, except to the extent the law expressly permits despite this restriction;
• use the Services, any Output or any Service Content to develop, train, fine-tune, evaluate or improve any AI or machine learning model, dataset or product that competes with the Services, or to build a competing product or service;
• attempt to bypass, disable or interfere with the safeguards of the AI Features, including through prompt injection, jailbreaking or hidden instructions in files, links or diagrams, or to make the AI Features reveal their instructions or other users’ information;
• access the Services by automated means, including bots, scrapers, crawlers and scripts, other than through the interfaces we provide and within their limits, or collect data, Public Content, user names or email addresses from the Services in bulk;
• circumvent or manipulate Credits, rate limits, plan limits, eligibility rules, likes, views or other measures, including by creating multiple accounts;
• use the Services to create, store or distribute malware, spam, phishing, deceptive content, or content that is unlawful, harassing, hateful, sexually explicit, or that exploits or endangers children;
• interfere with, overload or disrupt the Services, or test, scan or probe their security other than as allowed by our vulnerability disclosure program;
• impersonate any person, misrepresent your affiliation, or present Output as human-made where the law requires disclosure that it was generated by AI;
• resell, sublicense, rent, lease or provide the Services to third parties as a service bureau, except as expressly allowed by a written agreement with us; or
• use the Services to monitor their availability, performance or functionality for competitive purposes.

15. Feedback, trademarks and publicity

Feedback. If you send us ideas, suggestions, reviews, ratings, bug reports or other feedback, including feedback on Output, you grant us a worldwide, perpetual, irrevocable, royalty-free, transferable and sublicensable licence to use it for any purpose without restriction or payment to you. We are not obliged to use feedback.

Our trademarks. “Machinations”, our logos and our product names are our trademarks. You may not use them without our prior written permission, except to refer truthfully to the Services.

Publicity. If you register for, or subscribe to, the Services for or on behalf of an organization, on any plan including a free one, you grant us a worldwide, royalty-free licence to name that organization and show its name and logo as a user or customer of Machinations on the Website, in the Services, and in sales and marketing material, for as long as the account exists. We will show the logo as you or the organization publish it, without changing it. You can withdraw this permission at any time by writing to contact@machinations.io; we will then stop new uses within a reasonable time, and we do not have to recall material already printed or published.

16. Third-party services and integrations

The Services can work with services we do not control (“Third-Party Services”), for example Google sign-in, Google Drive and Google Sheets, your organization’s single sign-on provider, live market data sources you add to a diagram, Connected Apps, social networks, and websites you link to. When you connect or use a Third-Party Service, you authorize us to exchange data with it as needed for the feature, and you confirm that you may do so under its terms. Third-Party Services are governed by their own terms and privacy policies. We do not endorse them and are not responsible for their availability, accuracy, content, security or practices, or for any loss caused by them. Any transaction between you and a Third-Party Service is solely between you and that provider.

17. Copyright and other content complaints

We respond to notices of alleged copyright infringement and other illegal content, including under the United States Digital Millennium Copyright Act and the European Union Digital Services Act. To report content, write to contact@machinations.io with the subject “Content notice”, or by post to our address in section 1, and include:

• your name, address, telephone number and email address;
• a description of the copyrighted work or other right you say is infringed, or an explanation of why the content is illegal;
• the exact address (URL) of the content on the Services;
• a statement that you have a good-faith belief that the use is not authorized by the rights owner, its agent or the law;
• a statement that the information in your notice is accurate and, for copyright notices, under penalty of perjury, that you are the rights owner or authorized to act on its behalf; and
• your physical or electronic signature.

We may remove or disable access to the content, and we will tell the person who posted it where the law requires and allows. If your content was removed and you believe that was a mistake, you can send us a counter-notice with the same contact details, the URL of the removed content, a statement under penalty of perjury that you believe it was removed by mistake or misidentification, and, for copyright counter-notices, your consent to the jurisdiction of the courts competent under the applicable law. We may share notices and counter-notices with the other party. It is our policy to terminate, in appropriate circumstances, the accounts of users who repeatedly infringe. Submitting a notice that you know to be false may make you liable for damages.

18. Beta, preview and experimental features

We may offer features labeled beta, preview, early access, experimental or similar, including new AI Features and new AI models (“Beta Features”). Beta Features are provided for evaluation, may be incomplete or unreliable, may use more Credits than expected, may be changed or withdrawn at any time without notice, and are excluded from any service level or support commitment. To the fullest extent the law allows, Beta Features are provided “as is” and we have no liability for them. You must not rely on a Beta Feature for anything critical.

19. Changes to the Services and availability

We continuously change the Services. We may add, change, limit, suspend or remove any feature, plan, integration or part of the Services at any time. If we remove a material paid feature during a paid billing period without replacing it, you may cancel and receive a pro-rata refund of the prepaid fees for the rest of that period, which is your only remedy.

We do not promise that the Services will always be available, uninterrupted, timely, secure or error-free. They may be interrupted by maintenance, failures, attacks or events outside our control. We are not obliged to provide support, updates or corrections unless we have agreed to in writing.

20. Suspension and termination

By you. You can stop using the Services at any time, cancel a subscription in Billing as described in section 7, and delete your account in the app’s settings. A team’s owner account cannot be deleted while it owns the team.

By us. We may suspend or restrict your access to all or part of the Services, remove content, or terminate your account or these Terms, at any time and with or without notice, if we reasonably believe that you have breached these Terms or the law, that your use creates risk or possible legal exposure for us, our users or others, that fees are overdue, or that continuing to provide the Services to you is no longer lawful or commercially viable. We may also close a Community account that has been inactive for a long period after telling you by email. Where reasonable, we will tell you the reason and give you an opportunity to respond or to export your User Content, unless doing so would be unlawful or would create risk.

Effect. When your account ends, your right to use the Services ends, any remaining Credits are lost, and we may delete your User Content as described in the Privacy Policy, except Public Content and copies others have made under section 9. You will not receive a refund if we terminate your account for breach of these Terms. Sections that by their nature should survive termination survive it, including sections 7 (for amounts due), 8, 9, 10 (ownership, accuracy and advice), 14, 15, and 21 to 29.

21. Disclaimers

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICES, THE SERVICE CONTENT, THE AI FEATURES, ALL OUTPUT, ALL PUBLIC CONTENT AND ALL THIRD-PARTY SERVICES ARE PROVIDED “AS IS”, “AS AVAILABLE” AND “WITH ALL FAULTS”. MACHINATIONS, ITS AFFILIATES, AND THEIR DIRECTORS, OFFICERS, EMPLOYEES, CONTRACTORS, SUPPLIERS, LICENSORS AND AGENTS (THE “MACHINATIONS PARTIES”) MAKE NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, AND DISCLAIM ALL WARRANTIES, INCLUDING ANY WARRANTY OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, NON-INFRINGEMENT, ACCURACY, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

WITHOUT LIMITING THE ABOVE, THE MACHINATIONS PARTIES DO NOT WARRANT THAT THE SERVICES WILL MEET YOUR REQUIREMENTS OR BE UNINTERRUPTED, SECURE, ERROR-FREE OR FREE OF HARMFUL COMPONENTS; THAT ANY DEFECT WILL BE CORRECTED; THAT ANY CONTENT OR DATA WILL BE PRESERVED; THAT ANY OUTPUT, PLAY RESULT, FORECAST, OUTCOME RANGE OR ECONOMIC ZEITGEIST CONTENT WILL BE ACCURATE, COMPLETE, RELIABLE, ORIGINAL, NON-INFRINGING OR SUITABLE FOR ANY PURPOSE; OR THAT YOUR USE OF THE SERVICES IS LAWFUL IN ANY PARTICULAR JURISDICTION. YOU ALONE ARE RESPONSIBLE FOR EVALUATING THE MERITS AND RISKS OF USING THE SERVICES AND FOR ANY DECISION YOU MAKE BASED ON THEM.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES, SO SOME OF THESE EXCLUSIONS MAY NOT APPLY TO YOU. IN THAT CASE, ANY WARRANTY IS LIMITED TO THE SHORTEST PERIOD AND NARROWEST SCOPE THE LAW ALLOWS.

22. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, THE MACHINATIONS PARTIES WILL NOT BE LIABLE TO YOU OR ANYONE ELSE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE OR MORAL DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, ANTICIPATED SAVINGS OR DATA, LOSS OR CORRUPTION OF USER CONTENT, BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES, INCLUDING ANY OUTPUT, ANY DECISION MADE BASED ON THE SERVICES, ANY PUBLIC CONTENT OR CONDUCT OF OTHER USERS, AND ANY THIRD-PARTY SERVICE OR CONNECTED APP, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY OF THE MACHINATIONS PARTIES FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU ACTUALLY PAID US FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE EVENT THAT GAVE RISE TO THE LIABILITY AND (B) ONE HUNDRED US DOLLARS (USD 100).

THESE LIMITATIONS APPLY TO EVERY THEORY OF LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, STATUTE OR OTHERWISE, AND EVEN IF A LIMITED REMEDY FAILS OF ITS ESSENTIAL PURPOSE. THEY ARE AN ESSENTIAL BASIS OF THE BARGAIN BETWEEN YOU AND US AND ARE REFLECTED IN OUR PRICES, INCLUDING IN THE AVAILABILITY OF A FREE PLAN.

NOTHING IN THESE TERMS EXCLUDES OR LIMITS LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER THE APPLICABLE LAW, SUCH AS LIABILITY FOR FRAUD, FOR WILLFUL MISCONDUCT OR GROSS NEGLIGENCE, OR FOR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, OR YOUR MANDATORY RIGHTS AS A CONSUMER.

23. Indemnity

To the fullest extent permitted by law, you will defend, indemnify and hold harmless the Machinations Parties from and against all claims, demands, proceedings, losses, liabilities, damages, fines, penalties, costs and expenses, including reasonable legal fees, arising out of or relating to: your or your Authorized Users’ use of the Services; your User Content, including Public Content; your use, publication or distribution of Output; your Connected Apps; your website or app where you embed the Services; your breach of these Terms or of the law; or your violation of anyone’s rights. We may take control of the defense of any such claim at your cost, and you will cooperate with us. You may not settle a claim that affects us without our prior written consent. If you are a consumer, this section applies only to the extent the law allows.

24. Export controls and sanctions

The Services, including the AI Features and Output, may be subject to export control and economic sanctions laws, including those of the European Union, Luxembourg, the United Nations, the United States and the United Kingdom. You must comply with all such laws when you use the Services. You confirm that you are not located, organized or ordinarily resident in a country or region subject to comprehensive sanctions under those laws; that you are not on, or owned or controlled by anyone on, any applicable sanctions or restricted-party list; and that you will not use the Services for any purpose prohibited by those laws, including military end uses or the development of weapons of mass destruction. You will not export, re-export or transfer the Services or Output in breach of those laws, and you will tell us promptly if any of these statements stops being true. We may suspend or end the Services immediately to comply with these laws.

25. Electronic communications and notices

You agree to receive contracts, notices, invoices, policies and other communications from us electronically, by email to the address on your account or in the Services, and you agree that they satisfy any legal requirement that they be in writing. A notice we send by email is considered received on the calendar day after we send it. You must keep your email address current. We may send you service and transactional messages, such as security, billing, Credit and account messages, even if you have opted out of marketing emails. Notices to us must be sent to contact@machinations.io or by post to our address in section 1.

26. Governing law and disputes

Governing law. These Terms and any dispute arising out of or relating to them or to the Services, including non-contractual disputes, are governed by the laws of the Grand Duchy of Luxembourg, without regard to its conflict of laws rules. The United Nations Convention on Contracts for the International Sale of Goods and the Uniform Computer Information Transactions Act do not apply.

Informal resolution first. Before starting arbitration or court proceedings, the party with a dispute must send the other party a written notice describing it, and both parties will try in good faith to resolve it informally for at least thirty (30) days from that notice.

Binding arbitration. IF THE DISPUTE IS NOT RESOLVED INFORMALLY, IT WILL BE FINALLY AND EXCLUSIVELY RESOLVED BY BINDING ARBITRATION, EXCEPT AS SET OUT BELOW. YOU UNDERSTAND THAT WITHOUT THIS PROVISION YOU WOULD HAVE THE RIGHT TO SUE IN COURT. The arbitration will be administered under the arbitration rules of the Arbitration Centre of the Chamber of Commerce of the Grand Duchy of Luxembourg in force when the arbitration starts, and, where applicable, its rules for consumer disputes. The tribunal will consist of one arbitrator. The seat of arbitration is Luxembourg, and the language is English. The arbitration may be conducted on documents, by telephone or online. The arbitrator must follow these Terms and the applicable law, and judgment on the award may be entered in any competent court.

Individual claims only. TO THE FULLEST EXTENT PERMITTED BY LAW, YOU AND WE MAY BRING CLAIMS AGAINST EACH OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED OR REPRESENTATIVE PROCEEDING. No arbitration may be joined with another without the consent of all parties.

Exceptions. Either party may bring an individual claim in a small-claims court where it qualifies, and either party may ask a competent court for urgent or injunctive relief, including to protect intellectual property rights or confidential information or to stop misuse of the Services. We may also bring proceedings to collect fees you owe.

Consumers. If you are a consumer, nothing in this section deprives you of the protection of the mandatory laws of the country where you live, or of your right to bring proceedings in the courts of that country where those laws give you that right. Consumers in the European Union can also use the alternative dispute resolution bodies available in their country.

Time limit. To the fullest extent permitted by law, any claim you have arising out of or relating to these Terms or the Services must be started within one (1) year after the cause of action arose, or it is permanently barred.

27. Changes to these Terms

We may change these Terms from time to time, for example to reflect new features, AI providers, laws or business needs. We will post the updated Terms on this page and update the “Last updated” date. If a change is material, we will give you reasonable notice before it takes effect, by posting it here and by a notice in the app; we may also email you, but we are not obliged to, and we may ask you to accept the updated Terms. Please check this page from time to time. Changes that address new features or that are required by law may take effect immediately. If you do not agree to a change, you must stop using the Services and may cancel your subscription; if you continue to use the Services after the change takes effect, you accept the updated Terms. A change does not apply to a dispute that arose before it was posted.

28. General

• Entire agreement. These Terms, together with the documents they incorporate and any order or written agreement you have signed with us, are the entire agreement between you and us about the Services, and they replace any earlier agreement on the same subject.
• Assignment. You may not assign or transfer these Terms or your account without our prior written consent. We may assign or transfer these Terms, in whole or in part, to an affiliate or in connection with a merger, acquisition, reorganization or sale of assets.
• Affiliates and service providers. We may use our affiliates, including Machinations Labs in Romania, and other subcontractors to provide the Services, and we remain responsible for our obligations under these Terms.
• Severability. If a court or arbitrator finds any provision of these Terms invalid or unenforceable, that provision will be enforced to the maximum extent permitted and interpreted to reflect the parties’ intent as closely as possible, and the other provisions remain in force.
• No waiver. Our failure or delay in enforcing a provision is not a waiver of it. A waiver is effective only if we give it in writing.
• Force majeure. We are not liable for any failure or delay caused by events beyond our reasonable control, including failures of internet, hosting, power or AI model providers, cyberattacks, natural disasters, epidemics, war, terrorism, labor disputes and acts of government.
• Relationship. You and we are independent contractors. These Terms do not create a partnership, joint venture, employment or agency relationship, and they give no rights to any third party, except that the Machinations Parties may rely on sections 21 to 23.
• Language. These Terms are written in English. If we provide a translation, the English version prevails in case of conflict.
• Headings. Headings are for convenience only, and “including” means “including without limitation”.

29. Contact

Machinations S.àr.l., 8 Op Bierg, Mamer, Luxembourg 8217. Email: contact@machinations.io. You can also reach us through our contact page. Security vulnerabilities should be reported as described in our vulnerability disclosure program.

Version history

• November 4, 2026: section 15 (Publicity) now covers every organization that registers or subscribes, on any plan, and section 27 says how we announce changes: on this page and in the app, with email optional.
• October 24, 2026: rewritten to cover the AI Features, Credits and Top-up Credits, Remix, embeds, Economic Zeitgeist, the API and MCP connector, beta features, content complaints, consumer withdrawal rights and current billing; the separate Disclaimer page has been folded into sections 10, 11 and 21.
• October 23, 2023: previous version.

Privacy Policy

Last updated: November 4, 2026. The previous version is dated October 24, 2026; see the version history at the end of this policy.

1. Who we are and what this policy covers

This Privacy Policy explains how Machinations S.àr.l., 8 Op Bierg, Mamer, Luxembourg 8217 (“Machinations”, “we”, “us”), processes personal data when you visit machinations.io, use the my.machinations.io app and our other Services, view a Machinations embed on another website, or contact us. Words defined in the Terms of Service above have the same meaning here.

We are the data controller for the personal data described in this policy. If you use the Services through a team or organization that has a separate data processing agreement with us, we process the content of that team’s workspace on the organization’s behalf, as its processor, and the organization’s own privacy notice also applies to you.

“Personal data” means any information that identifies you or can be linked to you, directly or indirectly. For questions about this policy or to exercise your rights, write to contact@machinations.io.

2. Personal data we collect

Information you give us:

• Account information: your email address (required), password (stored only as a cryptographic hash), user name, and optionally your first and last name and profile picture.
• Profile and onboarding answers: information you choose to give, such as your company or organization, job title, company size, role and what you want to use Machinations for.
• Billing information: your billing name and address, invoicing email, tax identification number, phone number if you give it, your plan, seats, Credits and payment history. Card and wallet details are collected by Stripe; we receive only limited details, such as the card brand, last four digits and expiry date.
• Your content: diagrams, version history, Plays and their results, dashboards, comments, descriptions and everything else in your User Content, which may include personal data you choose to put in it.
• AI interactions: the prompts and messages you send to the AI Features, the parts of your diagram sent with them, the AI’s answers and Output, whether you applied an answer, your ratings and feedback, and the number of tokens and Credits each request used.
• Attachments and links: files you attach or import into the AI Features (for example images, PDFs, spreadsheets, documents, presentations, archives and app packages), the text we extract from them, and the content of web pages and documents at links you paste.
• Community activity: diagrams you publish, likes, views, remixes, comments and follows.
• Communications: messages you send us by email, chat or forms, including the whitepaper and demo request forms on our website (name, email address, company and whether you want a demo), and your email and notification preferences.

Information we collect automatically:

• Usage data: the features and pages you use, the actions you take (for example creating, Playing, sharing or remixing a diagram), and when.
• Device and log data: your IP address, browser and operating system, device type, language, referring page, approximate location derived from your IP address, request times, error reports and security logs.
• Cookies and local storage: see section 6.
• Embed data: when a Machinations embed is loaded on another website, we record the address of that website and count loads per website. The embed itself does not sign you in or carry your Machinations session.

Information from third parties:

• Sign-in providers: if you sign in with Google, Google gives us your name, email address and profile picture. If your organization uses single sign-on (SAML), its identity provider gives us your identifier, email address and the attributes your organization configures.
• Google Drive and Google Sheets: if you connect them, we access the files and spreadsheets you select or create through the integration, as needed to import or export data. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Payment provider: Stripe tells us whether a payment succeeded and gives us the limited payment details described above.
• Your team: if a team administrator invites you, we receive your email address and role from them.
• Connected Apps: if you connect an AI assistant or other app through our MCP connector or API, we receive the requests it sends on your behalf and information about the connection.

Providing your email address is required to create an account, and billing information is required to buy a paid plan. Everything else is optional, although some features need it to work.

3. How we use personal data and our legal bases

We process personal data only where we have a legal basis under the EU General Data Protection Regulation (“GDPR”) and other applicable laws:

• To provide the Services (create and secure your account, store and Play your diagrams, run the AI Features, sync collaboration, sharing, embeds and Remix, process payments, manage teams and Credits, and provide support): because it is necessary to perform our contract with you (GDPR Article 6(1)(b)).
• To keep the Services safe (prevent fraud, abuse, spam and automated sign-ups, enforce our Terms and limits, investigate incidents): our legitimate interest in protecting the Services, our users and us (Article 6(1)(f)).
• To understand and improve the Services (product analytics, measuring which features are used, evaluating and improving the quality of the AI Features and our instructions using prompts, Output and feedback, debugging): our legitimate interest in developing a better product (Article 6(1)(f)), and your consent where the law requires consent for the cookies or similar technologies involved (Article 6(1)(a)).
• To communicate with you (service messages about your account, security, billing and Credits; notifications, including the weekly summary of activity on your public diagrams; and product news and marketing): performance of our contract for service messages, and our legitimate interest or your consent, as the law requires, for notifications and marketing. You can opt out of non-essential emails at any time.
• To publish and promote Public Content (show it in the Community and on the Website, generate titles, descriptions and thumbnails for it, feature it): performance of our contract and our legitimate interest in running a public community.
• To comply with the law (keep accounting and tax records, answer lawful requests from authorities): our legal obligations (Article 6(1)(c)).
• To establish, exercise or defend legal claims: our legitimate interest (Article 6(1)(f)).

Where we rely on legitimate interests, we have balanced them against your rights, and you can object as described in section 12. Where we rely on consent, you can withdraw it at any time without affecting processing that took place before.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Automated checks, for example to detect abuse or to estimate Credit use, may restrict an action, and you can ask a person to review the result.

4. AI features and your data

• What is sent. When you use an AI Feature, we send your request, the relevant parts of your diagram and conversation, text extracted from your attachments, and the content of links you paste to our AI model provider, currently Google, through the Gemini API. Files may be held temporarily in the provider’s file storage so the model can read them. The provider processes this data on our behalf to generate the answer.
• Web search and links. Some AI Features may use web search provided by the model provider, which may use parts of your request as search queries. When you paste a link, our servers fetch it from the internet; we do not fetch links to private networks.
• What we store. We store your AI conversations (your messages, the diagram context sent, the answers and their token and Credit counts), your attachments and the text extracted from them, linked to your account and to the diagram, so that you can return to them and so that we can bill Credits, provide support and investigate problems.
• Training. We do not use your private User Content or your prompts to train generative AI models, and our agreements with our AI model providers do not allow them to use your content submitted through the Services to train their models. Providers may retain data for a limited period to detect and prevent abuse, as their terms allow.
• Quality and improvement. Authorized members of our team and our affiliate Machinations Labs may review AI conversations, Output and feedback, and may use them in internal test sets, to provide support, investigate abuse and improve the quality of the AI Features. We limit this access to people who need it.
• Public diagrams. We may use AI to generate descriptions, names and thumbnails for Public Content.
• Your choices. Do not include personal data about others, special categories of personal data, or secrets in prompts, attachments or links. You can remove an attachment from a conversation in the app, and you can ask us to delete your conversations as described in section 12.

5. Public content and what others can see

Anything you make public can be seen by anyone, including people without an account, and may be indexed by search engines, embedded on other websites and copied through Remix. This includes your public profile (your user name, name and picture if you added them), your public diagrams with their descriptions, your comments on public diagrams, and the fact that you liked or remixed a public diagram where we show it. On the Community plan, your diagrams are public. Copies others have made remain after you make a diagram private or delete your account. Members of your team can see what you share with the team, and team administrators can see the team’s content and members.

6. Cookies, local storage and similar technologies

Cookies are small files a website stores in your browser. Local storage and session storage are similar browser features. We and the providers listed below use them as follows:

• Strictly necessary: keeping you signed in across machinations.io and my.machinations.io, security and fraud prevention (including Google reCAPTCHA on sign-in, sign-up and password reset), payment processing by Stripe, load balancing, and remembering your cookie choices. These are needed for the Services to work and do not require consent.
• Preferences: remembering your light or dark theme, open panels, recent diagrams and similar settings in your browser’s local storage.
• Analytics: Google Analytics and Mixpanel measure how the app and public diagram pages are used. Mixpanel is linked to your account identifier when you are signed in. Google may use data collected through Google Analytics as described in its own policies.
• Support: the Intercom chat widget, which may record your use of the pages where it is loaded and keeps a log of chat conversations.

Embeds. A Machinations embed on another website stores your light or dark theme choice in your browser’s local storage. It tells the host page how tall it is so the page can size it; that message contains no personal data. The embed may load Google Analytics. Its share buttons open X, LinkedIn or Reddit only when you click them, and its Remix and “See all possible outcomes” buttons take you to Machinations to sign in or sign up.

The machinations.io website stores your theme choice and similar display settings in your browser’s local storage, and keeps a number in session storage to count anonymously which Home page message led to a sign-up; that count contains no cookie, IP address or other identifier. YouTube videos on the website load from youtube-nocookie.com only after you press play.

Your choices. You can manage non-essential cookies in the cookie settings of the app, and you can block or delete cookies and local storage in your browser, although some features may then stop working. Where the law requires your consent for non-essential cookies, we rely on it. We do not respond to browser “Do Not Track” signals, because there is no common standard for them.

7. How we share personal data

We do not sell your personal data. We share it only as follows:

• Service providers (subprocessors) that process it on our behalf under contracts that require them to protect it and use it only to provide their services to us. See section 8.
• Our affiliates, including Machinations Labs in Romania, which develops and maintains the Services.
• Other users, as you direct: people you share diagrams with, your team, and everyone, for Public Content.
• Third-Party Services you connect, such as Google Drive or a Connected App, as needed for the integration you choose.
• Authorities and others where the law requires it, or where it is necessary to protect the rights, property or safety of our users, the public or us, to enforce our Terms, or to defend legal claims.
• A buyer or successor, if we are involved in a merger, acquisition, financing, reorganization or sale of assets, subject to this policy.
• With your consent, in any other case.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

8. Service providers

Our current subprocessors are:

• Amazon Web Services: hosting, databases, file storage (including your diagrams and AI attachments) and computing; European Union (Frankfurt).
• Google: the Gemini API that powers the AI Features; Google Analytics; reCAPTCHA; and Google sign-in, Google Drive and Google Sheets when you use them; United States and other countries where Google operates.
• Stripe: payments, subscriptions, invoices and tax calculation; United States.
• Mixpanel: product analytics; United States.
• Intercom: customer support chat and messages; United States.
• Customer.io: emails and email preferences; United States and European Union.
• Resend: transactional emails, such as account and security emails; United States.
• Machinations Labs (our affiliate): development and maintenance services; European Union (Romania).

When you enter a phone number, the app may send your IP address to an IP geolocation service (extreme-ip-lookup.com) to preselect your country code. Live market data that you add to a diagram is fetched by your browser directly from the data source you choose, such as Binance or OpenSea, which then receives your IP address. We keep the list on our subprocessors page up to date and may add or replace providers, including AI model providers, as the Services change.

9. International transfers

We host the Services in the European Union. Some of our providers, including our AI model provider, process personal data in the United States and other countries outside the European Economic Area. Where those countries are not recognized by the European Commission as providing adequate protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or, where a provider is certified, the EU-U.S. Data Privacy Framework, together with additional measures where needed. You can ask us for more information about these safeguards.

10. How long we keep personal data

• Account, content and AI conversations: for as long as your account is active. When you delete your account, we deactivate it immediately, cancel active subscriptions, delete your name, password, sharing permissions and access keys, and sign you out everywhere. We then delete or anonymize the remaining personal data within a reasonable period, except where we must or may keep it for the purposes below. Public Content and copies others made under section 9 of the Terms are not affected.
• Billing and tax records: for the period required by accounting and tax law, which in Luxembourg is generally ten years.
• Security and server logs: for as long as needed to secure the Services and investigate incidents.
• Marketing data: until you unsubscribe or object, and for a limited period afterwards to respect your choice.
• Records needed for legal claims: until the claim is resolved or the limitation period ends.

Backups are overwritten on a rolling basis. If you want specific data deleted sooner, write to contact@machinations.io.

11. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse and alteration, including encryption of data in transit, hashed passwords, access controls that limit personal data to people who need it, and monitoring. No system is completely secure, and we cannot guarantee the security of your data. You are responsible for keeping your password and access tokens secret. If we become aware of a personal data breach that affects you, we will notify you and the authorities as the law requires. You can report vulnerabilities through our vulnerability disclosure program.

12. Your rights

Depending on where you live, and subject to conditions and exceptions in the law, you have the right to:

• access your personal data and receive a copy of it;
• correct inaccurate or incomplete personal data;
• delete your personal data;
• restrict our processing of it;
• receive the personal data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller (data portability);
• object to processing based on our legitimate interests, on grounds relating to your situation, and object at any time, without giving a reason, to direct marketing;
• withdraw consent at any time where we rely on it; and
• lodge a complaint with a data protection authority, in particular in the country where you live or work or where an infringement took place. Our lead authority is the Commission nationale pour la protection des données (CNPD) in Luxembourg.

You can update much of your information yourself in the app’s settings, export your diagrams, and delete your account. For anything else, write to contact@machinations.io. We will answer free of charge within one month, which the law allows us to extend by two further months for complex requests, and we may ask you to confirm your identity first. If you use the Services through an organization that controls your workspace, we may refer your request to that organization.

13. Additional information for United States residents

If you live in a US state with a consumer privacy law, such as California, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of its sale, of its sharing for cross-context behavioral advertising, and of profiling with significant effects; and not to be discriminated against for exercising these rights. This policy describes the categories of personal information we collect (identifiers, commercial information, internet and network activity, approximate geolocation, professional information, and the content of your files and messages), their sources, the purposes for which we use them and the categories of recipients. We do not sell personal information and we do not knowingly sell or share the personal information of anyone under 16. Our use of analytics cookies may count as “sharing” under some state laws; you can opt out through the cookie settings in the app. To exercise your rights, write to contact@machinations.io. You can use an authorized agent, and we will verify requests before acting on them. If we deny your request, you may appeal by replying to our answer.

14. Children

The Services are not directed to children and are for people aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to contact@machinations.io and we will delete it.

15. Emails and notifications

We send service emails that are necessary for your account, such as confirmations, password resets, security alerts, billing and Credit messages, and team invitations. With your permission or where the law allows, we also send notifications, such as the weekly summary of who liked, viewed or remixed your public diagrams, and product news. You can change your email preferences in the app’s settings or use the unsubscribe link in any non-essential email. We may record whether you open our emails and click their links, to improve them.

16. Third-party websites and services

The Services link to and integrate with websites and services we do not control, such as social networks, Google, single sign-on providers, live market data sources and Connected Apps. Their own privacy policies apply to the data they collect. When you connect an AI assistant to Machinations through our MCP connector or API, the assistant’s provider processes what it receives from us under its own policy.

17. Changes to this policy

We may update this policy, for example when we add features or providers. We will post the new version here and update the “Last updated” date, and if a change is material we will tell you in advance on this page and by a notice in the app; we may also email you, but we are not obliged to. Where a change requires your consent, we will ask for it.

18. Contact

Machinations S.àr.l., 8 Op Bierg, Mamer, Luxembourg 8217. Email: contact@machinations.io.

Version history

• November 4, 2026: section 17 says how we announce changes: on this page and in the app, with email optional.
• October 24, 2026: rewritten to describe the AI Features and the providers they use, attachments and links, Credits, Remix and the Community, embeds, the API and MCP connector, local storage, current service providers (adding Google’s Gemini API, reCAPTCHA and Resend and removing Mailchimp), international transfers, retention, account deletion and the rights of US residents.
• January 23, 2023: previous version.