What we collect
Site and security data. Our hosting provider processes request data such as IP address, browser and device information, requested pages, timestamps, referrer, and security signals needed to deliver and protect the site. If you accept optional tracking, the measurement providers described below may also process page, interaction, campaign, approximate-location, and device data.
Inquiries. When you apply, request a search review or Signal report, book time, subscribe, or request a resource, we collect the contact and business information you submit. Signal also processes the public website URL you ask us to scan and its technical findings.
Inquiry attribution. To understand which outreach and pages produce useful inquiries, we keep limited first- and last-touch context in session storage: landing and conversion paths, campaign parameters, click identifiers, and the hostname of an external referring site. We do not retain the full referring URL. This context is attached to a lead record only when you submit a form and is not used to sell or advertise personal data.
Kira and calls. We process chat messages, browser-generated voice transcripts, telephone call transcripts, and related call metadata when you choose those channels. Do not submit confidential, regulated, or sensitive personal information through Kira.
Clients. During an engagement, we receive whatever business data is necessary to complete the scope — per a signed NDA or MSA.
How we use it
We use information to deliver and secure the site, respond to and route inquiries, produce requested reports, schedule conversations, operate Kira, send requested resources and subscriptions, administer engagements, understand which pages and sources create qualified demand, measure performance, prevent abuse, and comply with legal obligations.
We do not sell personal information for money. Optional advertising measurement may be treated as “sharing” or targeted advertising in some jurisdictions; those tools remain off until you accept and can be withdrawn at any time through Cookie preferences.
Who we share with
Our current operating providers include Cloudflare (DNS, edge, and security), Railway (application hosting), Supabase (database and storage), Resend (email), Cal.com (booking), Stripe (payments), Anthropic (Kira language-model processing), and Telnyx (telephone, transcription, and messaging). They process information to provide services to Michai under their own contractual and privacy terms.
With optional consent, the site may also load PostHog, Google Analytics, Microsoft Clarity, LinkedIn Insight, Meta Pixel, and X conversion measurement when those integrations are configured. These providers may receive browser, device, interaction, campaign, and network information. We may otherwise disclose information when required by law, during a legitimate business transaction, or to protect Michai, our clients, visitors, or the public.
Kira, browser voice, and telephone calls
Kira is an AI assistant powered by Anthropic. The messages included in your active conversation are sent to Anthropic so Kira can answer. The homepage may store a short chat history and random session ID in your own browser so a conversation can continue; using “Start fresh” removes that local history.
If you tap a microphone button, your browser or operating-system speech service converts audio to text. Michai sends the resulting transcript—not a raw browser microphone recording—to Kira. Your browser or platform provider may separately process audio under its own terms.
If Michai enables Kira for telephone calls, those calls use Telnyx speech processing. Call speech may be transcribed, and Michai may retain the transcript, caller number, call identifiers, Kira response, and follow-up details as an inquiry record. The call will disclose the use of AI and transcription before collecting a response. If you do not want a call transcribed, end the call and use the contact form instead.
Your choices and rights
You can request a copy of the information we have on you, ask us to correct or delete it, withdraw optional cookie consent, unsubscribe from marketing email, or object to certain processing through the studio contact page.
Depending on where you live, applicable law may also provide rights to access, portability, restriction, appeal, or opt out of targeted advertising. We verify requests when necessary and respond within the period required by applicable law. Authorized agents may submit requests where local law permits.
How we protect data
We use encrypted transport, restricted production credentials, access controls, vendor security features, monitoring, and data-minimization practices appropriate to the service. No online system is risk-free, so please avoid sending information the site does not need.
Retention
We retain inquiry and operational records only for as long as reasonably necessary to respond, maintain business records, prevent abuse, and meet legal obligations. Newsletter records remain active until you unsubscribe; a minimal suppression record may remain so we continue honoring that choice. Client data follows the governing agreement and applicable law. Browser-resident Kira history remains until you reset it or clear site storage.
Children and international processing
michaimedia.com is not directed at children under 13. We do not knowingly collect information from children.
Michai is based in the United States. Providers may process information in the United States or other locations where they operate, subject to their safeguards and applicable transfer rules.
Contact and updates
Questions, requests, and complaints can be submitted through the studio contact page.
Mailing address: Nebula CoWorking, 3407 S. Jefferson Ave, St. Louis, MO 63118, USA.
We may update this policy as the site, vendors, or legal requirements change. The updated date above shows the latest revision.
