Privacy policy

This Privacy Policy explains how 16x9 Inc. ("16x9," "we," "us," or "our"), operator of the Mycel platform, collects, uses, discloses, retains, and protects information when you visit 16x9.ai, contact us, or sign in to any product or service we operate (together, the "Services"). By using the Services you agree to this Policy.

Who we are

16x9 Inc. is the data controller for personal information processed through the Services. For privacy questions, contact us at info@16x9.ai.

Information we collect

We collect the following categories of information:

• Contact and form data. Name, work email, company, role, phone (optional), and the message or context you submit through contact, audit, or newsletter forms.
• Google sign-in data. If you sign in with Google, we receive your name, email address, Google account ID, profile picture URL, and language/locale from your Google profile. We do not receive your Google password. This applies to Mycel, 16x9's deal-making platform, which uses Google Sign-In for authentication.
• Google Workspace directory information (read-only). For organizations that connect Google Workspace, Mycel may access read-only user and customer directory information (such as teammates' names and email addresses) to help administrators manage workspace membership. Mycel does not modify directory data and does not access Gmail, Google Calendar, Google Drive, or Google Chat.
• Connection data. When you connect Google or other supported services, we store encrypted access and refresh tokens to maintain your connection.
• Usage data. IP address, browser type, device type, operating system, referring URL, pages viewed, and timestamps, collected through cookies and server logs.
• Campaign data. UTM parameters and referrer data captured when you arrive from a campaign.

How we use Google sign-in data

When you sign in with Google, we use the profile information Google returns solely to:

• Display your name and profile picture inside the product interface.
• Send transactional communications related to your account (for example, security notices or requested audit materials).
• Read Google Workspace directory information (read-only) to help administrators manage workspace membership and suggest colleagues to invite.

16x9.ai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising, we do not sell it, we do not transfer it to third parties except as necessary to provide or improve the Services, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users, and we do not allow humans to read it unless we have your affirmative agreement, it is required for security purposes, to comply with law, or the data is aggregated and used for internal operations in accordance with applicable rules.

General uses of information

We also use information to:

• Provide, operate, secure, and improve the Services.
• Respond to inquiries and schedule audits or meetings.
• Send transactional messages and, with your consent, marketing communications you can unsubscribe from at any time.
• Measure site and campaign performance using analytics tools you have consented to.

Cookies

We use essential cookies to run the site and optional analytics, advertising-measurement, and personalization cookies that only load with your consent. You can change your choice at any time using the cookie preferences available on this site.

How we share information

We share information with:

• Service providers that host our infrastructure, send email, process forms, schedule meetings, and provide analytics, under contracts that restrict their use of the data.
• Identity providers such as Google, to complete sign-in when you choose that option.
• Authorities when we reasonably believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the Services.
• Successors in a merger, acquisition, or sale of assets, with notice to affected users.

We do not sell personal data.

Data retention

We retain personal information only for as long as necessary to provide the Services, meet the purposes described in this Policy, and comply with our legal obligations. Contact-form submissions are retained for up to 24 months unless you request earlier deletion. Account data tied to Google sign-in is retained while your account is active and deleted within 30 days of account deletion, except where longer retention is required by law. Upon a deletion request emailed to info@16x9.ai, we remove your account data, including stored OAuth tokens and cached third-party data, within 30 days, except where longer retention is required by law.

Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, restricted access, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

Your rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. To exercise any of these rights, including revoking access previously granted to Google sign-in, email info@16x9.ai. You can also revoke 16x9.ai's access to your Google account at any time at myaccount.google.com/permissions.

International transfers

We and our service providers may process personal information in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this Policy from time to time. Material changes will be posted on this page with a new effective date.

Contact

Questions about this policy or requests regarding your data can be sent to info@16x9.ai.