Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains what personal data msng.ai (the “Service”) collects, why, who it is shared with, how long it is kept and what rights you have. It applies to people who create pages on the Service (“owners”) and to people who open those pages (“visitors”). Using the Service is also governed by our Terms and Conditions.

1. Who we are

The Service is operated by Individual Entrepreneur Anton Borzenko (identification number 306474008), Police Lane I N5, floor 2, N4a, Samgori District, Tbilisi, Georgia (“we”, “us”). We are the controller of the personal data described here. You can reach us about anything in this policy at postmaster@msng.ai.

2. What we collect from owners

  • Account data. Your email address. If you sign in with Google, we also receive the name, email address and profile picture of your Google account. We do not use passwords and never see your Google password.
  • Guest drafts. You can start a page before signing in. We then create an anonymous account for your browser so the draft is not lost, and attach it to your real account when you sign in.
  • Page content. Everything you put on a page: its heading and text, the language and country, the buttons and the phone numbers, usernames, email addresses and links behind them. A published page is public by design — anyone with its address can see it and the contact details on it.
  • Security data. The IP address and browser (user agent) of your signed-in sessions, one-time sign-in codes, and short-lived records of page creation and publishing that we use to limit abuse.

3. What we collect from visitors of a page

Page owners see simple statistics: views, clicks, conversion, messengers, countries and traffic sources. To produce them we record, for each view, click and departure from a page:

  • where the visit came from: the referring address, UTM tags, and whether a QR code was scanned;
  • the device and browser: the user agent and what it tells us (device type, operating system, browser, whether it is an in-app browser such as Instagram’s), screen and window size, browser language and time zone;
  • approximate location — country, region and city — worked out from the IP address at the time of the visit, using a geolocation database kept on our own server (DB-IP), so the address is not sent to anyone to look it up;
  • behaviour on the page: which button was clicked and its position, time until the click, scroll depth and the order of clicks.

We do not store visitors’ IP addresses: only a salted one-way hash of it is kept. A random identifier in a cookie lets us tell unique visitors from repeat ones; it is combined with the page owner before it is stored, so the same person visiting two different owners’ pages cannot be linked. Owners never see individual visitors — only totals.

The page itself works without JavaScript; the statistics script is a few hundred bytes of our own code. There are no advertising networks, social media pixels or third-party analytics on pages.

Our own marketing pages (the home page and the pages about each messenger) are measured by the same statistics, without any cookie. To count distinct visitors we combine the IP address and browser with the current date into a one-way hash, which changes every day: it cannot be reversed, and it cannot follow anyone from one day to the next.

4. Cookies

We use only our own cookies, and only for these purposes:

  • Sign-in session (set by our authentication library) — keeps you signed in, and keeps a guest draft attached to your browser. Strictly necessary.
  • msng_locale — remembers the interface language you chose. One year.
  • msng_v — the random visitor identifier described above, used for statistics. One year.
  • msng_own — marks the pages you edit from this browser, so your own visits do not count in your statistics. One year.

You can delete or block cookies in your browser settings. The Service will still work, but you will be signed out and your visits may be counted as new ones.

5. Why we use data, and on what legal basis

  • To provide the Service — accounts, sign-in, storing and publishing your pages, sending sign-in codes. Basis: performance of our contract with you.
  • To give owners statistics about their pages. Basis: our and the owners’ legitimate interest in knowing whether a page works, balanced by the pseudonymisation described in section 3.
  • To keep the Service safe — moderating page content, limiting abuse, preventing fraud, securing accounts. Basis: legitimate interest, and our legal obligations where content is unlawful.
  • To comply with the law and respond to lawful requests from authorities. Basis: legal obligation.

We only email you what the Service needs to (such as sign-in codes). We do not send marketing without your consent, and we do not sell personal data or use it for advertising.

6. Automated moderation

When a page is published or its text changes, its heading, text and website links are checked automatically by an AI model for content our Terms prohibit. The result can be that the page is approved, queued for a person to review, or declined and hidden. A person on our team reviews declined and doubtful pages and can reverse the decision. If you think a decision about your page is wrong, write to postmaster@msng.ai and a person will look at it.

7. Who we share data with

We use service providers who process data on our behalf and under our instructions:

  • Hosting — the server the Service runs on;
  • Resend — delivering sign-in emails;
  • Google — if you choose to sign in with Google;
  • OpenRouter and the AI model provider it routes to — the moderation check in section 6. Only the page’s texts and links are sent, not your account details.

Beyond that we disclose personal data only when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the Service, in which case this policy continues to apply to your data.

Buttons on pages lead to other services — WhatsApp, Telegram, Instagram and others. What happens after you tap one is governed by that service’s own privacy policy, not ours.

8. International transfers

Some of our providers process data outside your country, including outside the European Economic Area. Where that happens we rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses, together with the provider’s own safeguards.

9. How long we keep data

  • Account data and pages — until you delete them or ask us to delete your account.
  • Guest drafts that were never attached to an account — about 30 days after the last use.
  • Expired sessions, used sign-in codes and abuse-limiting records — removed regularly.
  • Visit statistics — 25 months, in pseudonymised form (no IP address, no identifier linkable across owners), then deleted automatically.
  • Longer, where the law requires us to keep something or it is needed to resolve a dispute.

10. Your rights

Depending on where you live, and in particular under the EU and UK GDPR, you have the right to access your personal data, have it corrected, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing relies on consent. To use any of these rights, email postmaster@msng.ai from the address of your account; we may ask you to confirm it is you, and we answer within one month.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work. In Georgia, where we are established, that is the Personal Data Protection Service.

If you are a visitor and want data about your visit removed, tell us which page you visited and roughly when. Because we do not keep IP addresses or identify visitors, we may be unable to find records that relate to you.

11. Children

The Service is not meant for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Security

Data travels over encrypted connections, sign-in uses one-time codes instead of passwords, and access to our systems is restricted. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you and the authorities of a breach where the law requires.

13. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell signed-in owners by email or with a notice in the Service before it takes effect.

14. Contact

Individual Entrepreneur Anton Borzenko (identification number 306474008), Police Lane I N5, floor 2, N4a, Samgori District, Tbilisi, Georgia
Email: postmaster@msng.ai