Data usage
What data Multilo uses, where it goes, and how long it is kept: AI requests, product-improvement collection, telemetry, cookies, device records, email, and your rights.
This page explains, in plain words, what data Multilo uses, where it goes, and how long it is kept. It summarizes the privacy policy, which is the full and authoritative version. For how Multilo protects your work, see security.
How your data flows
What stays on your computer
Your projects are folders on your own computer. Your documents, your library, your notes and data, the search index, version history, and agent memory all live there. Opening, editing, searching, and reading happen on your device and don’t send your files anywhere.
What happens when you use AI
When you use chat, an agent, or an inline suggestion, Multilo needs an AI model, and the model runs in the cloud:
- The app gathers what the request needs — your message, the relevant part of your document, and the sources the agent pulled in.
- It sends that over an encrypted (HTTPS) connection to Multilo’s servers, which pass it to the AI provider for the model you’re using: OpenAI, Anthropic, or Google.
- The reply comes back the same way, and the app applies it to your document.
Only what the request needs is sent — not your whole project. To use AI features, you first agree to the terms, the privacy policy, and AI processing; Multilo won’t process AI requests until you have.
For billing, Multilo’s servers record how much AI work each request did — the model, the number of tokens, and the cost in credits — not what the request said. Detailed usage records are kept for about 60 days.
Data policies
Training and AI providers
The AI provider handles each request under its own terms for business API customers. The privacy policy says Multilo instructs providers not to keep content for training where the provider offers that control. Multilo does not sell your content or use it for advertising.
Product-improvement collection
Separately from anonymous telemetry, Multilo can collect the content of your chat messages and the text sent for inline suggestions, tied to your account, to understand what people ask for, fix failures, and improve its features. You control it:
- Turn it off any time in the desktop app under Settings → Data Controls. When it’s off, no chat or suggestion content is collected for improvement.
- Collected content is deleted after about 30 days.
- It is removed straight away if you delete your account.
- Some plans, such as enterprise plans, are excluded by default.
Data retention
| Data | How long it is kept |
|---|---|
| Your project files | On your computer, for as long as you keep them |
| Account details | Until you delete your account |
| Detailed AI usage records (model, tokens, cost) | About 60 days |
| Product-improvement content | About 30 days; removed when you delete your account |
| Desktop telemetry events | 90 days; daily totals with no per-device data are kept longer |
| Connected-device records | Removed after 180 days without activity |
| Billing records | Several years, as the law requires |
The privacy policy lists every category.
Telemetry from the desktop app
Telemetry tells us how the app is used and where it breaks, without identifying you. You choose the level in the desktop app under Settings → Privacy:
- Standard only (recommended) — anonymous counts of which features are used, and how fast and reliably they work;
- Standard + crash diagnostics;
- No telemetry.
Telemetry is tied to an anonymous device ID, not your account. It never includes your document content, file names, project paths, AI prompts, AI replies, chat messages, or your email address. Raw events are deleted after 90 days. The telemetry page lists exactly what is sent.
The website and cookies
On multilo.com, analytics and advertising tools — Google Analytics, Meta Pixel, and Microsoft Clarity — run only after you choose Accept in the cookie banner. Until then, Google Tag Manager loads with every kind of consent set to “denied”. Your choice is remembered in a cookie for one year. See the cookie policy.
Account and device records
Your account holds your name, email address, plan, and billing details (payments are handled by Stripe). For each desktop device you connect, Multilo keeps the device’s country, its app details, its network (IP) address, and when it was last seen. This powers the Where you’re signed in list and helps protect your account from suspicious sign-ins. Records for a device that hasn’t been used for 180 days are removed. See authentication.
- Marketing email is opt-in only: the box is never ticked for you, and you confirm by email.
- Every marketing email has a one-click unsubscribe.
- Multilo records whether an email was delivered, opened, and clicked. You can turn off open and click records on your email preferences page.
Your choices and rights
Depending on where you live, you have the right to access, correct, delete, and take a copy of your data, to restrict how it is used, to withdraw consent, and to complain to a regulator. The privacy policy explains each right and how to use it, including for California and other US states. Multilo is not directed to children under 13.
Export and deletion
- Your work: your projects are already files on your computer — copy the folder to keep or move them.
- Download my data (on multilo.com, Settings → Your data) gives you a copy of the email and contact data Multilo holds about you.
- Delete my account (same place) takes effect straight away: it cancels any subscription and removes your account data, including devices, usage records, and product-improvement content. A security log is kept for up to a year, and a “do not contact” record is kept so you are never emailed again. Your project files on your computer are not touched.