Merlin
Privacy
Who runs this instance ⚑
This instance of Merlin is run by its operator, reachable at the address on the letters it sends. The operator is the controller of the data described here.
What is stored
Your address, a name if you gave one, a photo if you uploaded one, and a hashed password. For every brand: what you recorded about it, every file you uploaded, every piece made and every picture rendered, every publication and its numbers, every proposal Merlin wrote and whether you took it, and a log of what was done and by whom. For every generation: what it cost, as the model's API reported it. Sessions are kept so you can see where you are signed in and end one.
Where
The database is a managed cluster and the files are in object storage, both at DigitalOcean, in the region the operator chose. Nothing is stored in your browser but the session cookie and a few page preferences.
Who else sees any of it
Every third party Merlin sends anything to, and what, and when:
- Anthropic — what a brand has recorded about itself — its voice, offers, documents and results — and the words you type into a brief; to write, draw and read for you; every generation is one request to their API; whenever something is generated on a plan that includes generation; never on Free.
- Meta (Facebook and Instagram) — the picture and the words of a piece you send, and the id of a post you sent, to read back what it did; to publish where you told Merlin to, and to read reach and engagement for what it sent; only for brands you connected to a Page, and only for pieces you sent.
- DigitalOcean — every uploaded file and every rendered picture, in object storage, and the database itself, in a managed cluster; that is where this instance lives; always.
- ElevenLabs — the lines of a storyboard you asked to be read aloud, and the voice you chose; to narrate a film; only when you press Read the lines.
- Unsplash and Pexels — the words of a search for a photograph; to find stock photography; only when you search.
- fal.ai — the description of a picture to be made, and — for a film — a still from your storyboard with its direction; to make a picture nobody took, or turn a still into a clip; every one is a row on the ledger; when a composed slide or a planned piece needs a picture the library and stock do not have, or a film is produced, where the instance has the key.
- OpenAI — the description of a picture to be made, and — for a film — the cast's reference pictures and an approved still, sent as references; to make a picture nobody took, with the same face and the same room across a film's shots; every one is a row on the ledger; when a brand chose OpenAI as its picture maker and a page, a shot or a plan needs a picture, where the instance has the key.
- Voyage AI — passages from a brand's documents, to turn them into numbers that can be compared; so a brand can be asked what it has said about something; when a document is read in, where the instance has the key.
- Google Fonts — the name of a typeface a brand uses, from your browser, not from Merlin; to draw with the face the brand chose; on any page that draws artwork.
- Sentry — an error's backtrace with your account id, the brand and the generation it happened in — never a password, never the words of a brief; so the person running the instance hears when it breaks; when something breaks, where the instance has the key.
- The mail provider the instance runs on — your address, and the letters Merlin sends to it; the password reset, the day's letter, the Sunday letter and the reminder; when a letter is sent.
Nobody else. Merlin has no analytics, no advertising and no tracking of you.
For how long ⚑
As long as the account exists. Deleting the account from Settings removes the address, the name, the photo and the password at once, and every brand it owns with everything in it; what you did on other people's brands stays on those brands, attributed to a removed account. Files in object storage are removed with the record that owned them. Backups of the database are kept by the managed cluster for the period it states, and a deleted account is gone from them when they age out.
Your rights ⚑
You can export every brand you own as a file from the brand's context page, at any time. You can delete the account yourself. For anything else — a copy of what is held about you, a correction — write to the operator at the address above.