Log inSign up with Google

Privacy Policy

Last updated: March 15, 2026

Overview

Midstream AI (“Midstream,” “we,” “us,” or “our”) provides a data analytics platform that connects your business tools and lets you query your data through natural language in Slack. We are committed to protecting your privacy and handling your data responsibly.

Information We Collect

Account information: Your name, email address, and company name when you sign up via Google OAuth.

Business data: Data from third-party platforms you connect (e.g., Shopify), accessed only through authorized OAuth connections that you initiate. This includes order data, product data, and customer metrics. We deliberately exclude personally identifiable customer information (such as email addresses and physical addresses) from our analytics layer.

Usage data: Questions you ask through Slack, feature usage, and basic service analytics to improve performance and reliability.

Business rules: Any custom rules or context you provide to improve the relevance of your analytics (e.g., “We consider orders over $200 as high-value”).

How We Use Your Information

  • To provide, maintain, and improve the Midstream AI service.
  • To sync, model, and prepare your business data so you can query it through Slack.
  • To respond to your natural language questions and deliver analytics.
  • To communicate with you about your account and service updates.

What We Don't Do

  • We do not sell your personal information or business data to third parties.
  • We do not use your data for advertising or marketing purposes.
  • We do not share your data with other customers. Each customer's data is logically separated at the database level — no customer can access another customer's data under any circumstances.
  • We do not access your connected accounts beyond the permissions you explicitly grant.
  • We do not train AI models on your business data. Your data is used solely to answer your questions within your own account.

Data Storage and Security

Your data is stored securely on Google Cloud Platform infrastructure in the United States (us-central1 region). We protect your data with:

  • Encryption in transit (TLS) and at rest.
  • OAuth 2.0 for all third-party integrations.
  • Customer-level data isolation enforced at the database level through authorized views and row-level security policies.
  • Encrypted storage of all API credentials and tokens.
  • Access to production systems limited to Midstream engineering staff for troubleshooting purposes only.

Third-Party Services

We integrate with third-party platforms (such as Shopify and Slack) at your direction. Each integration uses OAuth 2.0 and only accesses the data scopes you authorize. We also use the following infrastructure providers to process and store data:

  • Google Cloud Platform — data storage, compute, and AI services
  • Airbyte — data synchronization
  • dbt Cloud — data transformation

These providers maintain their own privacy policies and security certifications.

AI and Data Processing

Midstream uses Google's Gemini AI to interpret your natural language questions and generate database queries against your business data. Your questions and the resulting answers are processed in real time and are not used to train or improve any AI models. The AI only has access to your data through the same security-filtered views that enforce customer isolation.

Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 30 days of your request. You may request deletion of your data at any time by contacting us at hello@midstream.work.

Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your data.
  • Disconnect any third-party integration at any time.
  • Request export of your data.

To exercise any of these rights, contact us at hello@midstream.work.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at hello@midstream.work.

European Privacy Rights (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. Our lawful basis for processing your data is the performance of our contract with you. To exercise your GDPR rights, contact us at hello@midstream.work.

International Data Transfers

Your data is stored and processed in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using Midstream, you consent to this transfer. We rely on Google Cloud Platform's data protection measures for international transfers.

Children's Privacy

Midstream AI is a business analytics service and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through the service. Continued use of Midstream AI after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or your data, contact us at hello@midstream.work.