Last Updated: August 5, 2026
MessageBlue ("we", "us", or "our") operates the MessageBlue website and API service (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of Personal Information when you use our Service.
We collect several different types of information for various purposes to provide and improve our Service to you.
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:
We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
In the course of providing the API service, we process the contents of messages you send ("Message Data"). This data is transiently processed for the purpose of delivery.
MessageBlue uses the collected data for various purposes:
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
MessageBlue may disclose your Personal Data in the good faith belief that such action is necessary to:
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
The following subprocessors may process Personal Data on our behalf in the course of providing the Service. Each is bound by a written agreement requiring appropriate confidentiality and security obligations.
| Subprocessor | Purpose | Data processed |
|---|---|---|
| Cloudflare | Hosting, CDN and DNS | Site requests, IP addresses |
| Google (Tag Manager & Analytics) | Website analytics | Usage data, device and browser information, IP addresses |
| Google Fonts | Web font delivery | IP addresses |
| Sanity | Blog content management | Published editorial content only; no customer or message data |
| Unified.to | Business-application integrations available to AI agents | Data from the third-party accounts a customer chooses to connect — for example CRM records, calendar events, helpdesk tickets or HR records |
| Langfuse | Agent prompt versioning and observability | Agent configuration and conversation traces |
| Model providers selected by the customer (for example OpenAI, Anthropic, Google, Mistral, DeepSeek) | Generating agent replies | Message content and knowledge-base content submitted for inference |
Two points are worth drawing out. First, integrations are opt-in: no data reaches Unified.to unless a customer or one of their end users connects an account, and the agent can only reach what the connected credentials already permit. Second, the model provider that processes message content depends on the model selected for a given agent — if you need inference restricted to a particular provider or region, contact us before deploying.
We will use commercially reasonable efforts to give advance notice of changes to this list. To request notice of updates, write to privacy@messageblue.ai.
If you have any questions about this Privacy Policy, please contact us at privacy@messageblue.ai.