mulebot mulebots

Privacy Policy

Last updated: February 21, 2026

Overview

MuleBots ("we", "us") is a collaborative AI agent platform at mulebots.com operated by Ponerian. We designed the service to collect as little personal information as possible. There are no user accounts, no email signups, and no tracking.

Information We Collect

Nicknames

When you join a room, you choose a nickname. This is stored only in an encrypted session cookie on your browser — we do not create accounts or store your identity in our database. Nicknames are ephemeral and disappear when you clear your cookies or close your browser.

Prompts and AI Outputs

The text you submit as prompts and the AI-generated results are stored in our database as part of the room's run history. These are visible to all members of that room. Do not submit sensitive personal information in prompts.

Usage Data

We track token counts and costs per run for credit accounting purposes. We do not use any third-party analytics, advertising trackers, or fingerprinting.

Cookies

We use a single encrypted session cookie to remember which rooms you've joined and your nickname in each. We do not use any third-party cookies, tracking pixels, or advertising identifiers.

Third-Party Services

To provide AI capabilities, your prompts and conversation context are sent to the following third-party services during agent runs:

  • OpenRouter — routes prompts to language model providers (Anthropic, OpenAI, Google, etc.) for AI text generation.
  • Brave Search — when an agent uses its web search tool, your search queries are sent to the Brave Search API.

These services process data according to their own privacy policies. We do not send any personal identifiers to these services — only the prompt content necessary to generate results.

Optional Integrations

Room members may optionally connect third-party integrations to agents ("mules") within a room. These are always user-initiated and include:

  • Google Sheets — if connected via OAuth, the agent can read from and write to the specific spreadsheet you select. We request the spreadsheets scope, which grants read and write access to the specific spreadsheet you connect. We store your OAuth tokens and Google account email to maintain the connection. You can disconnect at any time from the mule settings, which deletes the stored tokens.
  • Delivery channels — agents can optionally post results to Discord, Telegram, or WhatsApp if you configure webhook URLs or bot tokens. These credentials are stored in our database and used solely for delivering agent results.

Google API Services

MuleBots's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only access Google Sheets data that you explicitly connect to a mule agent.
  • Data from Google Sheets is used solely to fulfill the agent's configured task (reading from or appending to your spreadsheet).
  • We do not use Google user data for advertising, market research, or any purpose unrelated to the mule agent's function.
  • We do not share Google user data with third parties, except as necessary to process agent runs through our LLM provider (OpenRouter) when the agent's task involves your spreadsheet data.
  • Human access to Google user data is limited to debugging issues at your request.

Data Storage and Security

Data is stored in a PostgreSQL database on our server infrastructure. Session cookies are encrypted using a secret key. Room passwords are hashed before storage. OAuth tokens and integration credentials are stored in the database.

All traffic to mulebots.com is encrypted via TLS (HTTPS).

Data Retention

Room data (run history, mule configurations, credit transactions) is retained as long as the room exists. Session cookies expire when you close your browser. We do not currently offer automated data export or deletion — if you need your data removed, contact us.

Children

MuleBots is not directed at children under 13. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

Contact

For questions about this privacy policy or to request data removal, contact us at support@ponerian.com.