Last updated 18 September 2026
This page explains how we handle personal information that people share with us: through forms on LinkedIn and other advertising platforms, through mistiai.com, and by email. It is written to be read, not to be skimmed past.
Misti AI is a company registered in the United Kingdom, with offices at 100 Kingsway, North Finchley, London, and operations in Lima, Peru.
For any question about this policy or about your data, write to hello@mistiai.com.
When you submit a form to us, we collect what you type into it. That is normally your name, work email address, job title, company, and your answers to the questions we asked.
We do not collect special category data and we do not ask for it.
To reply to you, to work out whether your operation is a fit for what we do, and to continue that conversation.
Our lawful basis is legitimate interest: you contacted us about a commercial matter and we are responding. Where we send you marketing beyond that, we rely on your consent, and you can withdraw it whenever you want.
We do not sell personal data.
We share it only with the providers that let us operate: our email provider, our customer relationship system, and the advertising platform you used to reach us. They process it on our instructions and nothing else.
If you submitted a form on LinkedIn, LinkedIn also processes that data under its own policy.
We are based in the United Kingdom and operate in Peru and India, so your information may be processed in any of those places and by providers in others. Where data leaves the United Kingdom or the European Economic Area, we rely on appropriate safeguards, including standard contractual clauses.
For as long as the conversation is live, and up to 24 months after it ends. Then we delete it or anonymise it.
You can ask us to:
Write to hello@mistiai.com and we will answer within one month.
If you are in the United Kingdom and our answer does not satisfy you, you can complain to the Information Commissioner's Office at ico.org.uk. Elsewhere, you can complain to your local data protection authority.
This policy covers people who contact us. It does not cover video and operational data we process for a customer at their site.
In that case the customer is the controller and we act as a processor under a separate written agreement, which sets out the purpose, the retention period and the security measures agreed with them.
If this policy changes, the date at the top changes with it.