Skip to content

TRUST & POLICIES

Privacy Policy

Last updated: April 15, 2026

This is the structural privacy policy template per the doc-16 spec. Final legal copy is pending counsel review; do not treat the language below as binding until that review completes.

REVIEW REQUIRED. Counsel review of this policy is pending. The structural language below should not be treated as binding until that review is complete.

On this page
  1. Who we are
  2. What information we collect
  3. How we use it
  4. Who we share it with
  5. How long we keep it
  6. Your rights
  7. Children
  8. International transfers
  9. Changes to this policy
  10. Contact

Who we are

Mumm Labs, LLC operates the Mumm service. Mailing address and registered-agent details are in our terms. Privacy questions: privacy@mumm.com.

What information we collect

  • Account info (name, email, phone)
  • Submission content (descriptions, photos, documents you send us)
  • Communications we exchange on your behalf (calls, emails, messages)
  • Payment info — handled by Stripe; we do not store card numbers
  • Usage data (analytics, device info, IP address)

How we use it

  • To negotiate on your behalf (the core service)
  • To improve the service (anonymized, aggregated)
  • To communicate with you (transactional)
  • To prevent fraud and abuse
  • To comply with law

Who we share it with

  • Merchants you've authorized us to negotiate with — only data necessary for that negotiation
  • Service providers (Stripe, Twilio, Resend, Anthropic, Supabase) under contractual data-protection terms
  • Law enforcement only with legal process or to prevent imminent harm
  • Never sold to third parties for marketing

How long we keep it

  • Active accounts: as long as the account is active, plus 7 years for tax/legal records
  • Communications and negotiation records: 7 years (accounting requirement)
  • Documents (medical bills, invoices): 7 years or until deletion request
  • Anonymized analytics data: indefinitely

Your rights

  • Access — download all your data
  • Correction — fix wrong data
  • Deletion — right to be forgotten, with carve-outs for legal/financial records
  • Portability — export in machine-readable format
  • Opt-out of marketing communications
  • CCPA, GDPR, and other jurisdiction-specific rights as applicable

Children

Mumm is not for users under 18. We do not knowingly collect data from minors. If you believe we have, contact privacy@mumm.com and we will delete.

International transfers

Data is processed in the United States. Users elsewhere consent to this transfer when using the service.

Changes to this policy

Material changes are announced by email and posted here at least 14 days before they take effect.

Contact

privacy@mumm.com for privacy questions, data-export requests, deletion requests, or jurisdiction-specific privacy rights.