Skip to content

TRUST & POLICIES

Privacy Policy

Last updated: October 7, 2026

What we collect when you use Mumm, why we collect it, who else sees it, how long we keep it, and what you can ask us to do with it.

On this page
  1. Who we are
  2. What information we collect
  3. How we use it
  4. Who we share it with
  5. How long we keep it
  6. Your rights
  7. Children
  8. International transfers
  9. Changes to this policy
  10. Contact

Who we are

Mumm Labs, LLC operates the Mumm service. Contact privacy@trymumm.com for privacy questions and company contact details.

What information we collect

  • Account info (name, email, phone)
  • Submission content (descriptions, photos, documents you send us)
  • Communications we exchange on your behalf (calls, emails, messages)
  • Payment info — handled by Stripe; we do not store card numbers
  • Usage data (analytics, device info, IP address)
  • Browser extension: when you choose to open Mumm with an item, its name, listed price and page address without query strings or fragments. The extension reads the selected page only when you open it and does not collect browsing history.

How we use it

  • To negotiate on your behalf (the core service)
  • To improve the service (anonymized, aggregated)
  • To communicate with you (transactional)
  • To prevent fraud and abuse
  • To comply with law

Who we share it with

  • Merchants you've authorized us to negotiate with — only data necessary for that negotiation
  • Service providers for hosting, communications, payments, analysis and support under contractual data-protection terms; request the current provider list using the contact and notice process at /trust/sub-processors
  • Law enforcement only with legal process or to prevent imminent harm
  • Never sold to third parties for marketing

How long we keep it

  • Active accounts: as long as the account is active, plus 7 years for tax/legal records
  • Communications and negotiation records: 7 years under our record-retention policy
  • Documents (medical bills, invoices): 7 years or until deletion request
  • Anonymized analytics data: indefinitely

Your rights

  • Access — download all your data
  • Correction — fix wrong data
  • Deletion — right to be forgotten, with carve-outs for legal/financial records
  • Portability — export in machine-readable format
  • Opt-out of marketing communications
  • CCPA, GDPR, and other jurisdiction-specific rights as applicable

Children

Mumm is not for users under 18. We do not knowingly collect data from minors. If you believe we have, contact privacy@trymumm.com and we will delete.

International transfers

Data is processed in the United States. Users elsewhere consent to this transfer when using the service.

Changes to this policy

Material changes are announced by email and posted here at least 14 days before they take effect.

Contact

privacy@trymumm.com for privacy questions, data-export requests, deletion requests, or jurisdiction-specific privacy rights.