# [Privacy Policy](https://trymumm.com/trust/privacy)

_Last updated: 2026-10-07_

What we collect when you use Mumm, why we collect it, who else sees it, how long we keep it, and what you can ask us to do with it.

## Who we are

Mumm Labs, LLC operates the Mumm service. Contact privacy@trymumm.com for privacy questions and company contact details.

## What information we collect

- Account info (name, email, phone)
- Submission content (descriptions, photos, documents you send us)
- Communications we exchange on your behalf (calls, emails, messages)
- Payment info — handled by Stripe; we do not store card numbers
- Usage data (analytics, device info, IP address)
- Browser extension: when you choose to open Mumm with an item, its name, listed price and page address without query strings or fragments. The extension reads the selected page only when you open it and does not collect browsing history.

## How we use it

- To negotiate on your behalf (the core service)
- To improve the service (anonymized, aggregated)
- To communicate with you (transactional)
- To prevent fraud and abuse
- To comply with law

## Who we share it with

- Merchants you've authorized us to negotiate with — only data necessary for that negotiation
- Service providers for hosting, communications, payments, analysis and support under contractual data-protection terms; request the current provider list using the contact and notice process at /trust/sub-processors
- Law enforcement only with legal process or to prevent imminent harm
- Never sold to third parties for marketing

## How long we keep it

- Active accounts: as long as the account is active, plus 7 years for tax/legal records
- Communications and negotiation records: 7 years under our record-retention policy
- Documents (medical bills, invoices): 7 years or until deletion request
- Anonymized analytics data: indefinitely

## Your rights

- Access — download all your data
- Correction — fix wrong data
- Deletion — right to be forgotten, with carve-outs for legal/financial records
- Portability — export in machine-readable format
- Opt-out of marketing communications
- CCPA, GDPR, and other jurisdiction-specific rights as applicable

## Children

Mumm is not for users under 18. We do not knowingly collect data from minors. If you believe we have, contact privacy@trymumm.com and we will delete.

## International transfers

Data is processed in the United States. Users elsewhere consent to this transfer when using the service.

## Changes to this policy

Material changes are announced by email and posted here at least 14 days before they take effect.

## Contact

privacy@trymumm.com for privacy questions, data-export requests, deletion requests, or jurisdiction-specific privacy rights.