# [Privacy Policy](https://trymumm.com/trust/privacy)

_Last updated: 2026-09-10_

What we collect when you use Mumm, why we collect it, who else sees it, how long we keep it, and what you can ask us to do with it.

## Who we are

Mumm Labs, LLC operates the Mumm service. Contact privacy@mumm.com for privacy questions and company contact details.

## What information we collect

- Account info (name, email, phone)
- Submission content (descriptions, photos, documents you send us)
- Communications we exchange on your behalf (calls, emails, messages)
- Payment info — handled by Stripe; we do not store card numbers
- Usage data (analytics, device info, IP address)

## How we use it

- To negotiate on your behalf (the core service)
- To improve the service (anonymized, aggregated)
- To communicate with you (transactional)
- To prevent fraud and abuse
- To comply with law

## Who we share it with

- Merchants you've authorized us to negotiate with — only data necessary for that negotiation
- Service providers (Stripe, Twilio, Resend, Anthropic, Supabase) under contractual data-protection terms
- Law enforcement only with legal process or to prevent imminent harm
- Never sold to third parties for marketing

## How long we keep it

- Active accounts: as long as the account is active, plus 7 years for tax/legal records
- Communications and negotiation records: 7 years under our record-retention policy
- Documents (medical bills, invoices): 7 years or until deletion request
- Anonymized analytics data: indefinitely

## Your rights

- Access — download all your data
- Correction — fix wrong data
- Deletion — right to be forgotten, with carve-outs for legal/financial records
- Portability — export in machine-readable format
- Opt-out of marketing communications
- CCPA, GDPR, and other jurisdiction-specific rights as applicable

## Children

Mumm is not for users under 18. We do not knowingly collect data from minors. If you believe we have, contact privacy@mumm.com and we will delete.

## International transfers

Data is processed in the United States. Users elsewhere consent to this transfer when using the service.

## Changes to this policy

Material changes are announced by email and posted here at least 14 days before they take effect.

## Contact

privacy@mumm.com for privacy questions, data-export requests, deletion requests, or jurisdiction-specific privacy rights.