Privacy
Policy.

1. Information we collect

Depending on how you use Mumin, we may collect information you provide directly, including your name, email address, phone number, business name, project details, appointment preferences, account credentials, authentication-provider identifiers when you choose a third-party sign-in option, messages, message-read status, and links or files associated with a project.

We may also collect limited technical information needed to operate and protect the site, such as page visits, referral source, device category, timestamps, and security or rate-limit information. We do not need precise location data for the normal operation of this website.

2. How we use information

• Respond to project requests and communicate with prospective and current clients.
• Create and operate client accounts and the business dashboard.
• Schedule, confirm, reschedule, cancel, and remind users about appointments.
• Provide project messages, status updates, and shared project links.
• Protect the website against abuse, spam, fraud, and unauthorized access.
• Understand first-party website usage and improve the user experience.
• Meet legal, accounting, security, or business-record obligations where applicable.

3. Mumin AI

Mumin AI is designed to answer many common Mumin, account, service, project-flow, appointment, privacy, and simple-math questions locally without sending them to a live external AI model. When a question requires broader live-AI capability, the message and limited recent conversation context may be sent to the AI provider configured by Mumin, currently through OpenRouter when enabled.

Do not submit passwords, payment-card information, government identifiers, medical records, or other highly sensitive information to Mumin AI.

4. Service providers

Mumin may use service providers to operate the website and business systems. These may include Netlify for hosting, serverless functions, and data storage; Resend or another configured provider for transactional email; Google Identity Services when a user chooses Continue with Google; and OpenRouter or another configured AI provider for live-AI responses. These providers process information under their own terms and privacy practices.

When Continue with Google is enabled, Mumin receives the account information Google includes in the verified sign-in token, such as your Google account identifier, email address, verification state, name, and potentially profile image. Mumin does not receive your Google password.

5. Cookies and local storage

Mumin uses an essential sign-in cookie to keep authenticated users signed in. The site may also use browser storage for limited interface state, session identifiers, project drafts, message drafts, and a small retry queue for messages composed while your device is offline. If you enable browser notifications, your browser may also store that permission preference. We do not use this website to sell advertising profiles or run behavioral-advertising cookies.

6. Sharing and sale of information

Mumin does not sell your personal information. We may share information with service providers that help us operate the site and business, with professional advisers when reasonably necessary, or when required by law, court order, or a valid legal process. We may also disclose information when reasonably necessary to protect Mumin, our users, or others from fraud, abuse, or security threats.

7. Retention

We keep information only as long as reasonably necessary for the purposes described in this policy, including operating client accounts, managing projects, maintaining business records, resolving disputes, enforcing agreements, and meeting legal obligations. Deleting a client login does not necessarily delete all project or business records associated with that account.

8. Security

We use reasonable administrative and technical safeguards, including password hashing, signed session cookies, rate limits, and restricted business-dashboard access. No internet service can guarantee absolute security, so you should use a unique password and avoid sending highly sensitive information unless specifically requested through an appropriate secure process.

9. Your choices and requests

You may update certain account information in the client portal, change your password, or delete your client login. You may also contact Mumin to request access, correction, deletion, or other privacy rights that apply to you under applicable law. Some information may need to be retained where legally or operationally required.

10. Children

The Mumin business website and client portal are not directed to children under 13, and we do not knowingly seek personal information from children under 13.

11. Changes to this policy

We may update this Privacy Policy as the website, providers, or business practices change. The effective date at the top of this page identifies the current version.

12. Contact

For privacy questions or requests, contact Mumin LLC through the website’s project/contact flow or another official Mumin business contact channel provided to you.