Privacy Policy

The short version

MXMINI is software you use to run your business. There are two different groups of people in it, and they need different things from this page. If you are an MXMINI customer, we hold your account and everything you put into your workspace. If you are a client of one of our customers, we hold your information on their behalf — they decide what happens to it, and this page tells you how to reach them and us.

We don't sell your data and we don't share it with advertisers. There are no analytics, no trackers and no advertising pixels anywhere in here — not one third-party script on any page. The only cookies we set are the two that keep you signed in, which is why you've never seen a cookie banner on this site.

You can take a copy of everything at any time from Settings, and delete the whole lot permanently from that same screen.

Who we are

MXMINI is operated by Mogul to Mogul Consulting, LLC, a limited liability company formed in Michigan, United States. It is part of the MXOS family of products.

Write to privacy@mogulxos.com about anything on this page. A real person reads it.

If you are our customer

We are the data controller for your own account information. We hold:

• Your name, email address and business name.
• A hash of your password. Never the password itself — we cannot read it, recover it, or tell you what it is.
• Your session records, which include the IP address and browser you signed in from.
• Your billing status and Stripe customer identifier. Card numbers are held by Stripe and never reach our servers.
• Support tickets you send us, and anything you write in them.
• A log of significant actions taken in your workspace, and by whom.

We use it to run the product for you, to take payment, to answer you when you write in, and to keep the account secure. Nothing else.

If you are a client of one of our customers

Your relationship is with the business whose portal you are using — their name is at the top of it. They are the data controller. We are their processor: we hold your information because they asked us to, we act on their instructions, and we do not use it for anything of our own.

What is held about you:

• Identity and contact: your name, email, phone, company and timezone.
• Relationship signals: when you were first added, when you last opened the portal, when you last sent or received a message, how quickly you tend to reply, and a history of the relationship-health score calculated from those things.
• Security records: a hash of your portal password if you set one, failed sign-in counts, lockout times, and session records that include your IP address and browser.
• Content: every message in both directions including full email bodies, your answers to intake and booking forms, the files exchanged and their contents, and invoices and payment records.

The IP addresses and browser details are the ones people are usually surprised by. They are there so an account can be defended against somebody trying to break into it, and they are personal data. We would rather name them here than have you find them later.

To see, correct or delete your information, ask the business you are working with — they can do all three from inside the product, immediately. If you cannot reach them, write to privacy@mogulxos.com and we will help.

Deleting your data

This is a real button, not a promise about a process.

• A customer can delete their entire account from Settings. Every client, project, message, file, invoice and portal goes with it, permanently.
• A customer can erase a single client from that client's own page — record, portal access, messages, files, invoices, quotes and projects.

There is no recycle bin and no grace period. Deleted means the rows are gone from the database and the files are gone from storage. We keep no shadow copy for support purposes, because a deleted record that still exists has not been deleted.

Encrypted database backups are kept by our hosting provider on a rolling window and age out within 30 days. During that window a deleted record may still exist inside a backup image. We do not restore from backups to recover deleted data, and we do not read them.

Records we are separately required to keep — invoices and payment records held for tax and accounting — remain with Stripe under their own retention rules.

How long we keep things

For as long as the account is open. We do not expire or archive your work behind your back; the product is a record of your business and it would be worse than useless if it quietly forgot things.

When an account is deleted, everything in it is destroyed at that moment. Nothing sits waiting for a retention clock to run down.

Who else sees it

The companies below process data on our behalf. Each is bound by its own contract and none of them may use it for their own purposes. The current list is always on the sub-processors page.

We will also disclose information if we are legally required to. If that happens and we are permitted to tell you, we will.

Nobody else. We have never sold or rented data and this product has no business model in which that would make sense.

What we can and cannot see

We have two screens that look across accounts, and this is all they show. The support inbox: the ticket you wrote, your name, and which workspace you were in. And a customer list: your business name, your own name and email, which plan you are on, when you signed up, when you were last here, and how many clients and projects exist in your account.

Counts, not contents. There is no screen showing us your clients' names, your messages, your files or your invoices, and there is no way for us to open your workspace and look around. Knowing that somebody has added four clients is what tells us the product is working; who those four people are is none of our business.

We do hold the database credentials, so in a technical sense we could query it directly. We would rather say that plainly than claim an impossibility that is not true of any hosted software anywhere. What we can say is that there is no feature that does it, every privileged query lives in one reviewable file, and we do not go looking.

Where it is stored

In the United States. If you or your clients are outside the US, using this product means information about you is transferred there and stored there.

Security

Here it is without the jargon. We're happy to go deeper if you or your own client wants the technical version — just ask.

• Your workspace is walled off from every other one, and the wall is built into the database rather than into our code. Even if a piece of our software asked for somebody else's records by mistake, it would get nothing back. (For the curious: PostgreSQL row-level security, with an app account that isn't allowed to switch it off.)
• We can't read your password. It's scrambled before it is stored, in a way that can't be reversed — not by us, not by anybody who stole the file. (argon2id.)
• The same goes for the token that keeps you signed in. If someone walked off with a copy of the database, they still couldn't sign in as you.
• Eight wrong password attempts and the account locks itself for fifteen minutes.
• Uploaded files have a size limit, are restricted to the file types you'd expect, and are served in a way that stops anything running in your browser.
• Everything travels over an encrypted connection.

No system is perfect, and we won't pretend otherwise. If we find a breach that affects your data we'll tell you as soon as we can and within 72 hours of finding out, along with what happened and what we're doing about it.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, take it elsewhere, object to how it is used, or complain to a regulator. We honor these regardless of where you live, because operating two standards would be more work than the better one.

Access and portability are self-serve: Settings, then Download everything. It is one file containing every client, project, message, file and invoice. Deletion is self-serve too. For anything else, write to privacy@mogulxos.com and we will respond within 30 days.

We will never charge you for making a request or treat you differently for having made one.

Children

This is business software and it is not intended for anyone under 18. We do not knowingly collect information about children. If you believe a child's information is in here, write to privacy@mogulxos.com and we will remove it.

Changes

If this policy changes in a way that matters, we will email customers before it takes effect rather than quietly changing the date at the top.

Getting in touch

Anything on this page: privacy@mogulxos.com. Anything else: support@mogulxos.com.

Mogul to Mogul Consulting, LLC, Michigan, United States.