AI-drafted, pending attorney review. Not legal advice.
What Mule collects, why, where it goes, and what you can do about it. What you type into the box on the homepage is sent to an AI provider to work out your scope, stored, and read by a human on the sales team. Mule never sells your data.
This Privacy Policy explains how Mule Digital Group LLC ("Mule") handles information when you describe a project, answer our questions, place an order, and use our client portal, and how our website handles visitor data. Mule is the controller of that information. It is part of, and incorporated into, the Terms of Service.
For any privacy question or request, contact info@mule-digital.com, or reach us on WhatsApp at +1 734 564 3118.
Our homepage has a box where you describe your business and what you want built, in your own words. We then ask follow-up questions and you answer them. That free text, and the whole question-and-answer transcript, is your brief. We store an anonymous brief and the interview transcript even before you give us contact details, so that a session you start and walk away from is still captured.
Your brief is sent to a third-party AI provider so it can be scoped. Specifically, it is sent to Anthropic, routed through the Vercel AI Gateway. Anthropic's model reads what you wrote and sorts it into our fixed price list. The model never sets a price; our own code does that. But the model does read your words, and your words leave our systems to reach it. Anthropic's commercial terms state that text sent through their API is not used to train their models, and we rely on that; Vercel routes the request and does not use it for its own purposes.
If you do not want your description leaving our systems, do not use the box. Email info@mule-digital.com and a person will scope your project with you instead.
The box is a place to describe a business, not a place for private records. Please do not type in customer names, patient or health information, card or bank numbers, government ID numbers, or passwords. If you do, it will be sent to the AI provider along with the rest of your description, and stored with your brief, because our system cannot tell the difference.
We store your brief, the transcript, the scope we worked out from it, and your quote, and we load all of it into our own internal CRM as a sales lead, where a person on our team reads it. That is how we follow up with you and build what you asked for.
So what you type is not thrown away after the quote, and it is not read only by a machine. A person at Mule will read it, and we may email or call you about it using the contact details you gave us. You can tell us to stop at any time.
Contact and account data: your name, business name, email, phone, and location; your answers to our questions; your order, quote, and payment records; and any logins or access you choose to give us to build, host, or run your Project.
Website analytics: we use Google Analytics for how visitors find and use the site, and Vercel Analytics and Speed Insights for page counts and performance. There is no advertising pixel and no cross-site ad retargeting.
Portal usage: if you use portal.mule-digital.com, we process your account (via Clerk), your messages and attachments, your project, subscription, and payment records, and basic sign-in metadata such as IP address and approximate city or region, used for account security.
Acceptance records: when you accept an agreement, we record your typed name, your email, the date and time, your IP address, your browser's user-agent string, the exact checkbox label you were shown, the fact that you affirmatively checked it, and a sha256 hash of the exact text of each document you accepted, with its version. We keep this so both of us can prove which version of which document you agreed to, even after it is later revised.
If you are a client and you connect your Google account in our portal, we ask for read-only access to your Google Search Console and your Google Analytics. Read-only means we can read your search and traffic data and nothing else: we cannot change anything, we cannot post anything, and we cannot see your email, your files, or anything else in your Google account. Access tokens are stored encrypted.
We use that access for exactly one thing: to produce the analytics you see in your portal. We do not sell it, share it, use it for advertising, use it to train any model, or combine it with anyone else's data. If Google's rules on this ever conflict with this paragraph, Google's rules win and we follow them.
You can disconnect at any time from your portal, or revoke our access directly in your Google account settings. When you do, we stop pulling the data and delete the copy we hold within 30 days.
We never sell your information, never rent it, and never hand it to advertisers.
We share it only with the subprocessors we need to run the business and build your Project: Anthropic (AI scoping of your brief) via the Vercel AI Gateway; Vercel (hosting, analytics, and the AI Gateway); Stripe (payments and subscription billing); Google (email via Workspace, Google Analytics, and, if you connect them, read-only Search Console and Analytics); Supabase and Neon (databases, including the CRM your brief lands in); Clerk (portal sign-in); Resend (transactional email); and Twilio (messaging where used). They act on our instructions and receive only what they need. Beyond that, we share only when you tell us to, or when the law requires it.
Any credentials you give us are treated as confidential. We use them only to do the work and do not pass them outside Mule except to the subprocessors needed to run your Project. We use reasonable technical and organizational safeguards to protect your information, though no method of transmission or storage is perfectly secure and we cannot guarantee absolute security. If you no longer want us to have access to something, revoke it and tell us.
RETENTION. We keep your brief, transcript, and lead record for as long as you are a customer or a live prospect, and afterward for as long as we need it for tax, accounting, and legal reasons. Payment and invoice records are kept for up to seven years because tax law requires it.
YOUR RIGHTS. You can ask what we hold about you, correct it, get a copy of it, or have it deleted. Email info@mule-digital.com and we will handle it within 30 days. Deletion covers your brief and your transcript; it cannot cover records we are legally required to keep, such as invoices, or the acceptance record itself, which is the evidence of a contract between us. Depending on where you live, you may have additional rights under your local law, and you may object to marketing at any time.
COOKIES. We use first-party functional cookies, such as your light or dark theme choice, plus the analytics cookies our analytics tools set. We do not use advertising or cross-site tracking cookies.
CHILDREN. Our services are directed to businesses and are not intended for children under 18. We do not knowingly collect personal information from anyone under 18. Where the Mule Students program involves minors, enrollment is designed to be completed by a parent or guardian, and we will delete data a minor submits directly on request.
UPDATES. If this Policy changes meaningfully, we will update the version and effective date shown on this page and, where appropriate, give notice.
