Privacy Policy.

This Privacy Policy explains how Mule Digital Group LLC ("Mule") handles information when you describe a project, answer our questions, use our site chat or contact form, call, text, or message us, place an order, and use our client portal, and how our website handles visitor data. Mule is the controller of that information. It is part of, and incorporated into, the Terms of Service.

For any privacy question or request, contact info@mule-digital.com, or call or text +1 734 564 3118 (WhatsApp also works).

Our quote request at /get-started asks for a short description of your business and what you want built, in your own words, then a few follow-up questions, then your name and email, and optionally your business name and phone number. Your description and the question-and-answer transcript together are your brief. We save your brief and your contact details when you send the request on the last step.

Your description is sent to a third-party AI provider so we can ask you useful follow-up questions. Specifically, it is sent to Anthropic's Claude models through the Vercel AI Gateway, which may run those models on Anthropic's own infrastructure or on Amazon Bedrock or Google Cloud Vertex AI. The model reads it, writes a short read-back of what you need, and suggests the follow-up questions we show you. The model does not price your project; a person at Mule reads your request and writes your quote. But the model does read your words, and your words leave our systems to reach it. Under the commercial terms of these providers, text sent through their APIs is not used to train their models, and we rely on that; Vercel routes the request and does not use it for its own purposes.

If you would rather not use the AI-assisted quote request or chat, email info@mule-digital.com or call or text +1 734 564 3118, and a person will scope your project with you.

The quote request and the site chat are places to describe a business, not places for private records. Please do not type in customer names, patient or health information, card or bank numbers, government ID numbers, or passwords. If you do, what you type in your description or in the chat is sent to the AI provider, and what you type in the quote request is stored with your brief, because our system cannot tell the difference.

When you send the request, we store your brief, the AI read-back, your contact details, and the technical details described in section 5, and we copy your brief, your answers, and your contact details into our own internal CRM as a sales lead, where a person on our team reads it. We email a copy to our own inbox and send you a receipt with a link to set up a portal account, valid for 90 days; if you use it, your request becomes the first message in your portal thread. That is how we follow up with you and build what you asked for.

So what you type is not thrown away, and it is not read only by a machine. A person at Mule will read it, and we may email, call, or text you about it using the contact details you gave us. Calls with us, and voicemails you leave, may be recorded and transcribed, and our CRM uses AI providers, including OpenAI, to transcribe calls and voicemails, suggest what to say during live calls, sort incoming email, draft emails, and help our team summarize and prioritize leads. You can tell us to stop at any time.

Contact and account data: your name, business name, email, phone, and location; your answers to our questions; your order, quote, and payment records; and any logins or access you choose to give us to build, host, or run your Project.

Quote request details: with each request we also record your IP address and your browser's user-agent string, and, if you first reached our site from another site or a tagged link, the referring page, the campaign tags in that link, and the page you first landed on. We keep these for security and to learn which channels bring requests in, and the referral details are also copied into your CRM lead.

Contact forms: the message form on /contact, and the kickoff forms that older payment links lead to, are delivered to us through Formspree, a form service that receives what you enter and passes it to us.

Site chat: the Questions? helper on our pages sends what you type in it, with the rest of that conversation, to Anthropic through the Vercel AI Gateway so it can answer you. We do not save chat conversations to our database or add them to our CRM. We use your IP address only in memory, to limit abuse.

Calls, texts, WhatsApp, and email: if you contact us this way, we receive your phone number or email address and what you send, and we may add it to our CRM. WhatsApp messages are carried by WhatsApp under its own terms.

Website analytics: we may use Google Analytics for how visitors find and use the site (with Google signals and ad personalization turned off), and Vercel Analytics and Speed Insights for page counts and performance. Our own site analytics may record the pages you view, clicks, scrolling, and time on page under a random ID kept in your browser's storage, with your IP address and approximate location, in our CRM. There is no advertising pixel and no cross-site ad retargeting.

Portal usage: if you use portal.mule-digital.com, we process your account (via Clerk), your messages and attachments, your project, subscription, and payment records, and basic sign-in metadata such as IP address and approximate city or region, used for account security.

Acceptance records: when you accept an agreement, we record your typed name, your email, the date and time, your IP address, your browser's user-agent string, the exact checkbox label you were shown, the fact that you affirmatively checked it, and which documents you accepted, with their versions and web addresses, together with a sha256 fingerprint of that document list and checkbox label. We keep this so both of us can prove which version of which document you agreed to, even after it is later revised.

If you are a client and you connect your Google account in our portal, we ask for read-only access to your Google Search Console and your Google Analytics. Read-only means we can read your search and traffic data and nothing else: we cannot change anything, we cannot post anything, and we cannot see your email, your files, or anything else in your Google account. Access tokens are stored encrypted.

We use that access for exactly one thing: to produce the analytics you see in your portal. We do not sell it, share it, use it for advertising, use it to train any model, or combine it with anyone else's data. If Google's rules on this ever conflict with this paragraph, Google's rules win and we follow them.

You can disconnect at any time from your portal, or revoke our access directly in your Google account settings. When you do, we stop pulling the data and delete the copy we hold within 30 days.

We never sell your information, never rent it, and never hand it to advertisers.

We share it only with the service providers we use to run the business and build your Project, which are currently: Anthropic's Claude models, through the Vercel AI Gateway, which may run them on Anthropic, Amazon Bedrock, or Google Cloud Vertex AI (reading the description in your quote request, answering the site chat, and the AI tools in the portal); OpenAI (transcribing calls and voicemail, suggesting what to say during live calls, sorting incoming email, drafting emails, and helping our team summarize and prioritize leads in our CRM); Retell AI and ElevenLabs (automated AI voice calls from our CRM); Mapbox (mapping business addresses in our CRM); Vercel (hosting, analytics, and the AI Gateway); Formspree (our contact and kickoff forms); Stripe (payments and subscription billing); Google (email via Workspace, Google Analytics, and, if you connect them, read-only Search Console and Analytics); Supabase and Neon (databases, including the CRM your brief lands in); Clerk (portal sign-in); Upstash (rate limiting in the portal); Resend (transactional email); and Twilio (phone calls, call recording, live call transcription, voicemail, and text messages). They act on our instructions and receive only what they need. Beyond that, we share only when you tell us to, or when the law requires it.

Any credentials you give us are treated as confidential. We use them only to do the work and do not pass them outside Mule except to the subprocessors needed to run your Project. We use reasonable technical and organizational safeguards to protect your information, though no method of transmission or storage is perfectly secure and we cannot guarantee absolute security. If you no longer want us to have access to something, revoke it and tell us.

RETENTION. We keep your brief, transcript, and lead record for as long as you are a customer or a live prospect, and afterward for as long as we need it for tax, accounting, and legal reasons. Payment and invoice records are kept for up to seven years because tax law requires it.

YOUR RIGHTS. You can ask what we hold about you, correct it, get a copy of it, or have it deleted. Email info@mule-digital.com and we will handle it within 30 days. Deletion covers your brief and your transcript; it cannot cover records we are legally required to keep, such as invoices, or the acceptance record itself, which is the evidence of a contract between us. Depending on where you live, you may have additional rights under your local law, and you may object to marketing at any time.

COOKIES AND SIMILAR TECHNOLOGIES. Our website sets one cookie of its own, mule_attr, the first time you arrive from another site or a tagged link. It records where you came from (the referring page, any campaign tags, and the page you landed on), lasts 90 days, and is read when you send a quote request. Your light or dark theme choice, and the random visitor ID used by our own site analytics, are kept in your browser's storage, not in a cookie. Google Analytics sets its own analytics cookies, and the portal uses sign-in cookies from Clerk. We do not use advertising or cross-site tracking cookies.

CHILDREN. Our services are directed to businesses and are not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If a minor submits data to us directly, we will delete it on request.

UPDATES. If this Policy changes meaningfully, we will update the version and the last-updated date shown on this page and, where appropriate, give notice.