1. Scope and definitions
This policy applies to MMB's website, onboarding, retention briefs, integrations, and related services.
- Customer means a person or organization using MMB.
- Customer Data means data submitted by a Customer or received through a Customer-authorized integration.
- Personal Data means information that identifies or can reasonably be linked to an individual.
- Service means the MMB platform and related services.
2. Information we collect
- Account information, including name, email address, authentication identifiers, and organization details.
- Customer Data, including product activity, onboarding events, account metadata, team or seat activity, and optional billing context.
- Integration data that a Customer authorizes MMB to access through services such as Stripe, HubSpot, Notion, Google Sheets, Gmail, or Slack.
- Subscription and payment status processed by Stripe. MMB does not store full payment card numbers.
- Technical and security data, including IP address, browser information, request logs, security events, and service diagnostics.
- Information submitted through demo, beta, contact, or teardown forms.
3. Free retention teardown data
Uploaded customer-list rows are parsed and scored for the requested teardown and are not written to the MMB database.
MMB stores only aggregate teardown counts, MRR-at-risk totals when provided, and an optional requester email. Those records are scheduled to expire after seven days. An emailed teardown may contain the account names shown in the result.
4. Customer Data and processing roles
Customers retain ownership of their Customer Data. For Customer Data processed to provide MMB, the Customer generally determines the purpose of processing and MMB acts as a service provider or data processor.
Customers are responsible for having the rights and notices required to provide Customer Data to MMB.
5. How we use information
- Provide, personalize, and maintain the Service.
- Identify potential churn signals and generate retention briefs, alerts, explanations, and recommended actions.
- Send requested authentication, teardown, service, and customer-action emails.
- Protect accounts, investigate abuse, enforce rate limits, and maintain service reliability.
- Respond to support requests and improve product quality.
- Comply with legal obligations and enforce our Terms.
MMB does not sell Customer Data or Personal Data and does not use Customer Data for third-party advertising.
6. Legal bases
Where applicable, MMB processes Personal Data to perform a contract, pursue legitimate interests in operating and securing the Service, comply with legal obligations, and act on consent where consent is required.
7. Service providers and data sharing
MMB shares information only as needed to operate the Service, comply with law, protect rights and safety, or complete a business transaction subject to appropriate safeguards.
Current core providers include Vercel for hosting and delivery, Supabase for database and authentication services, Resend for email delivery, and Stripe for optional billing integrations and MMB payments. A Customer may enable other integrations.
8. Security
MMB uses HTTPS encryption in transit, tenant-scoped server-side access checks, restricted production access, secure authentication cookies, security headers, signed webhook verification, and encryption for stored integration credentials and other designated secrets.
No online service is completely secure. MMB cannot guarantee that unauthorized access or loss will never occur.
9. Data minimization and retention
MMB seeks to collect only information needed to provide and secure the Service. Retention depends on the data type, Customer instructions, legal obligations, security needs, and whether an account remains active.
Customers may request account or Customer Data deletion. Some records may be retained when required for legal, fraud-prevention, backup, or audit purposes.
10. Your choices and rights
- Request access to, correction of, or deletion of Personal Data.
- Disconnect optional integrations.
- Ask questions about processing or object where applicable.
- Request an export of information where applicable.
Submit requests to hello@mondaymorningbrief.com. MMB may need to verify your identity and authority before completing a request.
11. International processing and third-party services
Information may be processed in the United States and other jurisdictions where MMB or its service providers operate. Third-party integrations have their own privacy practices and terms.
12. Children
The Service is intended for businesses and is not directed to children under 13. MMB does not knowingly collect Personal Data directly from children under 13.
13. Changes and contact
MMB may update this policy periodically. Material changes will be posted with an updated effective date.
Questions can be sent to hello@mondaymorningbrief.com.