Privacy Notice

Last updated: July 2025

1. Our Privacy Philosophy

At muto, we believe in transparency and trust. Your data belongs to you, and we're committed to handling it responsibly. We don't sell, trade, or exploit your data for profit - that's not how we do business.

2. Information We Collect

We collect only the information necessary to provide our SaaS services effectively:

  • Account Information: Name, email, and billing details for our SaaS products
  • Usage Data: How you use our services to help us improve functionality
  • Support Information: Communications when you contact us for help
  • Website Analytics: Basic usage statistics to improve our website

3. How We Use Your Information

We use your information to:

  • Provide and improve our SaaS services (smallCRM and future products)
  • Respond to your support requests and inquiries
  • Send important service updates and security notifications
  • Analyze usage patterns to build better features
  • Process payments and manage your subscription

4. What We Don't Do

We believe in being clear about what we don't do with your data:

  • We don't sell your personal information to third parties
  • We don't use your data for targeted advertising
  • We don't share your data with marketing companies
  • We don't track you across other websites
  • We don't use your data to create user profiles for sale

5. Data Security and Storage

We implement industry-standard security measures to protect your data:

  • Encryption in transit and at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Secure hosting infrastructure

6. Data Ownership and Control

Your data belongs to you. You can:

  • Export your data at any time
  • Request deletion of your account and data
  • Update or correct your information
  • Opt-out of non-essential communications
  • Cancel your subscription without data retention

7. Third-Party Services

We use a limited number of trusted third-party services for essential functions like payment processing and hosting. These services are bound by strict data protection agreements and cannot use your data for their own purposes.

8. Data Retention

We retain your data only as long as necessary to provide our services. When you cancel your account, we delete your data within 30 days, unless you request immediate deletion.

9. GDPR Compliance (EU Users)

If you're located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your data based on:

  • Contract: To provide our SaaS services as agreed
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For optional communications and analytics (you can withdraw at any time)

Your GDPR Rights

You have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for optional processing

Data Transfers

If we transfer your data outside the EU, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Other appropriate safeguards

Data Protection Officer

For GDPR-related inquiries, you can contact us directly. We're committed to responding to all GDPR requests within 30 days.

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we haven't handled your data properly.

10. Changes to This Notice

We may update this privacy notice as our services evolve. We'll notify you of significant changes and maintain our commitment to transparency and data protection.

11. Contact Us

We believe in open communication about privacy. If you have questions about how we handle your data or want to exercise your GDPR rights, please contact us. We're committed to being transparent and responsive to your privacy concerns.