Privacy Policy — Mubyn
Mubyn

Privacy Policy

Last updated: February 16, 2026

1. Introduction

Mubyn, operated by C. Monkey Tribe SARL ("we," "us," or "our"), operates the Mubyn platform at mubyn.com and app.mubyn.com. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered business operating system.

By using Mubyn, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name and email address
  • Business name, industry, and country
  • Password (stored as a bcrypt hash — we never see your plaintext password)
  • Business logo (if uploaded)

2.2 Integration Data

When you connect third-party services, we access:

  • Shopify: Products, orders, customers, inventory, and analytics data from your store
  • Meta (Facebook/Instagram): Ad campaigns, ad sets, ads, performance metrics, and audience insights
  • Google Ads: Campaign data, keywords, ad performance, and conversion metrics
  • WhatsApp Business: Customer messages sent through the WhatsApp Business API channel
  • Email (Google/SMTP): OAuth tokens for sending emails on your behalf; we do not read your personal inbox

2.3 Usage Data

We automatically collect:

  • Pages visited and features used within the Mubyn dashboard
  • Caesar Chat conversations (used to improve AI responses for your business)
  • Content generated through our AI tools
  • Device type, browser, and IP address

2.4 Customer Support Data

If you use the Mubyn CS Agent, we process:

  • Customer messages received via widget, email, Telegram, or WhatsApp
  • Knowledge base entries you create
  • AI-generated responses sent to your customers

3. How We Use Your Information

  • Provide and operate the Mubyn platform and its modules (Leads, Marketing, Finance, Support, Content, Website)
  • Process your data through AI models to generate insights, content, leads, and financial analysis
  • Send emails and messages on your behalf through connected integrations
  • Improve our AI models and platform features
  • Communicate with you about your account, updates, and support
  • Detect and prevent fraud, abuse, and security incidents

4. AI Processing

Mubyn uses artificial intelligence to power its features. Your business data is processed by:

  • OpenAI: For Caesar Chat conversations, content generation, lead generation, financial analysis, and website building
  • Google Gemini: For image generation (marketing visuals, website images)

Data sent to AI providers is processed according to their respective data processing agreements. We use API-level access which means your data is not used to train their models.

5. Data Storage and Security

  • Data is stored on encrypted servers hosted on Railway (US-based infrastructure)
  • Sensitive credentials (OAuth tokens, API keys) are encrypted at rest using AES-256
  • All connections use TLS/HTTPS encryption in transit
  • Passwords are hashed using bcrypt with 12 rounds (OWASP recommended)
  • Multi-tenant isolation ensures your data is never accessible to other users
  • Rate limiting and brute-force protection on authentication endpoints

6. Third-Party Services

We share data with the following service providers:

  • Railway: Application hosting and data storage
  • Cloudflare: CDN, DDoS protection, and DNS
  • OpenAI: AI processing (chat, content, analysis)
  • Resend: Transactional email delivery
  • Zoho: Business email services
  • Shopify, Meta, Google: Only when you explicitly connect these integrations

We do not sell your personal data to third parties. We do not share your data for advertising purposes.

7. Data Retention

  • Account data is retained while your account is active
  • Upon account deletion request, all personal and business data is deleted within 30 days
  • Integration tokens are revoked immediately upon disconnection
  • Chat conversation history is retained for service improvement unless you request deletion
  • We may retain anonymized, aggregated data for analytics purposes

8. Your Rights

8.1 GDPR Rights (EU/EEA Users)

Under the General Data Protection Regulation, you have the right to:

  • Access your personal data (Article 15)
  • Rectify inaccurate data (Article 16)
  • Erase your data ("right to be forgotten") (Article 17)
  • Restrict processing (Article 18)
  • Data portability — receive your data in a machine-readable format (Article 20)
  • Object to processing (Article 21)

8.2 CCPA Rights (California Users)

Under the California Consumer Privacy Act, you have the right to:

  • Know what personal information is collected and how it is used
  • Delete personal information we hold
  • Opt-out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at privacy@mubyn.com. We will respond within 30 days.

9. Cookies

Mubyn uses essential cookies for authentication and session management. We do not use third-party tracking cookies. See our Cookie Policy for details.

10. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers are located. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable.

11. Children's Privacy

Mubyn is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@mubyn.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of Mubyn after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries: