Privacy Policy

Overview

mmentum Ltd ("mmentum", "we", "us", or "our") operates the mmentum platform — an AI-augmented workspace for strategy teams and consultancies. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, website, and related services (collectively, the "Service").

We are committed to protecting your privacy and the privacy of your clients. This policy is written in plain language and applies to all users of the Service, including firm administrators, consultants, operators, and client portal users.

Data We Collect

Account information

When you register, we collect your name, email address, password (hashed), firm name, and role. For team accounts, firm administrators may invite additional users whose names and emails we also process.

Workspace and project data

This includes documents you upload (PDFs, spreadsheets, presentations, text files), AI-generated analyses, execution timelines, exported deliverables, and any notes or comments created within the platform.

Usage data

We collect anonymised usage metrics including pages visited, features accessed, session duration, and device/browser information. This data is used exclusively for product improvement and is never linked to individual client project content.

Payment information

Payment processing is handled entirely by our payment processor. We do not store credit card numbers or banking details on our servers. We receive only transaction confirmation, billing address, and plan details.

How We Use Data

• To provide, maintain, and improve the Service
• To authenticate users and enforce access controls
• To process documents through AI analysis pipelines at your request
• To generate deliverables (timelines, exports, reports) as part of platform features
• To send transactional emails (account verification, password resets, billing receipts)
• To distribute newsletters and content updates you have subscribed to (with opt-out)
• To publish content to connected social media platforms at the direction of authorised team members
• To measure content performance and website usage through analytics services
• To provide customer support when you contact us
• To detect and prevent fraud, abuse, or security incidents
• To send product updates and feature announcements (with opt-out)

AI Data Processing

When you use AI-powered features (framework analysis, sparring partner, document summarisation), your content is transmitted to third-party AI model providers for processing. We enforce the following protections:

• Zero-retention: AI providers are contractually prohibited from storing, logging, or training on your data beyond the immediate processing request.
• Minimum context: We transmit only the minimum document context required for the specific analysis. Full documents are not sent when partial context suffices.
• Tenant isolation: AI-generated results are stored exclusively within your firm's tenant and are not accessible to any other account.
• No model training: Your documents, analyses, and client data are never used to train, fine-tune, or improve any AI model.

Newsletters & Communications

When you join our waitlist or subscribe to our newsletter, we collect your email address and communication preferences. We use a third-party email delivery service to send newsletters and product updates on our behalf. This provider processes your email address solely for the purpose of delivering messages and is bound by a data processing agreement.

Every newsletter contains a one-click unsubscribe link. You can opt out at any time, and your preference is recorded immediately. Unsubscribed addresses are retained only to honour your opt-out preference and are not used for any other purpose.

Connected Services & Social Media

Authorised team members may connect third-party social media accounts (such as LinkedIn) to the Service for the purpose of publishing approved content. When a connection is established:

• We store an encrypted access token to enable publishing on your behalf. We do not store your social media password.
• We access only the permissions required for content publishing (e.g., posting updates). We do not access your private messages, connections list, or personal activity.
• You may revoke access at any time by disconnecting the account within the Service or revoking permissions directly in the third-party platform's settings.
• Content published via the Service is subject to the third-party platform's own privacy policy and terms of service.

Analytics

We use third-party analytics services to understand how our website and content perform. These services may collect anonymised data such as page views, referral sources, geographic region, device type, and search query performance. This data is used exclusively to improve our content and user experience.

Analytics data is aggregated and cannot be used to identify individual users. Where analytics services set cookies, these are covered by our Cookie Policy.

Data Sharing

We do not sell your data. We share data only in the following limited circumstances:

• Service providers: We work with carefully selected third-party providers for cloud infrastructure, payment processing, email delivery, analytics, and AI services. All providers are bound by data processing agreements and process data only on our instructions.
• Connected platforms: When you authorise a social media connection, approved content is shared with that platform in accordance with your instructions.
• Legal obligations: When required by applicable law, regulation, or valid legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to affected users.

A list of sub-processor categories and their purposes is available on request by contacting privacy@mmentum.me.

Data Retention

We retain your account data for as long as your account is active. When you delete a workspace, all associated documents, analyses, and exports are permanently removed within 30 days. When you close your account, all personal data and firm data is purged within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

Your Rights

Under GDPR and applicable data protection legislation, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request that we limit processing of your data.

To exercise any of these rights, contact us at privacy@mmentum.me. We respond to all legitimate requests within 30 days.

Cookies

We use essential cookies for authentication and session management. We use optional analytics cookies to understand product usage (with consent). For full details, see our Cookie Policy.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

Contact

For questions or concerns about this policy or our data practices, contact our Data Protection Officer:

Email: privacy@mmentum.me

Address: mmentum Ltd, London, United Kingdom