Privacy Policy

Overview

mmentum Ltd ("mmentum", "we", "us", or "our") operates the mmentum platform — an AI-augmented workspace for strategy teams and consultancies. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, website, and related services (collectively, the "Service").

We are committed to protecting your privacy and the privacy of your clients. This policy is written in plain language and applies to all users of the Service, including firm administrators, consultants, operators, and client portal users.

Data We Collect

Account information

When you register, we collect your name, email address, password (hashed), firm name, and role. For team accounts, firm administrators may invite additional users whose names and emails we also process.

Workspace and project data

This includes documents you upload (PDFs, spreadsheets, presentations, text files), AI-generated analyses, execution timelines, exported deliverables, and any notes or comments created within the platform.

Usage data

We collect anonymised usage metrics including pages visited, features accessed, session duration, and device/browser information. This data is used exclusively for product improvement and is never linked to individual client project content.

Payment information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or banking details on our servers. We receive only transaction confirmation, billing address, and plan details from Stripe.

How We Use Data

• To provide, maintain, and improve the Service
• To authenticate users and enforce access controls
• To process documents through AI analysis pipelines at your request
• To generate deliverables (timelines, exports, reports) as part of platform features
• To send transactional emails (account verification, password resets, billing receipts)
• To provide customer support when you contact us
• To detect and prevent fraud, abuse, or security incidents
• To send product updates and feature announcements (with opt-out)

AI Data Processing

When you use AI-powered features (framework analysis, sparring partner, document summarisation), your content is transmitted to third-party AI model providers for processing. We enforce the following protections:

• Zero-retention: AI providers are contractually prohibited from storing, logging, or training on your data beyond the immediate processing request.
• Minimum context: We transmit only the minimum document context required for the specific analysis. Full documents are not sent when partial context suffices.
• Tenant isolation: AI-generated results are stored exclusively within your firm's tenant and are not accessible to any other account.
• No model training: Your documents, analyses, and client data are never used to train, fine-tune, or improve any AI model.

Data Sharing

We do not sell your data. We share data only in the following limited circumstances:

• Service providers: Cloud hosting (Supabase, Vercel), payment processing (Stripe), AI model providers — all bound by data processing agreements.
• Legal obligations: When required by applicable law, regulation, or valid legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to affected users.

Data Retention

We retain your account data for as long as your account is active. When you delete a workspace, all associated documents, analyses, and exports are permanently removed within 30 days. When you close your account, all personal data and firm data is purged within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

Your Rights

Under GDPR and applicable data protection legislation, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request that we limit processing of your data.

To exercise any of these rights, contact us at privacy@mmentum.me. We respond to all legitimate requests within 30 days.

Cookies

We use essential cookies for authentication and session management. We use optional analytics cookies to understand product usage (with consent). For full details, see our Cookie Policy.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

Contact

For questions or concerns about this policy or our data practices, contact our Data Protection Officer:

Email: privacy@mmentum.me
Address: mmentum Ltd, London, United Kingdom