Privacy Policy

1. Who we are

Mujaz is operated by Mujaz LLC, a company registered in Wyoming, United States, at 30 N Gould St Ste R, Sheridan, WY 82801. For anything in this policy, write to us at [email protected]

2. Two kinds of personal information

The distinction matters, because our responsibilities differ.

3. What we collect

From you

• Account details: name, email address, password (stored hashed, never in readable form)
• Workspace settings: your publication's name, branding, sending address and postal address
• Billing details: handled by our payment provider — we never see or store your full card number
• Technical records: IP address, browser, country and sign-in times, kept to protect accounts and to detect abuse
• How you use the app: which areas you open (for example the editor or your subscribers) and for how long, counted only while you are active. We use it to improve Mujaz and to offer help when someone seems stuck. It never includes what you write, and it is deleted after 90 days
• Anything you write to us in support requests
• When you accept analytics cookies on our website: anonymous counts of visits and pages, through Google Analytics (see the Cookie Policy).

From your subscribers

• The email address they gave you, and any name or preferences they supplied
• Whether a message was delivered, opened, or a link in it was clicked
• Whether they unsubscribed, bounced, or reported a message as spam
• The IP address and time of their subscription, which is the record of their consent

4. Why we use it, and on what basis

Under the GDPR we must have a lawful basis for each use. Ours are these.

• To provide the service you signed up for — performance of our contract with you
• To bill you and keep financial records — contract, and our legal obligations
• To keep the platform secure and prevent abuse of our sending domain — our legitimate interests, and the interests of every other publisher and recipient
• To answer your support requests — contract and legitimate interests
• To send you product news, where you have asked for it — consent, which you may withdraw at any time

5. Who we share it with

We do not sell, rent or trade personal information, and we never have. We share it with service providers who make the platform work, each acting under contract and only to the extent their job requires: cloud hosting and database providers, an email delivery provider, a payment provider, and providers of security, anti-abuse and error-monitoring services. We also disclose information where the law requires it, or to protect the rights and safety of our users and the public.

6. Where it is stored

Mujaz runs on infrastructure in the United States, and personal information is processed there. If you or your subscribers are in the European Economic Area or the United Kingdom, this means your information is transferred outside it. We rely on the European Commission's Standard Contractual Clauses with our providers to protect those transfers.

7. How long we keep it

• Account information: while your account is open, and for 30 days after you close it
• Subscriber lists and content: while your account is open. Deleting a subscriber removes them immediately; deleting your workspace removes them within 30 days
• Delivery and engagement records: 90 days, after which only aggregate counts remain
• Suppression records (unsubscribes, bounces, spam reports): kept indefinitely, because forgetting them would mean emailing someone who asked us not to
• Billing records: seven years, as tax law requires
• Security and abuse records: up to 12 months

8. Your rights

If you are in the EEA or the UK, you have the right to ask for a copy of your personal information, to correct it, to have it deleted, to receive it in a portable form, to restrict or object to how we use it, and to withdraw consent where we rely on it. Write to the address in section 1 and we will answer within 30 days. You are also entitled to complain to your national data protection authority. Wherever you live, you may exercise these rights — we do not distinguish by geography. If you are a subscriber to a newsletter rather than a Mujaz customer, contact the publisher who holds your data; we will help them respond.

9. Security

Passwords are hashed, traffic is encrypted in transit, access to production data is limited to those who need it, and sending is monitored for abuse. Mujaz staff may view account-level statistics — subscriber counts, open and click rates, delivery health — to run the service, provide support, prevent abuse and improve the product. They do not look at individual readers or unpublished content unless you ask us for help or we are investigating abuse, and those views are logged. No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal information we will tell you and the relevant authority without undue delay, and within 72 hours of becoming aware where the law requires it.

10. Children

Mujaz is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, write to us and we will delete it.

11. Changes to this policy

When this policy changes we update the date at the top. If a change materially affects your rights we will tell you by email before it takes effect, rather than expecting you to re-read the page.

12. Contact

Questions, requests and complaints about this policy all go to [email protected]