Privacy Policy | Mally

This Privacy Policy explains how Mally ("we", "us", or "our") collects, uses, and protects information when you use our website at mally.io and any associated services.

1. Information we collect

Account information: When you apply for or create an account, we collect your name, email address, company name, and payment information (processed securely via Stripe — we never store card details).

Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used to operate and improve the platform.

Contact form submissions: When you submit an inquiry form, we store the information you provide to respond to your enquiry and scope your project.

Agency deployments: Each agency receives a dedicated deployment with its own database. Subscriber data belonging to an agency's clients is stored in that deployment and is not accessible to Mally except for infrastructure maintenance purposes.

2. How we use your information

To provision and operate your Mally deployment
To process payments and send invoices
To respond to support requests and inquiries
To send service-related communications (account activation, licence keys, maintenance notices)
To improve the platform based on aggregate usage patterns

We do not sell your data. We do not use your data for advertising purposes.

3. Data sharing

We share data only with third-party service providers necessary to operate the platform:

Stripe — payment processing
AWS — infrastructure hosting
Telnyx — SMS delivery

Each provider operates under their own privacy policy and data processing terms.

4. Data retention

We retain account data for the duration of the subscription plus 90 days after cancellation, at which point it is permanently deleted unless legal requirements require longer retention.

5. Security

All data is transmitted over HTTPS. Databases are encrypted at rest. Access to production systems is restricted to authorised Mally personnel only. We conduct regular security reviews.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at privacy@mally.io.

7. Cookies

We use only essential cookies necessary for authentication and session management. We do not use tracking or advertising cookies.

8. Changes to this policy

We may update this policy periodically. Material changes will be communicated via email to registered users at least 14 days before they take effect.

9. Contact

For privacy questions or requests: privacy@mally.io