Privacy Policy
Privacy Policy (Draft for legal review)
Controller: OliWoods LLC (“MAMA”)
Contact: privacy@oliwoods.ai
Last updated: August 5, 2026
Status: Consolidated draft for counsel. Merge with any prior HTML Privacy Policy language your counsel already approved; resolve conflicts in favor of counsel’s final text.
1. Scope
This policy describes how we collect, use, share, and protect personal data when you use mama.oliwoods.ai, the MAMA dashboard, Slack/Asana-connected features, waitlist, marketplace, and related services.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, org name, auth identifiers | You / IdP |
| Billing | Plan, invoices, payment status (card data via Stripe) | You / Stripe |
| Workspace | Slack/Asana IDs, connected workspace metadata | Integrations you authorize |
| Content | Prompts, tasks, messages you send to MAMA | You |
| Usage | API calls, pack installs, cost metrics, feature usage | Automated |
| Device / security | IP, user agent, approximate geo for login risk | Automated |
| Support | Emails to privacy@ / support | You |
3. How we use data
- Provide and improve MAMA (orchestration, packs, billing, support)
- Authenticate users and protect accounts (including unusual-login checks)
- Comply with law and enforce Terms
- Communicate product and security notices
We do not sell personal information. We do not use public-site advertising cookies (see Cookie Policy).
4. Legal bases (GDPR)
Contract performance; legitimate interests (security, product improvement); consent where required (e.g. certain cookies/marketing); legal obligation.
5. Sharing
| Recipient | Why |
|---|---|
| Supabase | Auth & database |
| Stripe | Payments |
| LLM providers | Inference per your routing/privacy settings |
| Slack / Asana / HubSpot / Gmail | Features you connect via OAuth |
| Advisors / counsel | Legitimate need |
|---|---|
| Authorities | When legally required |
6. International transfers
Data may be processed in the United States and other countries. Safeguards: contracts / SCCs as applicable — counsel to finalize.
7. Retention
Kept only as long as needed for the purposes above, then deleted or anonymized, subject to legal holds. Exact schedules — counsel to set.
8. Security
See /security. No method is 100% secure.
9. Your rights
Depending on location (GDPR, CCPA/CPRA, etc.): access, correction, deletion, portability, restriction, objection, opt-out of “sale/share” (we do not sell). Email privacy@oliwoods.ai. You may appeal denials as required by law.
10. Children
Not directed to children under 16 (or higher local age).
11. Changes
We post updates with a new “Last updated” date. Material changes may be notified by email or in-product notice.