Back to MAMA

Privacy Policy

Last updated: April 19, 2026

1. Introduction

MAMA ("we", "us", or "our") is an AI-powered Chief of Staff platform operated by OliWoods HQ. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use MAMA and its associated services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

  • Account Information: Your full name and email address when you join the waitlist or create an account.
  • Contact Information: Phone number (optional), used for SMS or WhatsApp briefings if you opt in.
  • Usage Data: How you interact with MAMA — features used, commands issued, agent packs installed, session duration, and error logs.
  • Integration Data: With your explicit consent, data from connected tools (Gmail, Google Calendar, Asana, Slack, HubSpot, Notion, etc.) that MAMA reads to power your daily brief and automations.
  • Referral Data: Referral codes and referral chain information when you invite others.
  • Device & Technical Data: IP address, browser type, operating system, and general location (country/region) for security and analytics.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Service
  • Deliver your personalized daily brief and run automations on your behalf
  • Send transactional emails (waitlist status, approval notifications, account updates)
  • Analyze usage patterns to improve performance and add features
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

We do not use your data to train AI models without your explicit consent.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share data only with:

  • Supabase — our database and authentication provider. Data is stored in Supabase-managed PostgreSQL infrastructure. See Supabase's Privacy Policy.
  • Anthropic — we use Anthropic's Claude API to power MAMA's AI reasoning and natural language processing. Prompts and relevant context may be sent to Anthropic's API. See Anthropic's Privacy Policy. Anthropic does not train on API data by default.
  • Slack Technologies — if you connect Slack, messages are sent and received through the Slack API.
  • Email Providers — Resend or similar transactional email providers for sending notifications.
  • Infrastructure Providers — Railway (hosting), Cloudflare (CDN/DNS). These providers process data as part of service delivery.
  • Legal Requirements — we may disclose information if required by law, subpoena, or to protect our rights.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Waitlist entries are retained until you request deletion or 24 months of inactivity. Integration-sourced data (emails, calendar events, etc.) is processed transiently and not stored beyond what is needed to generate your brief.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request deletion of your personal data ("right to be forgotten")
  • Export — receive your data in a portable, machine-readable format
  • Objection — object to certain types of processing
  • Withdrawal of Consent — withdraw consent for any processing based on consent at any time

To exercise any of these rights, email us at privacy@oliwoods.ai. We will respond within 30 days.

7. Cookies & Local Storage

MAMA uses browser localStorage to store your authentication token and email address on your device for session management. We do not use third-party tracking cookies.

8. Security

We implement industry-standard security measures including HTTPS encryption in transit, HMAC-based authentication tokens, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@oliwoods.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

For questions, concerns, or to exercise your rights, contact us at:

OliWoods HQ
privacy@oliwoods.ai
matt@oliwoods.ai