What we collect, why, and who can see it.

Who we are

This policy is issued by Mudanza (“Mudanza”, “we”). This policy covers the mudanza.io website and the Mudanza platform for advisory firms. Questions go to hello@mudanza.io.

What we collect on the website

The website collects the minimum needed to run it. If you write to us, we keep your email and what you sent so we can reply. We do not run advertising trackers and we do not sell or rent visitor data.

Some pages are protected by a passphrase. The passphrase is checked in your browser; the page content is decrypted on your device and nothing about the attempt is sent to us.

What the platform holds

Inside the platform, your firm is the controller of its client data. We process it only to provide the service: client records, meeting notes and transcripts, planning inputs, documents, and the audit trail of who did what and when.

The platform uses firm-scoped access controls to restrict client records to authorized users. Your firm controls account access and the information it provides.

How AI features handle client data

AI features process information through the platform’s model-router architecture, which applies firm policy to provider selection and sensitive information. Ask us to review the providers, data handling, and usage records applicable to your deployment.

We do not use your firm’s client data to train models.

Who we share it with

Only the providers needed to run the service, under contract, and only for that purpose: cloud hosting (Microsoft Azure), identity (Microsoft Entra ID where your firm uses it), and the model providers your firm’s policy allows. We do not share client data with anyone else unless the law requires it.

Text messaging and mobile information

If you provide your mobile phone number and opt in to text messaging from Mudanza, we collect your mobile number and messaging consent status to operate the service. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with subcontractors performing support services on our behalf (such as message delivery), who may use it only for those services. Message and data rates may apply. Message frequency varies. Reply STOP to opt out at any time, HELP for help.

How long we keep it

Platform data is kept for as long as your firm is a customer and for the retention period your firm sets to meet its regulatory obligations. Audit records are append-only and are kept for the period required of the firm. Website correspondence is kept only as long as it is useful.

Your rights

If you are a client of a firm that uses Mudanza, direct requests about your data to that firm; we will support them in responding. If you have written to us directly, you can ask us to see, correct or delete what we hold. Email hello@mudanza.io.

Changes

If this policy changes in a way that matters, we will say so here and, for customers, in writing. The date at the top is the last revision.