1. Who we are
Mud Master is operated by Marc A. McMahon (sole proprietor). For privacy matters we are the data controller of the personal data we collect about you. Contact: marc@mudmaster.app.
2. What data we collect and why
| Category | Examples | Why we use it | Legal basis |
|---|---|---|---|
| Account data | Name, email, password (hashed), role (foreman / finisher), crew assignment | Create and maintain your account, sign you in, route you to the right dashboard | Contract performance |
| Service content | Voice clips, photos, transcripts, pour data, blockers, materials | Provide the Service: deliver reports to your foreman, generate daily PDFs | Contract performance |
| Usage / telemetry | Pages visited, features used, error logs, device + browser info, IP address | Security, fraud prevention, debugging, product improvement | Legitimate interests |
| Support | Messages you send us | Respond to support requests | Legitimate interests |
| Marketing | Email address (only if you opt in) | Send product updates and tips | Consent |
Mud Master is currently free to use during beta. We do not collect or process payment information.
3. Who we share data with
- Service providers (subprocessors): hosting and database (Supabase / Lovable Cloud), AI transcription and reasoning (OpenAI / Google), email delivery, error monitoring.
- Professional advisers: our legal and accounting advisers, where strictly necessary.
- Professional advisers: our legal and accounting advisers, where strictly necessary.
- Authorities: where we're legally required to share data with regulators or law enforcement.
We do not sell your personal data.
4. How long we keep data
We keep account data while your account is active and for a reasonable period afterward to comply with legal and tax obligations. Service content (pour reports, voice, photos) is kept while your account is active and deleted within 90 days of account closure unless we're legally required to keep it longer. You can request earlier deletion at any time.
5. Your rights
Depending on where you live, you have the right to access, correct, delete, restrict, or port your personal data; to object to processing based on legitimate interests; and to withdraw consent at any time. UK / EEA users also have the right to lodge a complaint with their supervisory authority. We respond to verified requests within 30 days.
To exercise any right, email marc@mudmaster.app.
6. International transfers
Our service providers may process data in the United States or other countries outside your home jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Security
We use industry-standard technical and organizational measures — encryption in transit, encrypted storage, access controls, audited infrastructure — to protect your data. No system is perfectly secure, but we treat data protection as a first-class concern.
8. Cookies
We use only essential cookies needed to keep you signed in and to remember session state. We don't currently use marketing or third-party tracking cookies. If that ever changes, we'll update this notice and provide a cookie-consent banner.
9. Changes to this notice
We may update this notice from time to time. Material changes will be announced in-app or by email. The "Last updated" date at the top always reflects the current version.