MDML Technologies — Privacy Policy

Effective: 2026.05.13

This Privacy Policy explains what data MDML Technologies LLC ("MDML") collects, how we use it, and your choices.

1. What We Collect

Account information: email, business name, optional owner name, phone, address.
Payment information: handled by Stripe. MDML never sees full card numbers; Stripe stores them under PCI-DSS compliance.
Site data: business website URL, scraped content (markdown, services, hours, photos) we cache to render template previews.
Usage: bandwidth, function invocations, page views — for billing and performance.
Sign-in: Supabase Auth manages your password (hashed) and session.
Logs: standard server logs (IP, user agent, request path) for security and debugging.

2. How We Use It

Provide and operate the Service.
Generate template previews and customizations.
Bill you correctly.
Send transactional emails (welcome, payment failures, security alerts) via Resend.
Prevent abuse, fraud, and ToS violations.
Comply with legal obligations.

We do not sell your personal information.

3. Third Parties

We share data with these service providers only as needed to operate the Service:

Stripe — payments, payouts, billing.
Supabase — database, authentication, file storage.
Vercel — hosting and CDN.
Resend — transactional email delivery.
Firecrawl — public-website scraping when you import a site.
NVIDIA NIM — LLM-based extraction of public-site content.

Each is bound by their own privacy policy and contractual data-protection terms.

4. Your Rights

Access / Correct / Delete: email hello@mdmltechnologies.com to request a copy of your data, corrections, or deletion. We'll respond within 30 days.
California residents (CCPA): you may request what we collect, request deletion, and opt out of any "sale" (we don't sell, but the right exists).
EU/UK residents (GDPR): you have rights of access, rectification, erasure, restriction, and portability. Our legal basis for processing is performance of the contract (these Terms) and our legitimate interest in operating the Service.

5. Retention

Account and billing data is retained while your account is active and for 7 years after termination (for tax and dispute records). You can request earlier deletion under "Your Rights" above; we'll honor it unless we are legally required to retain.

6. Security

We use industry-standard safeguards: TLS in transit, encryption at rest, scoped service-role keys, signed Stripe webhooks, and least-privilege access. No system is 100% secure; we cannot guarantee absolute protection.

7. Contact

hello@mdmltechnologies.com — MDML Technologies LLC, Florida.