Privacy Policy

Last updated: October 15, 2026

This policy explains what personal data we process, what we use it for and what your rights are. It applies to the munditeam.com website, the app.munditeam.com portal and all our services.

1. Who is responsible for your data

Mundi Team is the controller of your personal data. For any privacy matter, write to us at contact@munditeam.com.

2. What data we process

• Your account: name, email, language, your business name and the people you add to your project.
• Your project: your messages, requests, comments and files, and everything you share with us, including your conversations with the Help assistant.
• Billing: the details for your receipts or invoices, such as your legal name, billing address and tax ID if you give them to us, plus your payment history. Your card details are received and stored by Stripe; we only see limited data, such as the brand and the last four digits.
• Technical and security: access logs, such as the date, IP address and browser, and the passkeys you create. For a passkey we only store its public key: your fingerprint or face never leaves your device.
• The website: we use no tracking cookies or analytics. We store the language you chose in your browser. To show the fonts and the globe, your browser downloads files from Google Fonts and cdnjs (Cloudflare), which receive your IP address. If you write to us through the form, your own email app opens and we only receive what you send.
• Portal cookies: only the ones needed to keep you signed in and remember your project and language.

We don't ask for sensitive data, such as health data or financial data beyond billing details. Please don't share it in your messages unless your project requires it and we've agreed on it.

3. What we use it for

We use your data for what's needed to provide the service:

• Creating and protecting your account.
• Designing, building and running your project.
• Communicating with you and sending notices about deliveries, messages, proposals, usage alerts and support replies.
• Measuring your project's usage and billing you.
• Supporting you, including through an AI assistant.
• Preventing fraud and abuse, and meeting our legal and tax obligations.

We don't use your data for secondary purposes such as advertising, and we don't sell it. If we ever wanted to use it for something else, we would ask for your permission first.

4. Artificial intelligence

We use AI models from Anthropic (Claude) to work on your project and for the Help assistant. The assistant runs on Anthropic's API, whose commercial terms don't allow it to use your data to train its models. For development work, we have turned off the option that allows our sessions to be used to train models.

5. Who we share your data with

We work with providers that help us deliver the service and only process your data on our behalf and under our instructions:

• Vercel: hosts the website, the portal and projects (United States).
• Supabase: the portal's database and sign-in (United States).
• Stripe: processes payments.
• Resend: sends email notices (United States).
• Zoho: the contact@munditeam.com mailbox (United States).
• Anthropic: AI models (United States).
• GitHub: stores code (United States).
• Porkbun: domain registration, when we register one for your project.
• Other services your project needs, such as databases or messaging. If you ask, we tell you which ones your project uses.

We also share data when the law or a competent authority requires it. We don't sell or rent personal data.

Your data may be stored in the United States or other countries where these providers operate. We require them to keep it secure and confidential, and where the law requires it we rely on the contractual safeguards they offer, such as standard contractual clauses.

6. How long we keep it

• While your account is active.
• If you cancel, your project is paused for 90 days with everything kept. After that we delete the data and shut down the servers, with notices 30, 7 and 1 day before. We only keep a copy of the code, without personal data, which we also delete if you ask.
• Payment records and invoices, for as long as tax law requires (in Mexico, generally five years).
• Security logs, only as long as needed to protect the service.

7. Your rights

You can access, correct or delete your data, or object to its use (in Mexico, the ARCO rights), and you can withdraw your consent and limit how your data is used. If you're in the European Union or the United Kingdom, you also have the right to data portability, to ask us to restrict processing and to lodge a complaint with your data protection authority. There, we process your data to perform our contract with you, to meet legal obligations and for our legitimate interest in keeping the service secure.

How to exercise them: write to contact@munditeam.com from your account's email, with your name and what you need. If needed, we'll ask for something to confirm your identity. We reply within 20 business days at most. Many things you can do yourself in your portal, such as changing your name or language, turning off email notices and downloading your code and data.

If you believe we didn't handle your request properly, in Mexico you can go to the Secretaría Anticorrupción y Buen Gobierno, the personal data protection authority.

8. Security

We protect your data with encrypted connections (HTTPS), permissions that keep each account's data separate, and team access only with a passkey and only for those who need it. We don't use passwords: you sign in with a link, a code or a passkey. No system is infallible; if an incident affects your data, we tell you without delay.

9. Minors

Our service is for people 18 and older. We don't knowingly collect data from minors.

10. Changes to this policy

If we change this policy, we post the new version here with its date. If the change is important, we also email you.