Privacy Policy
Last updated: this is a first-draft template — see the note at the bottom.
What we collect
When you use Mucho Gusto, we collect:
- Account information — your name, email address, role/title, and an optional bio.
- Video content — the short intro videos you record, plus their auto-generated transcript, summary, topics, and a vector embedding used for recommendations.
- Watch behavior — which videos you watch, when, and whether you finished them.
- Invitation data — if an admin or your organization's directory sync invites you, we hold your name, email, and invitation status until you join.
Why we collect it
We use this data to run the core product: showing you and your teammates each other's intro videos, matching you with relevant people and content, generating summaries and recommendations, and moderating content for safety. We do not use your data for advertising, and we do not sell it (see CCPA rights below).
How long we keep it
If you delete your account, your data is soft-deleted immediately — it stops appearing anywhere in the product right away — and permanently erased within 30 days. You can request deletion any time from Account settings.
Your rights
Under GDPR (if you're in the EU/EEA), you have the right to:
- Access and export your data — available today from Account settings.
- Request erasure of your data — available today from Account settings.
- Lodge a complaint with your local data protection supervisory authority.
Under CCPA (if you're a California resident), you have the right to:
- Know what personal information we collect (see above).
- Delete your personal information — available today from Account settings.
- Opt out of the sale of your personal information — we don't sell personal information, to anyone, ever.
Who we share data with
We use the following subprocessors to run the product. None of them are permitted to use your data for their own purposes.
- Clerk — authentication and identity.
- Neon — primary database hosting (Postgres).
- Upstash / Redis — caching and background job queueing.
- Mux — video upload, storage, and playback.
- Anthropic (Claude) — video summary and topic generation.
- Voyage AI — text embeddings for recommendations/matching.
- Stripe — billing and payment processing.
- Slack — optional workspace notifications and directory sync, if your org connects it.
- Google Workspace — optional directory sync, if your org connects it.
- Resend — transactional email (invitations).
International data transfers
Our subprocessors host data in the United States and other regions where they operate infrastructure. If you're located outside those regions, your data may be transferred internationally to provide the service.
Contact us
Questions about this policy or your data: [email protected].
This page is a solid first-draft technical and policy foundation, not a substitute for review by a lawyer before public launch. The controls it describes (export, erasure, retention) are real and live in the product today; the wording above still needs legal sign-off.