Privacy policy

1. Shoppers

When you finish an order with a business that uses Munja (a “merchant”), the merchant sends us your name and email, and order details it chooses, such as the service, a date or a ZIP code. We use the order details only to pick which offers to show you.

• Stored: your name, email and ZIP code, encrypted (AES-256-GCM), so we can pass them on if you choose an offer. Other order details are not stored.
• Not stored: phone numbers. If a merchant sends one, we discard it.
• Shared: nothing, unless you choose an offer. Then your name and email go to that one company (a “partner”), through its Munja dashboard or a signed connection to its own systems. The line next to the button says exactly this.
• Proof of your choice: the words you saw, the time, your browser type, and one-way hashes of your email and network address.
• Not done: no third-party cookies, no tracking across websites, no selling of personal information, and no sharing for cross-context behavioral advertising.

2. Businesses on Munja

We collect your account details (name, business, email, team members), sign-in and security records, usage data needed to run the service, and billing and payout details. Stripe handles card, bank and identity verification details; we do not see full card or bank account numbers.

3. Why we use information

To run Munja: pick and show offers, record choices, deliver leads, bill partners, pay merchants, prevent fraud and abuse, keep the service secure, provide support, and meet legal obligations. We do not use shopper information to build advertising profiles.

4. How long we keep it

• You did not choose an offer: your name, email and ZIP code are deleted when the offer link expires, 24 hours after a page showed it or 30 days after an email did.
• You chose an offer: the copy held for showing offers is deleted right away. The lead copy of your name and email stays in the partner's Munja account while that account is open, or until you ask us to delete it.
• Proof of your choice: 5 years, so consent can be checked.
• Records of which offers were shown (order ID, page address, a hash of your email, why each offer was picked): 12 months, then deleted. If you chose an offer, we keep only what we need for billing, refunds and your consent record, and delete the order ID, page address, email hash and match details.
• Business account and billing records: while the account is open, and after that only as long as needed for tax, accounting, fraud prevention and legal obligations.

5. Your rights

Email privacy@getmunja.com to know what we hold about you, get a copy, correct it, or delete it. Deleting removes your contact details from every lead on Munja and stops future offers to you. A partner that already received your details keeps its own copy; ask it directly too. We will verify your request using your email address, answer within 45 days, and not treat you differently for using your rights. You may use an authorized agent.

California. Under the California Consumer Privacy Act, you have the rights above. Munja does not sell or share personal information as those terms are defined there. When you choose an offer, your name and email go to that partner because you directed it.

Illinois and biometrics. Munja does not collect biometric identifiers or biometric information, such as fingerprints, face geometry or voiceprints, as defined in the Illinois Biometric Information Privacy Act.

6. Children

Munja is not directed to children. Business accounts are for people 18 and older, and offers are meant for adults. We do not knowingly collect information from children under 13. If you believe we have, email privacy@getmunja.com and we will delete it.

7. Security and breach notification

Shopper contact details are encrypted at rest, connections use HTTPS, business accounts can use two-factor sign-in, and admin actions are logged. No system is perfectly secure. If a security breach affects your personal information, we will notify affected businesses and, where the law requires, affected people and authorities, without unreasonable delay and as required by law, including the Illinois Personal Information Protection Act.

8. Who helps us run Munja

Our hosting provider, Supabase (database), Stripe (payments and payouts) and Resend (email). They handle data only to provide their service to us. Ask privacy@getmunja.com for the hosting provider’s name. Data is stored in the United States. See the Data Processing Terms.

9. Changes

We will post changes here and update the date below. If a change materially affects how we use information already collected, we will notify affected businesses first.

Contact

Munja Companies LLC, [COMPANY ADDRESS], privacy@getmunja.com