Privacy Policy
What personal data Mushy collects, from the people who use it and from the people who comment on their posts, why, where it goes and how long it is kept.
Current version 1.0 · Effective
Under legal review
About Mushy
Mushy is a social media product made by Mushy Marketing, a brand of EcoEarth Enterprises, Inc., a Delaware corporation based in Austin, Texas (“Mushy”, “we”, “us”). This policy covers mushymarketing.com, the Mushy app, its sign-in pages, its API and MCP servers, and the docs site. Mushy is for business use by people 18 and over.
This is version 1.0, drafted for review. Counsel’s version will replace it before Mushy opens to customers, and this version will stay online.
[Counsel to complete: whether Mushy acts as controller or processor for each kind of data, and the legal bases for processing in each region.]
What we collect
People who use Mushy
- Your account: your name, email address, how you sign in (passkeys, email, Google or Apple), the confirmation that you are 18 or older, and which versions of our documents you accepted and when.
- Your workspaces: the workspaces you belong to, your role in each, the people you invite, and the settings you choose.
- Your sign-in history: each session and sign-in, with the device and browser, and an approximate location worked out from your IP address. Approximate location comes from an IP database that Mushy hosts itself, so your IP address is never sent to anyone to look it up. When the database has no entry, the location shows as Unknown.
- What you make in Mushy: posts, drafts, media, replies, notes, comments to your team, agent tasks and reports, and the activity log of who did what.
- Your connected channels: for each social account you connect, what the network lets Mushy read: your posts and videos and their statistics, your followers and subscribers, and the comments on, replies to, mentions of and quotes of your posts and videos. Network sign-in tokens are sealed in a vault for your workspace; they never appear in logs, in your browser or in anything sent to a model.
- Competitors you track: their public posts, videos and statistics on Instagram, YouTube and X, to compare them with your connected channels. Mushy uses only official APIs and public data, never scraping.
- Billing: your plan, invoices and billing address. Stripe handles payment, so your card details never reach Mushy.
- Support emails: what you write to support@ and our replies.
- Abuse protection: to stop spam and fake accounts, sign-up and checkout keep keyed hashes of the sign-up network address and of a device cookie, and count requests by IP address to limit how many a person can make.
People who comment on customers’ posts
When someone comments on, replies to, mentions or quotes a post from a channel connected to Mushy, Mushy stores what the network shares about it: the comment text, the time, the post it belongs to, and the commenter’s network handle, display name and photo. Mushy also stores the labels it gives the comment, such as a question or a complaint, and any reply the workspace drafts or sends. Commenters don’t have to use Mushy for this to happen, so the section on people who don’t use Mushy explains how they can ask for their data to be deleted.
Product analytics
Mushy keeps its own product events, such as a sign-up or a post being published, to see how Mushy is used. They hold IDs, choices from fixed lists, counts and campaign (UTM) fields only, never content, names, email addresses or IP addresses. Page views on mushymarketing.com are counted the same way, with no cookie and nothing stored in your browser, and nothing is sent when your browser asks not to be tracked (Global Privacy Control or Do Not Track). There are no third-party trackers, advertising pixels or analytics services on the website, in the app or in our emails. After you delete your account, your ID stays in these events only as a pseudonymous count.
Why
- To run Mushy for you: sign you in, keep your workspaces, publish your posts and videos, chart how they do, and help you understand and answer the comments on your own posts and videos.
- To compare with competitors: compare your connected channels with the competitors you track, using their public posts, videos and statistics.
- To keep Mushy safe: tell you about sign-ins from new devices, let you see and end your sessions, and stop spam, fake accounts, card testing and abuse of the networks.
- To bill you: charge for your plan and keep the records tax law requires.
- To support you: answer your emails and fix what goes wrong.
- To improve Mushy: learn from the product events above which features are used, without looking at your content.
Commenters’ data is used only to help the workspace whose post they commented on. It is never shared between workspaces and never used to train models. We don’t sell personal data, and we don’t use it for advertising.
Networks
Each network has its own rules for the data Mushy reads from it. This section says how Mushy follows them.
Mushy uses Google for “Sign in with Google” and to connect YouTube channels. Mushy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Mushy uses Google user data only to provide and improve the features you use it for, never transfers it except as needed to provide those features, for security, or to comply with the law, never uses it for advertising, and never lets a person read it unless you agree, it is needed for security, or the law requires it. Google user data is never used to train models.
YouTube
Mushy uses the YouTube API Services to upload your videos, read their statistics and comments, show you how your channel does, and help you answer comments on your own videos. For competitor channels you track, Mushy reads their public videos and statistics: subscribers (rounded by YouTube) and each video’s views, likes, comments, title, duration and publish time, to compare them with your channel. By connecting YouTube, you agree to the YouTube Terms of Service, and Google’s handling of your data is covered by the Google Privacy Policy.
- Stored YouTube data follows the YouTube API Services refresh or delete rules.
- You can revoke Mushy’s access at any time on Google’s third-party access page, and Mushy honours a revocation at once.
- After a revocation, Mushy deletes the channel’s imported video data, statistics and comments within 7 days if you revoked in Mushy, and within 30 days if you revoked on Google’s side. Videos you made in Mushy stay.
- Scores and rates Mushy works out for YouTube channels are labelled as Mushy’s, not YouTube’s.
- For competitor channels you track, Mushy keeps a rolling 90 days of their videos with only each video’s latest statistics, refreshed daily, never a statistics history older than 30 days. When you stop tracking a channel, its videos and subscriber history are deleted at once.
Meta
Mushy connects Instagram professional accounts through Meta to publish posts, read their statistics and comments, and help you answer comments on your own posts. Mushy also compares your professional accounts with the competitor professional accounts you track. For competitors you track, Mushy reads public posts and statistics from professional accounts that aren’t age-gated: followers, post count and each post’s likes, comments, views, caption, time and type. Their posts are kept for a rolling 90 days; when you stop tracking an account, its posts and follower history are deleted at once.
To ask Mushy to delete your Instagram data, email [email protected], or follow the steps for Instagram on the data deletion page, which covers every other network too. Mushy deletes your Instagram data within 30 days of the request. Removing Mushy in Facebook’s settings under Business integrations ends Mushy’s access to your account.
Mushy connects LinkedIn profiles and company pages to publish posts, read their statistics, and show the comments on them. Competitor tracking isn’t available on LinkedIn: its API doesn’t offer other members’ or companies’ posts. LinkedIn limits how long fetched data may be kept, and Mushy keeps within those limits:
- Comments: Mushy keeps a comment’s text for 48 hours from when it first fetched it and never stores it again. After that it keeps only the comment’s ID, time, parent post and Mushy’s own labels, and the inbox says that LinkedIn keeps comment text for 48 hours.
- Commenters: names and photos are cached for 24 hours from each fetch, then the commenter shows as “LinkedIn member”.
- Statistics: where LinkedIn’s rules require it, Mushy keeps less history.
- An hourly job enforces these limits.
Text you wrote in Mushy is your workspace’s own content and isn’t affected. You can remove Mushy on LinkedIn under Settings & Privacy › Data privacy › Permitted services.
X
Mushy connects X accounts to publish posts, read their statistics, and show the replies to, quotes of and mentions of your account. For competitors you track, Mushy reads their public posts and statistics: followers and each post’s likes, reposts, replies, views, text and time, to compare them with your account. Their posts are kept for a rolling 90 days; when you stop tracking an account, its posts and follower history are deleted at once.
- When X sends Mushy a deletion notice for a post or an account, Mushy removes that content within 24 hours.
- X content shown in Mushy keeps its author, full text and a link to the post on X.
- X data is never used to train models.
You can revoke Mushy on X under Settings and privacy › Security and account access › Apps and sessions › Connected apps.
Model provider
Mushy uses Anthropic, PBC as its model provider, through Anthropic’s commercial API. Anthropic processes:
- comment text, so that Mushy can label comments (for example, as a question or a complaint) for the workspace whose post they are on;
- what you ask Mushy’s built-in agent (an alpha preview) to work on, and the workspace content it reads to do it.
Anthropic processes this data only to return results to Mushy, under its commercial terms, and doesn’t use it to train models. Network tokens and passwords are never sent to a model.
[Counsel to complete: how long Anthropic retains API inputs and outputs, and where it processes them.]
If you connect your own agent to Mushy (through MCP), what it reads goes to the model provider you chose for it, under your agreement with them.
No training
Customer data, network data and commenters’ data are never used to train models, by Mushy or by its model provider. That covers your posts, drafts, comments, statistics, reports and everything Mushy reads from a network.
Sharing
Mushy shares personal data only to run the service:
- Sub-processors: the companies that host, back up, email, bill and monitor Mushy, and its model provider. Each is listed with its purpose and data location on the sub-processor list, which is updated with 30 days’ notice before a new one is added.
- Links in posts: before a post is published, the links in it may be checked against Google Web Risk to keep malware and phishing off the networks; only the link addresses are sent. [Counsel to complete: confirm the use of Google Web Risk before it is turned on.]
- The networks: what you publish goes to the network you publish it to, as you ask.
- Your workspace: members of your workspace see what their role allows. Mushy staff see a workspace’s content only through time-limited support access, which notifies its Owner and Admins, can be ended by them at any time and is logged.
- The law: when the law requires it. [Counsel to complete: how Mushy responds to legal requests and when it tells the people affected.]
Data is never shared between workspaces, never sold, and never used for advertising.
Retention
Mushy keeps data only as long as it needs it:
- Posts, videos, statistics and scores: while the channel is connected, then 90 days. Reconnecting the same account in the same workspace within those 90 days restores the channel with its history.
- YouTube data: deleted within 7 days of a revocation made in Mushy, and within 30 days of one made on Google’s side; videos made in Mushy stay.
- Comments: while the post and channel are connected, and deleted within 30 days after the post is deleted (in Mushy or on the network) or the channel is disconnected.
- X content: removed within 24 hours of X telling Mushy it was deleted.
- LinkedIn comments and commenters: comment text for 48 hours from its first fetch, then only its ID, time, parent post and labels; commenters’ names and photos for 24 hours from each fetch.
- Competitors’ posts and videos: a rolling 90 days; when you stop tracking an account, its posts, videos, follower history and subscriber history are deleted at once. For YouTube competitors, only each video’s latest statistics are kept, refreshed daily.
- Agent reports and insights: until the workspace deletes them.
- Activity log: 30 days on the Free plan and 1 year on paid plans, by the plan in force when each entry was written.
- Network tokens: destroyed when you disconnect the channel or delete the workspace.
- Workspace exports: the archive is deleted after 7 days.
- Sign-in records: sign-in codes and links until they expire; ended or revoked sessions for 90 days; sign-in events for 1 year; known devices for 1 year after they were last seen; request counters until their time window ends; unused agent registrations for 30 days. All are erased within 30 days of deleting your account.
- Sign-up checks: 90 days.
- Fingerprints of sent replies, used to stop the same text being sent from many accounts: 48 hours.
- Product events and the platform audit log: indefinitely, for now; they hold no content, names, email addresses or IP addresses.
- Backups: 35 days.
- Billing records: 7 years, as tax law requires.
When a workspace is deleted, access ends at once and everything except billing records is deleted within the hour. Its channels’ access is revoked at each network and its vault keys are destroyed.
Your rights
- See and export your data: download your personal data (profile, memberships, your own drafts and comments, and sign-in history) as JSON from your profile in the app; we email you a link within 24 hours. Admins can export a whole workspace from its Settings; the archive is deleted after 7 days.
- Correct it: change your name, email address and other details in the app at any time.
- Delete it: delete your account from your profile in the app. If you are the only Owner of a workspace, transfer or delete that workspace first. Deletion removes you from every workspace and erases your personal data within 30 days. Backups roll off within 35 days. Past activity entries stay, credited to a former member.
- Ask us: for anything you can’t do in the app, email [email protected].
[Counsel to complete: the rights people have under the laws where they live (such as the GDPR and US state privacy laws), how to appeal a decision, and how to complain to a regulator.]
Non-users
If you don’t use Mushy but Mushy holds your data, for example because you commented on a customer’s post, you can ask to see it or have it deleted.
- Email [email protected] with your network and your handle on it, or follow the steps on the privacy requests page.
- We check that the handle is yours, then delete, from every workspace within 30 days, your stored comments with the labels and reply drafts attached to them, your handle, and any cached profile data.
- If you asked an account not to reply to you (by replying “stop”), Mushy keeps only your network user ID on that account’s list, so your “stop” still holds.
The data deletion page also explains how to remove what each network shares with Mushy.
Cookies
The website, mushymarketing.com, sets no cookies. The app and its sign-in pages use essential cookies only: to keep you signed in, to protect your session, and to recognise a device you have signed in on before. The cookie notice lists them.
Changes
When this policy changes materially, we announce the new version at least 30 days before it takes effect, by email and in the app. From then, the website shows it as upcoming, and you are asked to accept it at your next sign-in once it takes effect. Every version stays online with its date, and the version history at the end of this page links each one.
Contact
EcoEarth Enterprises, Inc., Austin, Texas, USA. Email [email protected] about this policy or your data.
[Counsel to complete: postal address, and any representative required in the EU or UK.]