Please review this policy to understand our data protection practices.
1. Introduction
This Privacy Policy explains how Mufeed LTD ("Mufeed," "we," "us," or "our") collects, uses, shares, and protects your personal data when you use:
- Mufeed's website
- Mufeed's mobile application
- Mufeed's AI-powered assistant connectors and integrations
- Customer support, messaging, and related communication services
Mufeed's AI-powered assistant connectors refer to integrations that enable third-party AI assistants (such as ChatGPT from OpenAI, Claude from Anthropic, and other supported assistants) to interact with Mufeed services on your behalf using OAuth authentication and connector technologies such as the Model Context Protocol (MCP).
By using our services, you consent to the collection and use of information as described in this Privacy Policy.
2. Personal Data We Collect
We collect different categories of personal data based on how you interact with Mufeed.
| Personal Data Category | Examples |
|---|---|
| Account Information | Name, email address, phone number, country code |
| Address and Location Information | Service addresses, building/unit details, directions, city, region, latitude and longitude |
| Booking and Transaction Information | Booking history, scheduling preferences, subscriptions, packages, vouchers, wallet credit |
| Payment Information | Payment tokens created by PCI-DSS compliant payment service providers. We do not store full card numbers, CVV codes, or expiration dates |
| Device and Usage Information | IP address, browser type, operating system, referral source, app and website interactions |
| Communication Information | Customer support emails, WhatsApp messages, IVR interactions, support call recordings |
| Marketing Preferences | Newsletter subscriptions, push notification preferences, SMS preferences, marketing communication choices |
| AI Assistant Connector Data | Connector requests, booking actions, service preferences, connector responses, operational booking summaries |
Cookies, Tracking Technologies, and Device Information
We may collect information about how you access and use our website, mobile apps, and Mufeed's AI-powered assistant connectors, including:
- Device identifiers
- App version
- Browser type
- Operating system
- IP address
- Approximate location derived from IP address or device settings
- App interactions and browsing behavior
- Search and booking activities
- Crash reports
- Diagnostic and performance data
- Cookie identifiers
- Push notification tokens
- Analytics and referral data collected through third-party analytics and marketing tools
We collect this information through cookies, software development kits (SDKs), application programming interfaces (APIs), log files, and similar technologies for identity verification, analytics, fraud prevention, diagnostics, performance monitoring, service improvement, and marketing effectiveness measurement.
Third-party service providers, including analytics, referral, advertising, and payment partners, may also use cookies and similar technologies when providing their services to us.
We use Google Analytics and similar analytics providers to understand how users interact with our website and apps, generate usage statistics, improve our services, and measure marketing effectiveness. These service providers process the resulting information according to their own privacy policies.
Mufeed's AI-powered assistant connectors do not create cookies and use OAuth 2.0 for authentication.
3. How We Use Your Personal Data
We use your personal data to operate, improve, and secure our services.
| Purpose | Data Used |
|---|---|
| Providing and managing bookings | Account data, address, booking data, payment data |
| Service provider dispatch | Name, address, phone number, booking details, service instructions |
| Processing payments and refunds | Payment tokens, booking and transaction records |
| Providing customer support | Communication history, booking history, account data |
| Operating AI assistant connectors | Connector inputs and outputs, booking and account context |
| Improving services and user experience | Usage data, analytics, diagnostics, operational logs |
| Security and fraud prevention | Device information, authentication data, security logs |
| Marketing and promotional communications | Contact data and marketing preferences |
| Legal and regulatory compliance | Transaction records, tax and accounting data |
We may use aggregated and de-identified information for analytics, operational insights, and service improvement purposes.
We do not use content provided by customers through AI assistant connectors to train general-purpose or public-facing AI models unless explicitly disclosed.
4. How AI Assistant Connectors Work
When you use Mufeed's AI-powered assistant connector (for example, through ChatGPT from OpenAI, Claude from Anthropic, or other supported AI assistants), limited request and response data passes through the AI assistant provider's infrastructure to execute the requested action.
Data Sent to Mufeed
| Connector Action | Data Sent |
|---|---|
| Service search | Service type, scheduling preferences |
| Create booking | Selected service, date, time, service properties, optional instructions |
| Query booking | Booking reference number or account-related information |
| Request pricing | Service choices and booking properties |
Data Returned to AI Assistant
| Response Type | Examples |
|---|---|
| Availability information | Available appointment times |
| Pricing information | Service prices, wallet credit usage, currency |
| Booking information | Booking reference number, booking date/time, recurrence |
| Status information | Booking status and summaries |
Mufeed's AI-powered assistant connector is designed according to data minimization principles.
Unless necessary to complete a specific workflow, Mufeed's AI assistant connector does not transmit:
- Payment card data
- Government-issued identification numbers
- Passwords, PINs, or access tokens
- Health information
- Precise unit numbers or interior details
- Precise latitude and longitude coordinates
- Any other sensitive personal information
⚠️ Important: Please do not include sensitive personal information, payment data, login credentials, health information, or information related to children in free-text instructions sent through the AI assistant connector.
The AI assistant connector uses OAuth 2.0 with defined permissions and short-lived access tokens. Your password is never shared with the AI service provider.
AI service providers process connector data traffic according to their own privacy policies and terms. Please review the relevant provider's policies before using the connector.
5. Legal Basis for Processing
We only process personal data when we have a legal basis to do so.
| Legal Basis | Examples |
|---|---|
| Contract Performance | Account registration, booking execution, payment processing |
| Legitimate Interests | Fraud prevention, analytics, product improvement, operational security |
| Legal Obligations | Taxes, accounting, anti-money laundering, regulatory requests |
| Consent | Marketing communications and optional notifications |
6. Parties We Share Personal Data With
We only share personal data when necessary to operate and provide our services.
| Recipient Category | Purpose |
|---|---|
| Service Providers | Executing bookings and providing services |
| Payment Service Providers | Processing payments and refunds |
| Communication Service Providers | Sending SMS, push notifications, emails, WhatsApp messages, and IVR communications |
| Mapping and Address Providers | Address verification and route mapping |
| Cloud and Infrastructure Providers | Hosting, analytics, monitoring, and operations |
| AI Assistant Service Providers | Processing connector requests and responses |
| Legal and Regulatory Authorities | When required by law |
When you use Mufeed's AI assistant connector, limited request and response data passes through the AI assistant provider's infrastructure to execute the requested action.
Mufeed does not sell, rent, share, or transfer any personal data to third parties for commercial purposes.
7. International Data Transfers
We may transfer and process your personal data in countries where Mufeed or its service providers operate, which may include various international locations.
When transferring personal data across international borders, we implement reasonable safeguards to ensure appropriate protections, including entering into contractual agreements with our service providers and data processors to ensure data protection.
By using our services, you acknowledge and consent to these international data transfers.
8. Security and Protection
We implement reasonable technical and organizational measures to protect personal data from unauthorized access, misuse, loss, or unauthorized disclosure.
These measures include:
- Encryption
- Authentication controls
- Firewalls and access protection mechanisms
- Operational logging
- Restricted internal access
- OAuth-based authentication for AI assistant connectors
However, no method of data transmission or storage over the internet can be guaranteed to be completely secure.
9. Data Retention
We retain personal data only as long as necessary to achieve the purposes outlined in this Privacy Policy and to comply with legal obligations.
| Data Category | Retention Period |
|---|---|
| Account Information | Until account deletion, then 30 additional days |
| Booking Records | Until account deletion, then 30 additional days |
| AI Assistant Connector Tool Call Logs (timestamps, tool name, customer ID, error context) | 15 days |
| Customer Support Tickets | Upon customer request only |
| Web/App Analytics and Device Data | Upon customer request only |
| Call Recordings | Two years |
| Fraud and Security Logs | 90 days |
| OAuth Refresh Tokens | Until revoked or expired |
We may retain aggregated and de-identified information for analytics, research, and service improvement purposes.
10. Your Rights and Choices
Depending on your geographic location and applicable laws, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to certain processing activities
- Withdraw consent
- Request data portability
- File a complaint with the relevant data protection authority
Marketing Communications Control
You can unsubscribe from marketing communications by:
- Using the unsubscribe link in marketing emails
- Replying with "STOP" or similar to marketing text messages
- Adjusting notification settings within the Mufeed app
- Contacting us at apps@mufeed.com
AI Assistant Connector Control
You can revoke an AI assistant's access to your Mufeed account anytime through the assistant's settings or integrations page.
Once disconnected, the AI assistant will no longer be able to access your Mufeed account or use Mufeed tools on your behalf.
Account Deletion
To request account deletion, email apps@mufeed.com with "Data Deletion Request" in the subject line.
We will process verified requests within 30 days, subject to applicable legal data retention obligations.
11. Minimum Age
Our services are intended for individuals 18 years of age or older.
We do not intentionally collect personal data directly from children under 18, except when necessary to provide services requested by a parent or legal guardian.
If you believe we have unintentionally collected information about a child, please contact us at apps@mufeed.com.
12. Third-Party Services
Our services may include links to third-party websites and services, including payment providers, mapping services, and AI assistant connector providers.
We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any personal data.
13. Privacy Policy Updates
We may update this Privacy Policy from time to time.
For significant changes, we may notify users via email, in-app notifications, or connector notifications.
The "Last Updated" date at the top of this policy reflects the most recent revision date.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please contact us: