Privacy Notice

This Privacy Notice explains how Townrents LLC, a U.S. limited liability company doing business as "MudHub" ("we," "us," or "our"), collects, uses, discloses, and protects information when you use the MudHub website, mobile applications, and related services (the "Service"). Townrents LLC is the data controller responsible for personal data processed through the Service. You can reach us at support@mudhubbase.app.

Account information

• Name, email address, company name, and role.
• Authentication credentials (passwords stored hashed).
• Profile settings and preferences.

Project and customer information

• Project names, addresses, notes, photos, and files you upload.
• Customer records you enter (name, contact details, notes).
• Calculation history, saved layouts, orders, and delivery notes.
• You are responsible for obtaining any consent required from your customers before entering their information.

Supplier information

• Publicly available directory data, corrections you submit, and selections you save.

Usage and device information

• Log data (IP address, browser type, pages viewed, timestamps).
• Device identifiers, operating system, and approximate location inferred from IP.
• Analytics events describing how you use the Service.

Payment information

• Payments are processed by Paddle.com Market Limited ("Paddle"), which acts as the Merchant of Record and separate data controller for payment, billing, fraud prevention, and tax purposes. We do not receive or store your full card number. We receive a limited transaction record (name, email, country, subscription plan, transaction ID) from Paddle to manage your subscription.

We process personal data for the following purposes and legal bases (GDPR Art. 6):

• Provide and operate the Service (account creation, saving projects, calculations, orders) — performance of a contract (Art. 6(1)(b)).
• Process subscriptions and payments in coordination with Paddle — performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
• Security, fraud prevention, and abuse detection — legitimate interests (Art. 6(1)(f)) in protecting the Service and our users.
• Product improvement and analytics — legitimate interests (Art. 6(1)(f)) in understanding and improving the Service.
• Customer support and service communications — performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
• Marketing emails (where applicable) — your consent (Art. 6(1)(a)), which you may withdraw at any time.
• Legal compliance and dispute resolution — legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)).

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and measure aggregate usage. Essential cookies are required for the Service to function; analytics cookies help us improve it. You can control cookies through your browser settings; disabling them may impact functionality.

We share information only in these limited circumstances:

• Merchant of Record — Paddle: for the sale of subscriptions, subscription management, payments, invoicing, and tax compliance. Paddle acts as an independent controller for the payment data it processes. See Paddle's Privacy Notice.
• Service providers / subprocessors: hosting, database, authentication, transactional email, SMS delivery, and analytics vendors acting under our instructions.
• Team members: collaborators you invite to your organization can see information in your workspace consistent with their role.
• Legal: when required by law, court order, or to protect the rights, property, or safety of Townrents LLC, our users, or the public.
• Business transfers: in a merger, acquisition, or sale of assets, subject to this Notice.
• Professional advisers: legal, accounting, and audit advisers under confidentiality obligations.

We do not sell your personal information.

Townrents LLC is based in the United States and stores data on U.S.-based infrastructure. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses for transfers from the UK and EEA.

We retain account, project, customer, and calculation data for as long as your account is active or as needed to provide the Service. When you delete data we remove it from active systems within a reasonable timeframe; residual copies may persist in backups until they are rotated (typically within 30–90 days). Log and analytics data is retained on a rolling basis consistent with routine operations and legal obligations. Financial records are retained as required by tax law.

Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to processing of your personal data, and to withdraw consent. Residents of the EEA / UK have rights under GDPR / UK GDPR, and residents of California have rights under the CCPA / CPRA. You may exercise these rights in-app or by emailing support@mudhubbase.app. We will respond within the timeframe required by applicable law (generally within one month). You also have the right to lodge a complaint with your local data protection authority.

We use appropriate technical and organizational measures — including encryption in transit, access controls, and row-level authorization — to protect your information. No system is perfectly secure; notify us immediately at support@mudhubbase.app if you suspect unauthorized access.

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. Contact us if you believe a child has provided us information so we can delete it.

We may update this Privacy Notice from time to time. When we make material changes we will update the version above and notify users through the Service or by email.

Townrents LLC d/b/a MudHub. Questions about this Notice or your data may be sent to support@mudhubbase.app.