Privacy policy

Who this covers

People who use Muto, people who visit this website, and people who email us or ask to join the alpha.

What we collect

When someone invites you

Your email address, which the person who invited you gave us, so that we can send you the invite and you can sign in.

When you use Muto

• Your name and the company name you show with it. You can change them on your profile.
• What you and your company put in Muto: documents, sheets, pictures, comments and answers. These belong to your company.
• A log of what’s done in your company’s account, such as who published a version or invited someone. Your company’s account admin can read it.
• Which documents you’ve opened and when, and what you’ve ticked as read, so that Muto can show you what’s new.
• When and where you signed in: the time, the internet address, and the kind of device and browser. You can see these on your account’s Security page.
• Email and internet addresses used to count sign-in attempts, so nobody can keep guessing. The counts are deleted within two days.

Cookies

Muto uses cookies only to keep you signed in, and one to remember that you’ve closed a message from us. Some of your choices, like which panels you keep open, are kept in your browser and never sent to us.

On this website

• This website sets no cookies and has no tracking.
• If you ask to join the alpha, your answers are emailed to us, and the website keeps no copy. The form uses Cloudflare’s check that you’re a person, which looks at your browser to tell people from robots.
• Our hosting keeps short technical logs of requests, such as the internet address a request came from, to keep things running and safe.

Why we use it

• To run Muto: to sign you in, show you what you’ve been given, and send you the emails you need, such as sign-in codes and invites.
• To keep Muto and your company’s work safe.
• To answer you when you write to us.
• To make Muto better, from counts of how it’s used, never by reading your documents.

We don’t sell personal information, use it for advertising, or use your company’s documents to train AI.

Who can see it

• People in your company, and the people it invites, see your name and what you write, in the projects and folders they’ve been given.
• Muto’s own people see names, email addresses and companies, to run Muto and help you. They don’t open documents, except Muto support when one of your company’s admins lets them in.
• The companies that run parts of Muto for us, listed on Security and your data, only to do that job.
• Anyone the law requires us to tell.

Where it’s kept

Muto’s database and files are kept in Sydney, Australia. Some of the companies that run parts of Muto for us are based overseas, mostly in the United States. They handle information only for us, under their own privacy and security promises.

How long we keep it

• While you have an account and your company uses Muto.
• When a company stops using Muto, its people can still read its work for 30 days. Then the account closes, and its work is deleted 90 days after the end.
• If a company’s account admin asks us by email to delete the company’s work, we check the request is really from them, tell every admin of the company, and delete it a day later unless one of them asks us to stop. That’s usually within two days of the request, and always within 30 days.
• Copies in our backups are gone within 30 days after that.
• We keep emails you send us for as long as we need them to help you.

Your rights

• You can ask to see the personal information we hold about you, and ask us to correct it. Email privacy@muto.cloud. We’ll reply within 20 working days, and usually much sooner.
• You can change your name on your profile at any time.
• To have your account removed, ask your company’s admin to take you out of the company, or email us. Some of what you wrote, like comments in a company’s documents, is part of that company’s records, so we talk to the company before changing it.
• If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to New Zealand’s Privacy Commissioner at privacy.org.nz.

If something goes wrong

If there’s a privacy breach that’s likely to cause serious harm, we tell the people affected and the Privacy Commissioner as soon as we can.

Children

Muto is for businesses and isn’t meant for children.

Our privacy officer

Our privacy officer looks after this policy and any questions about it. Email privacy@muto.cloud.

Changes to this policy

We update this page when how we handle information changes, and tell your company’s admins before a change that matters takes effect.