# Privacy Policy

**Effective date:** April 23, 2026

This policy describes how Reinstall Work ("we," "us," "our") collects, uses, and protects information when you use our website (reinstall.work), our consulting services, and the Mug workspace platform.

---

## What we collect

**When you contact us:**
- Name, email address, and company name submitted via our contact form, email, or scheduling tool
- Meeting recordings and notes from discovery calls and client meetings (with your prior knowledge and consent — we use [Fathom](https://fathom.video/+newtab) for call recording)

**When you use our website:**
- Standard server logs (IP address, browser type, pages visited)
- Analytics data collected via privacy-friendly analytics tools — we do not use invasive tracking or sell data to advertisers

**When you are a consulting client:**
- Business information, system access credentials, and operational data shared during the engagement. System credentials are stored securely in an encrypted credential manager (1Password) and deleted within 30 days of engagement completion.
- All client workspace data stored in Mug (documents, databases, processes, activity logs)

**When you use Mug:**
- Account information (name, email, organization)
- Workspace content (files, databases, processes, notes)
- Usage data (activity logs, feature usage, API calls)
- AI interaction data (prompts and responses processed through the Mug agent). AI features in Mug process data through third-party model providers (such as Anthropic, OpenAI, and Google). These providers process data under their respective data processing agreements and do not retain workspace content for model training.

---

## How we use it

- To provide and improve our consulting services and the Mug platform
- To communicate with you about your engagement or workspace
- To send invoices and process payments via [Stripe](https://stripe.com/+newtab)
- To comply with legal obligations

We do **not**:
- Sell your personal information to third parties
- Use your data for advertising
- Train AI models on your workspace content
- Share client data between workspaces

---

## Data storage and security

**Mug workspaces** run on [Cloudflare](https://www.cloudflare.com/+newtab) infrastructure (Workers, R2, D1, Durable Objects) with per-workspace isolation and SSE-C encryption. Your workspace data is encrypted at rest and in transit.

**Client engagement data** (proposals, agreements, meeting notes) is stored in Mug and in the tools used during the engagement (Stripe for payments, Docuseal for signatures, Fathom for recordings).

In the event of a data breach affecting your personal information, we will notify affected parties within 72 hours of discovery.

---

## Cookies

Our website uses essential cookies for basic functionality. We do not use tracking cookies or third-party advertising cookies.

---

## Third-party services

We use the following services in the course of business, including but not limited to the following. Each has its own privacy policy:

- [Cloudflare](https://www.cloudflare.com/privacypolicy/+newtab) — hosting, infrastructure, and security
- [Stripe](https://stripe.com/privacy+newtab) — payment processing
- [Google Calendar](https://policies.google.com/privacy+newtab) — scheduling
- [Fathom (meeting recorder)](https://fathom.video/privacy+newtab) — call recording and notes
- [Docuseal](https://www.docuseal.com/privacy+newtab) — electronic signatures
- [Cap](https://cap.so/privacy+newtab) — async video recording and sharing

---

## Data retention

- **Website logs:** 90 days
- **Mug workspace data:** retained for the life of the subscription, plus 90 days after cancellation for data export
- **Client engagement records:** retained for 7 years for tax and legal compliance
- **Meeting recordings:** retained for the duration of the engagement plus 90 days

---

## Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing [tyler@reinstall.work](mailto:tyler@reinstall.work). We will respond to verified requests within 30 days.

If you are a Mug subscriber, you can export all workspace data at any time through the platform.

---

## International data processing

Our services use Cloudflare's global infrastructure, which may process data in multiple jurisdictions. All data is encrypted in transit and at rest regardless of processing location.

---

## Children's privacy

Our services are designed for businesses. We do not knowingly collect personal information from individuals under 18.

---

## Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to active clients and Mug subscribers. The effective date at the top of this page reflects the most recent update.

---

## Contact

Tyler Berggren, Founder/Lead Consultant — Reinstall Work | [tyler@reinstall.work](mailto:tyler@reinstall.work)