Privacy Policy

1. Who we are

Mustard Seed Credo Limited Company, a Wyoming limited liability company ("Auxilator", "we", "us" or "our"), is the data controller for personal data we collect about visitors, account holders and users of the Auxilator Service. Contact: legal@auxilator.com.

This Privacy Policy is governed by the laws of the State of Wyoming, USA. For formal notices, see the notice section of the Terms of Service.

2. What we collect

• Account data — name, work email, firm, role, login credentials.
• Usage data — log, device and interaction data needed to run and secure the Service.
• Content you provide — documents and inputs you upload (handled as Customer Data under our Data Processing Terms).
• Billing data — plan, transactions and, where applicable, payment details processed by our payment provider. The Service is not Payment Card Industry (PCI) compliant. You must not use it to process or store cardholder data.

3. Data received through messaging platform integrations

Auxilator may be made available through third-party messaging and collaboration platforms such as Slack, Microsoft Teams, Google Workspace and Telegram (each a "Platform"). When you use Auxilator through a Platform, we receive the content of the messages, commands or files you direct to our app, together with identifiers the Platform provides, such as user, channel and workspace IDs.

We use this data only to provide the functionality you request. We handle it as Customer Data under our Data Processing Terms, and the retention, deletion, security and no-AI-training commitments in this Privacy Policy apply to it in the same way. We do not sell this data. When you uninstall or remove the integration from a Platform workspace, we stop receiving data from that workspace. We delete data associated with that workspace within 7 days.

Each Platform handles your data on its own systems under its own terms and privacy policy, which we do not control.

4. How and why we use it

We process personal data to provide, secure, support and improve the Service, to manage accounts and billing, to communicate with you, and to comply with legal obligations. Our legal bases are your consent and/or performance of our contract with you, and our legitimate interests in running the Service, consistent with the PDPA and applicable US law.

We do not use your personal data, Customer Data, or Customer Content to train, fine-tune or improve any general or third-party AI model. We may use aggregated or de-identified data that does not identify you, your users or your clients for service analytics, capacity planning and improvement.

5. Disclosure

We share personal data only with vetted service providers (sub-processors) who process it on our behalf under confidentiality and security obligations, and where required by law. We do NOT sell your personal data.

Sub-processors, except for cloud storage providers, will not retain or log your personal data or Customer Data for human review.

6. International transfers

The Service may store or process data on infrastructure located outside your country. Where data crosses borders, we use appropriate safeguards consistent with the PDPA and applicable law.

7. Retention

We keep personal data while your account is active and as needed for the purposes above or to meet legal obligations, then delete or anonymize it.

8. Security

We apply technical and organizational measures including encryption in transit and at rest, access controls and least-privilege access. Our security controls are monitored on a continuous basis using Vanta's compliance automation platform, and we operate a dedicated, resource-per-client infrastructure model that keeps each firm's data isolated. See our Data Processing Terms for detail. Our security program is designed to align with the SOC 2 Trust Services Criteria and ISO/IEC 27001.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, withdraw consent, or object to certain processing. Depending on your location you may have additional rights (e.g. under Malaysia's PDPA, or California's CCPA/CPRA including the right to know what we collect and to opt out of any sale, which we do not do). To exercise these rights, contact legal@auxilator.com.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. For material changes we will give reasonable advance notice before they take effect, and will not weaken our commitments on confidentiality, Customer Data or security without your consent.

11. Contact

Mustard Seed Credo Limited Company, 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, USA

Questions about this Privacy Policy: legal@auxilator.com.