1. What we collect
We collect information needed to operate and support mux, including:
- account details such as your name, email address, and authentication records;
- the contents of the repositories you choose to index, and the mirrors and index built from them;
- service activity, device, browser, IP address, and diagnostic information;
- plan, transaction, and billing status received from our payment provider; and
- messages and attachments you send when requesting support.
Our merchant-of-record partner collects and processes full payment-card details. mux does not store full card numbers.
2. How we use data
We process data to provide and secure accounts, build and search your code index, operate the agent and device access you ask for, process subscriptions, diagnose problems, respond to support requests, prevent abuse, comply with law, and improve service reliability. We do not sell personal data, use your code to train models, or use private workspace content for advertising.
3. Workspace privacy
Workspaces are private. A workspace's repositories, mirrors, and index are available only to you, the members, keys, and signed-in Macs you authorize, and processors acting for mux as needed to provide the service. mux reads only the repositories the GitHub installation grants, and you can revoke access by deselecting a repository, revoking a key, or disconnecting GitHub.
4. Processors and disclosures
We use Cloudflare infrastructure to host, secure, and deliver mux. We use a payment provider acting as merchant of record to handle checkout, billing, taxes, fraud checks, and related customer service. These providers process data under their own terms and privacy commitments as applicable to their roles.
We may also disclose limited information when required by law, to protect users or the service, in connection with a business reorganization, or with your direction. We do not give processors permission to use private workspace content for their own advertising.
5. Security and international processing
We use reasonable technical and organizational safeguards designed to protect data, including access controls and encrypted transport. No system is completely secure, so you should protect credentials and agent keys and contact us if you suspect unauthorized use. Our processors may handle data in countries other than yours, subject to appropriate legal safeguards where required.
6. Retention
We keep account and workspace data while your account is active and as needed to provide the service. After deletion or account closure, data may remain for a limited period in backups, security records, or records we must retain for legal, tax, fraud-prevention, and dispute-resolution purposes. We delete or de-identify data when it is no longer reasonably needed for those purposes.
7. Correction and deletion rights
mux is designed to keep your exit path open: your code stays in GitHub, and deselecting a repository or deleting a workspace removes the mirror and index mux built from it. You may update account information in the product and request access, correction, or deletion of personal data by contacting us. We may need to verify your identity, and some data may be retained where law permits or requires it. Depending on where you live, you may also have rights to object, restrict processing, withdraw consent, or complain to a data-protection authority.
8. Changes to this policy
We may update this policy as mux, our processors, or legal requirements change. We will post the revised policy and update the date above. We will provide reasonable notice if a change materially affects how we handle your data.
9. Contact
For privacy questions or data requests, email hello@usemux.com.