MOGUL is a product of GoodFriends LLC. We treat your data like we'd want ours treated. This page explains what we collect, why, and how to control it.
The short version
- We collect what we need to run the product — your archetype, your quiz answers, your saved work (notes, blueprints, brand kit, signed documents). Plus the standard operational stuff: account email, login timestamps, device type, crash logs.
- We don't sell your data. We never share your personal information with advertisers or third-party data brokers.
- You can export or delete your account anytime. Settings → “Delete my account” nukes everything from our database within 7 days.
- We use third parties for narrow purposes — Supabase (database + auth), Anthropic (AI advisor), OpenAI (idea validator scoring), Stripe (payments), Resend (transactional email), Sentry + PostHog (crash + product analytics), RevenueCat (subscription management on mobile). Each is listed below with what they see.
What we collect
Account information
When you create an account we store: email, first name, password hash (bcrypt — we never see your plaintext password), the date you signed up, your archetype (set by the quiz), and your subscription tier (free / Pro / Elite).
Quiz answers
Your 7-question quiz answers + computed scores are stored so we can show you your archetype + improve quiz accuracy. Aggregated quiz data (with no identifying information) may be used to improve the product.
Your saved work
Notes, life blueprints, action plan progress, calendar events, brand kits, pitch decks, idea validations, signed documents, and uploaded files in your Workspace. This is your data — we store it so you can come back to it. RLS (row-level security) ensures only you can read it.
AI Advisor conversations
Your conversations with the AI Advisor are stored so you can return to the thread later and the Advisor has context. Your messages are sent to Anthropic's Claude API for response generation, with your archetype + selected business context included as system prompt.
Operational telemetry
We log API request timings, error rates, crash reports, and high-level product analytics (e.g. “user completed quiz”, “user opened agenda”) to keep the product working. We use:
- Sentry — crash reports + error tracking. Captures stack traces, browser version, IP address (anonymized after 30 days).
- PostHog — product analytics events (page views, feature usage). User ID is your Supabase UUID, never your email or name.
- Vercel Analytics — page-load performance metrics. Anonymous; no personal data.
Payment information
Handled entirely by Stripe. We never see your card number. We store: your Stripe customer ID, subscription tier, subscription start date, and renewal status. To update payment method, cancel, or download invoices, use Stripe Customer Portal accessible from Settings.
How we use it
- Operate and improve the product.
- Personalize your Advisor responses + recommendations.
- Send transactional email (welcome, password reset, signature requests).
- Send opt-in notification nudges (you control this in Settings → Notifications).
- Detect fraud + abuse (e.g. spam signups, payment chargebacks).
- Comply with legal obligations.
We do not use your conversations, notes, or saved work to train AI models. Anthropic + OpenAI process your data per their respective enterprise / commercial APIs and do not use it for training their models. See Anthropic's and OpenAI's policies for details.
Who else sees it
We share specific data with these processors, each for a narrow purpose:
- Supabase — database + authentication. Stores your account and saved work. Located in US-East.
- Anthropic — receives your Advisor messages + system context (archetype, recent activity) to generate responses. Does not retain or train on your inputs per their commercial API terms.
- OpenAI — receives your Idea Validator inputs to compute scoring. Does not retain or train on your inputs per their commercial API terms.
- Stripe — receives payment information directly from you when you upgrade. We never see your card data.
- Resend — sends transactional email on our behalf. Sees recipient email + body.
- Vercel — hosts the web app. Sees request logs (IP, route, response time).
- Apple / Google — when you use the native app, the App Store / Play Store sees the normal in-store metrics (installs, crashes). When you sign in with Apple / Google, that provider sees your sign-in request.
- RevenueCat — manages mobile subscriptions. Receives your Supabase user ID + the IAP receipt from Apple / Google.
We may also disclose information if compelled by valid legal process (subpoena, court order). We will attempt to notify you if so unless prohibited.
Your rights
- Access — request a copy of the data we hold about you (Settings → Export my data).
- Correction — most fields are editable in-app. For anything else, email privacy@itsmogul.com.
- Deletion — Settings → “Delete my account”. Hard delete within 7 days. Backups purged within 30.
- Withdraw consent — toggle off notification opt-ins, disable AI features, etc.
- Data portability — your export bundle is plain JSON + markdown.
EU / UK / CA residents: you have additional rights under GDPR / UK-GDPR / CCPA. Email privacy@itsmogul.com to exercise them.
Cookies + local storage
We use a small number of first-party cookies + browser localStorage for: authentication (Supabase session cookie), preference persistence (theme, agenda view state), guest quiz progress (so refreshing mid-quiz doesn't lose answers), and timezone detection (so “today” matches your clock). No third-party advertising cookies.
Children
MOGUL is not directed at users under 16. We don't knowingly collect data from anyone under 16. If you believe we have, email privacy@itsmogul.com and we'll delete it.
Security
Database access is gated by row-level security (you can only read / write your own rows). Passwords are bcrypt- hashed. Connections are TLS only. We use Sentry for incident detection. We can't guarantee perfect security — anyone telling you they can is lying — but we'll always tell you within 72 hours if we detect a breach affecting your data.
Changes to this policy
We'll update the “Last updated” date at the top + email you if the change is material. Continued use after a change means you accept the updated policy.
Contact
Privacy questions, data export requests, deletion requests: privacy@itsmogul.com.
Mailing address: GoodFriends LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, United States.