Privacy Policy

1. Who controls your data

This Privacy Policy outlines how Mhoo Co., Ltd. ("Mhoo", "we", "us") collects, processes, and protects personal data:

2. Information we collect and why

3. Connected services and integrations

Mhoo can connect to third-party services only when you or your workspace administrator chooses to authorize them. Depending on the service and permissions selected, Mhoo may receive:

• account identifiers, profile information, and contact details;
• content and metadata made available by the connected service;
• the permission needed to read, create, update, send, or delete information when you request that feature; and
• connection, security, and synchronization logs.

We use connected-service data only to authenticate the connection, provide the features you request, synchronize or display relevant information, perform user-directed actions, maintain security, and troubleshoot the service. We do not sell connected-service data, use it for behavioral advertising, or use private connected-service content to train generalized artificial-intelligence models.

This policy applies to current and future integrations. We do not list every integration here. Material service providers are identified below, and additional provider-specific terms are included when a platform requires them.

4. Platform-specific commitments

Google Account, Gmail, and Google Calendar

Connecting Google is optional. The Google data Mhoo receives depends on the permissions you approve and may include identity and email addresses, Gmail messages and settings, drafts or messages you direct Mhoo to create or send, and Calendar events you direct Mhoo to view or manage.

Mhoo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta products

Connecting a Meta product, including Facebook or Instagram, is optional. Depending on the permissions you approve, Mhoo may receive account, profile, Page, business, content, and interaction data needed to provide the feature you request. Mhoo processes this data according to this policy and applicable Meta Platform Terms. Instructions for removing the connection and requesting deletion are available on our data-deletion page.

5. Sharing, service providers, and human access

We disclose personal data only to service providers processing it for Mhoo, when you or a workspace administrator directs the disclosure, when needed to provide an integration you enabled, or when required by law. User-directed workflows may send selected content to contracted infrastructure or AI providers solely to perform the requested feature.

Mhoo personnel access private connected-service data only with your permission for support, when necessary to investigate security or abuse, to comply with law, or for essential internal operations allowed by the applicable platform rules.

Our material service-provider categories include:

• Cloudflare, Inc. — network delivery, SSL/TLS, security, access control, and DDoS mitigation.
• Stripe, Inc. — payment processing, compliance, and invoicing.
• Oracle Cloud Infrastructure (Oracle Corporation) — compute, storage, database, backup, and network infrastructure.
• Foundation AI model providers — user-directed inference under applicable data-protection and no-generalized-training terms.

6. Storage, security, and retention

OAuth credentials and synchronized content are protected with access controls and safeguards appropriate to their sensitivity. We retain connected-account data while the integration or workspace remains active and as needed to provide the requested service. Limited backup, security, accounting, and legal records may remain after deletion for the period required for recovery, fraud prevention, or compliance.

7. Your choices, disconnection, and deletion

You may decline or revoke an integration's permissions; features requiring those permissions will stop working. Revocation stops future access but may not delete information already synchronized into Mhoo. You can revoke Google access through Google Account permissions and remove Meta access through Settings & privacy → Settings → Apps and websites.

To request deletion, email privacy@mhoooo.com from the associated address or follow our data-deletion instructions. We verify the requester and delete or anonymize eligible information, subject to limited legal, security, and backup retention.

8. Your privacy rights and contact

Depending on your residency, including under the Thailand PDPA, EU GDPR, California CCPA/CPRA, or Florida Digital Bill of Rights, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, or to object to certain processing.

Mhoo Co., Ltd. does not sell or share personal data for cross-context behavioral advertising. We will post material policy changes here. Questions and privacy requests may be sent to privacy@mhoooo.com.