Privacy Policy

Mufasa Labs LLC(“Mufasa Labs,” “we,” “us,” or “our”) is an enterprise AI development and consulting firm headquartered in Peoria, Arizona, United States. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit www.mufasalabs.com, contact us, or use our AI readiness assessment (collectively, the “Site”).

For the personal information we handle on this Site, Mufasa Labs is the data controller. When we process client data as part of a paid engagement, we act as a data processorunder the terms of that engagement’s separate agreement, not this policy.

Information you give us. When you submit a contact form, complete the AI readiness assessment, subscribe to updates, or otherwise communicate with us, we collect the details you provide — such as your name, work email, company, role, and the contents of your message or assessment answers. New inquiries are recorded in HubSpot, our CRM. Postgres may keep anonymous assessment scoring (your score, dimensions, and answers) so we can show your unique result page; name and email are not stored there as a sales record.

Information collected automatically. Like most websites, we and our service providers may automatically collect limited technical data when you visit, including IP address, browser and device type, pages viewed, referring URLs, and timestamps. Some of this is collected through cookies and similar technologies (see the Cookies section).

We do not intentionally collect sensitive personal information (such as government IDs, health, or financial account data) through the Site, and we ask that you not submit it through our forms.

We use personal information to:

• Respond to your inquiries and provide the information or services you request;
• Generate and deliver your AI readiness assessment results;
• Operate, maintain, secure, and improve the Site and its performance;
• Communicate with you about our services, and — where you have opted in or where permitted — send you relevant updates;
• Understand how the Site is used through aggregate, privacy-respecting analytics (only where you have consented to analytics cookies);
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
• Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information, and we do not use it to train AI models.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Consent — for non-essential cookies and optional marketing communications. You may withdraw consent at any time.
• Legitimate interests — to respond to your inquiries, secure and improve the Site, and understand aggregate usage, balanced against your rights.
• Performance of a contract — to take steps at your request before or during an engagement.
• Legal obligation — where processing is required to comply with the law.

We share personal information only as needed and never sell it. We may disclose it to:

• Service providers who process data on our behalf — for hosting, infrastructure, email delivery (Resend for the assessment report and password reset), CRM (HubSpot, for inquiries), analytics (including HubSpot on public marketing pages after you consent), and customer communication — under contracts that require them to protect it and use it only for our purposes;
• Professional advisors such as auditors and legal counsel, where necessary;
• Authorities or others when required by law, to respond to legal process, or to protect the rights, safety, and property of Mufasa Labs, our users, or the public;
• A successor in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

Cookies are small files stored on your device. We use them in two categories:

• Strictly necessary cookies — required for the Site to function (for example, remembering your theme and your cookie choices). These are always active and cannot be switched off.
• Product analytics / tracking cookies — help us understand how the Site is used so we can improve it. On public marketing pages this includes HubSpot visitor tracking. These are optional and are only set with your consent. Admin and other app-only routes do not load this snippet.

When you first visit, we ask for your choice through a cookie banner. You can review or change your preferences at any time here: Cookie Preferences. You can also block or delete cookies through your browser settings, though some parts of the Site may not work as intended.

We keep personal information only as long as necessary for the purposes described in this policy — for example, to respond to your inquiry, maintain our business records, and comply with legal obligations — after which we delete or anonymize it. Retention periods vary based on the type of data and the reason we hold it.

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration — including encryption in transit, access controls, and least-privilege principles. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your data.

We are based in the United States and may process information there and in other countries where we or our service providers operate. These countries may have different data protection laws than yours. Where required, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses — to protect information transferred across borders.

Depending on where you live, you may have rights over your personal information. These can include the right to:

• Access the personal information we hold about you and request a copy;
• Correct inaccurate or incomplete information;
• Delete your personal information;
• Object to or restrict certain processing, and withdraw consent;
• Portability of information you provided to us;
• Opt out of marketing communications at any time;
• Not receive discriminatory treatment for exercising your rights.

EEA/UK residents (GDPR): you may also lodge a complaint with your local data protection authority. California residents (CCPA/CPRA): you have the rights above and the right to know what we collect and how we use it; we do not sell or share your personal information as those terms are defined by California law.

To exercise any right, email privacy@mufasalabs.com or use our contact page. We will verify your request and respond within the time required by applicable law. You may use an authorized agent where the law permits.

The Site is intended for a business audience and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

The Site may link to third-party websites and services we do not control. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you visit.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice on the Site. Your continued use of the Site after an update takes effect means you accept the revised policy.

For privacy questions or to exercise your rights, contact our privacy team at privacy@mufasalabs.com or through our contact page. Mufasa Labs LLC, Peoria, Arizona, United States.