This Privacy Policy describes how mmntm ("we", "us", "our") collects, uses, and protects personal information when you use the mmntm platform ("Platform"). mmntm is operated from the Kingdom of Bahrain. (Company registration is in progress; our commercial registration number and registered address will be added here once incorporation is complete.) We handle personal data in line with Bahrain's Personal Data Protection Law (Law No. 30 of 2018) (the "PDPL").
mmntm is currently in Early Access. The Platform is still evolving, so you may occasionally encounter bugs, interruptions, or errors. We are grateful for your patience — please report anything that looks wrong to support@mmntm.social.
1. Information We Collect
Account information: When you register, we collect your name, email address, phone number, and role (Business or Creator).
Profile information: Businesses provide legal name, commercial registration number, venue details, and contact information. Creators provide social media handles, follower counts, profile photos, and demographic information used for campaign matching.
Social profile data: To verify Creator statistics, we may retrieve publicly available information about the social account you give us — such as follower count and whether the account is public — through a third-party data provider. We do not access private content or messages, and we never post on your behalf.
Campaign data: We collect information about campaigns you create or participate in, including reservation times, check-in records, and content submission links.
Payment records: We collect payment method, reference numbers, and proof of payment documents. We do not collect or store card numbers or bank credentials.
Usage data: We may collect standard technical data including IP address, browser type, and pages visited for platform security and performance purposes.
2. How We Use Your Information
- To operate, maintain, and improve the Platform.
- To verify account eligibility and approve registrations.
- To match Creators with suitable campaigns based on profile data.
- To process and verify campaign payments.
- To send transactional emails and in-platform notifications about your account and campaigns.
- To detect and prevent fraud, abuse, and policy violations.
- To comply with applicable legal obligations.
We rely on the following legal bases: performing our agreement with you (to run your account and campaigns), your consent (for anything optional), compliance with legal obligations, and our legitimate interest in operating and securing the Platform.
3. Sharing Your Information
We do not sell your personal data. We share information only in the following circumstances:
- Within the platform: Businesses see aggregated campaign attendance data. Creator names and slot times are visible to the Business running a campaign they participate in.
- Service providers: We use Supabase (database hosting), Vercel (platform hosting), Resend (transactional email), and Scrape Creators (retrieving publicly available social profile metrics). These providers process data only as necessary to deliver their services.
- Legal requirements: We may disclose information if required by law or in response to valid legal process.
International transfers: Some of these providers store or process data on servers outside Bahrain (for example, database hosting in Australia and email delivery from the United States). Where your data is transferred abroad, it is only to deliver the Platform to you, and we take reasonable steps to keep it protected. By using the Platform, you consent to this transfer.
4. Data Retention
We retain your account data for as long as your account is active. Campaign records are retained indefinitely as part of platform history and compliance records. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law. During Early Access, data may also be cleared or migrated as the Platform develops.
5. Security
We use industry-standard security measures including encrypted data transmission (HTTPS), access controls, and authentication provided by Supabase. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.
6. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal retention requirements.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with Bahrain's Personal Data Protection Authority if you believe your data has been mishandled.
To exercise these rights, contact us at info@mmntm.social.
7. Cookies
The Platform uses essential session cookies necessary for authentication and security; these are always on. We also use analytics and advertising cookies (for example, Google Analytics and Meta) to understand how the Platform is used and to measure campaigns. Non-essential cookies load only with your consent: on your first visit you will see a cookie banner where you can accept or decline, and you can change your choice at any time. Declining does not affect essential functionality.
8. Children
The Platform is not directed at persons under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date. Continued use of the Platform after changes constitutes acceptance of the revised policy.
10. Contact
For privacy-related questions or requests, contact us at info@mmntm.social.