Privacy Policy

Effective September 29, 2026

Scope

This policy describes information handled through the MM Apex Hub Operational Playbook website and MM Apex Hub app. Stripe's checkout and other services you choose to use have their own privacy notices.

Information we handle

When a company purchases access, we may keep its name, a Stripe payment reference, and approved employees' work email addresses to manage the license. When someone requests a sign-in code, the app processes their email address, a protected code record, request timing and attempts. A successful sign-in creates a session record and an essential session cookie. Hosting services may process IP address, browser and request information needed to deliver and protect the site.

Payment details are entered on Stripe checkout, not in the Playbook app. Stripe may provide us with transaction and purchaser details needed to administer an order. See Stripe's privacy notice for its handling of checkout data.

Personal Command Center information

For individual Personal Command Center purchasers, we store your approved email and verified payment reference. Your resume details, work history, interview notes, career plans, application tracking and leadership goals are saved in your individual workspace. They are not shared with company app users. Authorized service administrators may access data as needed to operate and support the service. Contact us to request deletion. Do not include sensitive identity documents or passwords.

Workspace data and cloud saving

For the designated company owner, the app sends business profile details, checklist progress, worksheet entries, supplier and customer records, financial inputs, tasks and reviews to our hosted database to save and restore the company workspace. Other approved employee accounts continue to save their work only in their browser. A pending recovery draft may be kept on the owner's device. Older browser entries are uploaded only when you choose to import them. Do not enter passwords, recovery codes or payment-card details.

Company owners and people with authorized service administration or hosting access may have access as needed to operate, support and protect the service. Exported backups are under your control. Keep shared devices secure and sign out when finished.

How we use and share information

We use this information to verify purchases, approve company access, send sign-in codes, maintain sessions, save and restore owner workspaces, respond to requests, and protect the service. Stripe handles payment checkout; Resend sends sign-in emails; our hosting provider operates the site and database. We may disclose information when required by law or needed to protect rights and security. We do not use this Playbook site to sell personal information or show targeted advertising. See Resend's privacy notice.

Company usage reporting

For approved app users, we record the company, approved email address, visit times and workspace sections used to understand product usage and support customers. Only the site owner can view the company usage report. We do not collect worksheet answers, keystroke contents or financial values for this reporting. Visits are grouped after 30 minutes without recorded activity. Usage history is retained for up to 90 days, with older records removed on subsequent tracking requests.

Cookies, security, and retention

The app uses an essential, secure sign-in cookie. Sign-in codes expire after 10 minutes; sessions expire after seven days unless ended earlier. Technical code records may remain until replaced or removed. We retain saved workspaces while needed to provide the service or until a verified deletion request is completed, subject to necessary legal retention. We retain company and approval records while needed to administer access and keep transaction records as needed for business or legal purposes. We use safeguards appropriate to the information, but no service can promise absolute security.

Your choices and contact

You can export a workspace backup from the app. Clearing browser storage removes local copies but does not delete cloud-saved work. Contact us to request deletion of your cloud workspace. A company administrator can request changes to employee access. For access, correction, deletion, or other privacy questions, contact Contact support. We will consider requests under applicable law and may need to verify your identity.

This service is intended for businesses, not children. We will update the effective date when this policy changes.