Privacy & Cookie Policy

Who this is for

MMM Hub is an internal time-tracking and time-off tool used by our virtual-assistant team, the clients they are assigned to, and agency admins. Accounts are created by an admin; the portal is not open to public sign-up.

What we collect

• Account details — your username, display name, role, active status, and an optional profile photo.
• Work records — time entries, timer activity, and time-off / leave requests you submit.
• Messages — chat messages and any files you attach within the portal.
• Technical data — the authentication session stored in your browser to keep you signed in.

We do not collect payment, billing, or rate information, and we do not run advertising or third-party analytics trackers.

How we use it

Your data is used only to operate the portal: recording hours, managing time-off, enabling team chat, and showing admins and assigned clients the work relevant to them. Access between clients is isolated at the database level so one client cannot see another's data.

Cookies

We use strictly necessary cookies only. These are the authentication session cookies set by our auth provider to keep you logged in and to protect your session. They are HTTP-only and sent only over HTTPS. We do not use advertising, marketing, or analytics cookies, so there is nothing optional to consent to. Clearing these cookies or signing out removes them.

Who processes your data

• Supabase — database, authentication, and file storage. Passwords are stored only as salted bcrypt hashes.
• Vercel — application hosting and HTTPS delivery.
• Resend — sends administrative notification emails to agency admins.

Instagram

When an Instagram Business or Creator account is connected to MMM Hub, we keep that account's ID, username and an access token, and use them only to publish the posts your team schedules and approved in the portal, at the time you set, and to save the link to the published post. We don't read your messages, followers or other content, and we don't sell or share this data.

You can disconnect at any time from the portal's Accounts page, or by removing MMM Hubin Instagram (Settings > Website permissions > Apps and websites). Either way the token and connection details are deleted. See data deletion.

Retention & your rights

Records are kept for as long as your account is active and as needed for the agency's operational and record-keeping needs. To access, correct, export, or delete your data, or to deactivate your account, contact your agency admin.

Contact

Questions about this policy? Reach out to your agency admin, who manages all accounts and data for the portal.