Privacy Policy

Effective September 28, 2026 · Last updated September 28, 2026

This policy explains what MRGNZ LLC, doing business as MRGNZ ("MRGNZ", "we"), collects, how we use it, and your choices. It covers (a) subscribers — business owners and their team members who use the MRGNZ app, and (b) invoice recipients — customers of those businesses who receive an invoice by email or text or open an invoice link. It applies to mrgnz.com, mrgnz.com and related services.

1. Information we collect

From subscribers

• Account information: name, email address, password (stored hashed), and team member emails you add.
• Business information: business name, address, phone, email, logo, tax rate, payment terms.
• Financial data you enter: revenue, costs, assets, liabilities and activity figures by month.
• Invoice data: line items, amounts, notes, and your customers' names, emails, phone numbers and job addresses.
• Payment information: handled by our checkout provider (Commas). We receive confirmation of payments, the email used, amounts and dates. We do not receive or store full card numbers.
• Device and usage data: browser type, device type, IP address, pages used, approximate location from IP, error logs, and notification subscription tokens if you turn on notifications.

From invoice recipients

• Contact details entered by the business that invoiced you (name, email, phone, address).
• If you open an invoice link: the name you type when approving, the time of approval, and standard server logs (IP address, browser).
• Your mobile number is used only to deliver that business's transactional messages to you. Mobile phone numbers and text-messaging opt-in data are never sold, shared or disclosed to third parties or affiliates for their marketing or promotional purposes.

2. How we use information

• To provide the Service: calculate margins and reports, store and display your data, create and send invoices, record approvals, deliver notifications.
• To manage accounts and billing, verify payments, and activate or lapse subscriptions.
• To send service communications: account, billing, security and product-change notices. We may send occasional product emails to subscribers, with an unsubscribe link.
• To secure and improve the Service: fraud prevention, debugging, aggregate usage analysis.
• To comply with law and enforce our Terms.

We do not sell personal information. We do not use your financial data for advertising or share it with data brokers.

3. Who we share information with

Service providers that process data on our behalf under contract, only as needed to run the Service:

• Supabase — database, authentication and server functions (data stored encrypted at rest in the United States).
• Vercel — website hosting and content delivery.
• Commas — subscription checkout and payment processing.
• Resend — email delivery, if the business sends invoices by email through MRGNZ.
• Twilio — text-message delivery, if the business sends invoices by text through MRGNZ.
• Google Fonts — web fonts (may log the requesting IP address).

We may also disclose information to comply with legal process, protect rights and safety, or in connection with a merger, acquisition or sale of assets (with notice to subscribers). Data within your account is visible to the account owner and any team members the owner adds.

For invoice recipients: the business that invoiced you is the party responsible for your information. MRGNZ processes it on that business's behalf. To correct or delete your information, contact that business; you may also contact us and we will assist.

4. Text messages and emails

• Text messages sent through MRGNZ are transactional messages from a business you have a transaction with. Reply STOP to any message to opt out; reply HELP for help. Message and data rates may apply; frequency varies by transaction.
• Emails sent through MRGNZ identify the sending business and include a way to contact them. Subscribers' product emails from MRGNZ include an unsubscribe link.
• Subscribers are responsible for having consent before texting their customers. See our Terms of Service, section 5.

5. Cookies and local storage

We use strictly necessary browser storage to keep you signed in, remember which business and month you were viewing, and remember whether you dismissed the install prompt. We do not use advertising cookies or third-party tracking pixels. You can clear browser storage at any time; you will need to sign in again.

6. Data retention

• Subscriber account and business data: for as long as your account exists, and up to 90 days after closure or lapse, then deleted (backups purged on their normal cycle, up to 30 days more).
• Invoice records: as above; the business may export them before closure.
• Payment records: retained as required for tax and accounting purposes (generally 7 years) by us or our payment processor.
• Server logs: up to 90 days.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to your data is restricted by row-level security so that only your account and the team members you authorize can read it. Passwords are hashed. Our staff access production data only to support you or maintain the Service. No method of transmission or storage is 100% secure; notify us immediately at support@mrgnz.com if you suspect unauthorized access. We will notify affected users of a data breach as required by applicable law, including Texas Business and Commerce Code §521.053.

8. Your rights and choices

• Access, correct, export, delete: most data can be edited in the app. For an export or deletion of your account, email us; we respond within 30 days and may need to verify your identity.
• Notifications: turn off in the app or in your device settings.
• Texts: reply STOP. Product emails: use the unsubscribe link. Service and billing emails cannot be opted out of while you have an account.
• California residents have the rights to know, delete, correct, and to opt out of sale or sharing (we do not sell or share personal information for cross-context advertising), and not to be discriminated against for exercising these rights. Texas residents have similar rights under the Texas Data Privacy and Security Act. Residents of other states with privacy laws may have similar rights. To exercise them, email support@mrgnz.com with "Privacy request" in the subject. You may appeal a decision by replying to our response.
• We do not respond to browser "Do Not Track" signals; we do honor Global Privacy Control where required by law.

9. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children under 13; if you believe we have, contact us and we will delete it.

10. International users

The Service is operated from the United States and intended for U.S. businesses. If you use it from elsewhere, your information is transferred to and processed in the United States.

11. Changes

We may update this policy. We will post the new version with its effective date and email account owners about material changes at least 14 days before they take effect.

12. Contact

MRGNZ · 2626 Cole Avenue, Suite 300, Dallas, TX 75204 · support@mrgnz.com