Privacy policy

1. Who we are

Murmo is operated by Wondalabs, a company ("Murmo", "we", "us" or "our"). This policy covers the Murmo website at murmo-app.com and the Murmo application at app.murmo-app.com.

For privacy questions and requests, email support@murmo-app.com.

2. Information we collect

What we collect depends on how you use Murmo and which features your Hub uses. We collect information you provide directly, information supplied by authorised Hub users and information generated when you use the service.

• Website registrations: your email address, optional first name, registration date and a record of your consent to launch news and the newsletter. Registering interest does not create an application account.
• Accounts: your name, email address, profile details, sign-in identity, authentication records, preferences and Hub memberships.
• Hub and project records: information entered or uploaded by you or an organiser, such as contact and organisation details, roles, availability, shifts, attendance, travel and accommodation arrangements, forms, qualifications, accreditation and communications.
• Sensitive information: a Hub may record dietary, accessibility, health or emergency-contact information where relevant to its activities. Organisers should collect only what is necessary, explain the purpose and obtain consent where required.
• Support: messages, attachments and relevant account or project information provided when seeking help.
• Technical information: IP address, browser and device information, request times, error and security logs, and records of relevant activity. We use cookies or similar browser storage for sign-in sessions, security and preferences.

If you provide information about someone else, you are responsible for having an appropriate basis to do so and making relevant privacy information available to them.

3. How we use information

We use personal information to create and secure accounts; provide Hub and project workflows; coordinate people, plans and communications; respond to support requests; troubleshoot and improve the service; prevent misuse; and meet applicable legal obligations.

We use website newsletter registrations for the launch news and newsletter you requested. Account creation or accepting a Hub invitation does not, by itself, subscribe you to that newsletter. Operational messages, such as invitations and account-security notices, serve a different purpose.

We do not sell personal information or use Google sign-in information for targeted advertising.

4. Google sign-in

If you choose Google sign-in, where available, Google provides your account identifier, email address and basic profile information, such as your name and profile picture. Supabase processes the sign-in response and manages your Murmo session.

We use this information to identify you, create or connect your Murmo account and let you sign in. Murmo does not receive your Google password. Our Google sign-in integration requests basic identity, email and profile access; it does not request access to Gmail messages, Google Drive files, contacts or calendars.

Murmo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can review or remove Murmo's access through your Google Account connections. Removing access may stop Google sign-in working for you; it does not automatically delete your Murmo account or records held by a Hub. Contact us about account deletion.

5. Hubs and shared information

A Hub is a workspace managed by an organiser or organisation using Murmo. Hub administrators decide which records to collect, who can access them and how they are used for their activities. Your information may be visible to authorised administrators, coordinators or other participants according to the feature and access permissions.

For Hub records, we provide the service that stores and processes information for the organiser. The organiser is responsible for its collection practices, permissions, notices and decisions. We also manage account, security and support information for operating Murmo.

An account can have access to more than one Hub. A login identity and a person's record in a Hub are distinct. Removing membership or deleting an account does not necessarily remove records an organiser needs to retain about its activities. Contact the relevant Hub administrator about those records, or ask us for help identifying the right contact.

6. Service providers and sharing

We use service providers to operate Murmo, including:

• Supabase: database, authentication, file storage and backend services.
• Vercel: website and application hosting and delivery.
• Resend: delivery of application emails, including necessary recipient and message information.
• Google: optional Google sign-in and, where used, mapping and place-search services. Opening maps or submitting a place search can send technical information and search details to the mapping provider.

We share information with providers as needed for these services, with authorised Hub users for the relevant workflow, when you direct us to do so, and where necessary to comply with law or protect the service and people's rights or safety. Providers also handle information under their own applicable privacy terms.

7. Storage and security

Murmo's primary Supabase database is hosted in Sydney, Australia. Our hosting, authentication, email and other providers operate internationally, including in the United States. Depending on the service, personal information may be processed or accessed outside Australia for delivery, support, logs or backups. The primary database location is not a guarantee that all processing stays in Australia. Contact us for further information about relevant provider locations.

We use measures such as encrypted connections, authentication, access permissions and restricted backend credentials to protect information. Authorised support access may be needed to investigate a problem or maintain the service. No online system can guarantee absolute security.

8. How long we keep information

We keep information for as long as reasonably needed for the purposes described in this policy, including providing the service, meeting legal requirements, resolving disputes and protecting security. The period depends on the record, its use and applicable obligations.

Hub records may need to be retained by the organiser even after a participant leaves. Deletion can also be subject to recovery periods and backup cycles; it may not remove every copy immediately. We assess deletion requests against these needs and explain any material limits.

If you unsubscribe from marketing, we may keep a limited record of your opt-out so that we can respect it.

9. Your choices and requests

Email support@murmo-app.com to request access to, correction of or deletion of your information or account, or to raise a concern about its use. We may verify your identity and ask for enough detail to locate the relevant information. Requests may be subject to applicable legal requirements and exceptions.

For information controlled by a Hub organiser, contact that organiser first. We can help route your request. If a request cannot be fulfilled, we will explain the reason where permitted.

You can withdraw newsletter consent by contacting us; future marketing emails will also include an unsubscribe option. You can control cookies and browser storage through your browser settings, although blocking essential storage may prevent sign-in or other features from working. You can choose not to provide optional information; withholding information required for a workflow may limit your participation.

10. Privacy questions and complaints

Contact Wondalabs at support@murmo-app.com with a description of your concern and how we can respond. We will review the concern, request further information if needed and respond within a reasonable period.

If your concern remains unresolved, you may contact the relevant privacy regulator. In Australia, information about making a privacy complaint is available from the Office of the Australian Information Commissioner, subject to its jurisdiction and complaint requirements.

11. Changes to this policy

We may update this policy as Murmo and its information-handling practices change. The latest version will be available on this page with its updated date. Where required, we will provide additional notice of material changes.