Privacy Policy

Effective October 22, 2026

Mudroom is operated by Foyer AI, Inc. (“Foyer”, “we”, “us”). This policy explains what personal data we collect when you use the services we run, what we do with it, and the choices you have.

What this policy covers

This policy covers the services Foyer operates:

• the website at mudroom.dev;
• the agent playground at playground.mudroom.dev;
• Mudroom servers we host, and the messages they send to business owners through WhatsApp, Slack or SMS.

Mudroom is also open-source software that businesses can run on their own servers. When a business runs Mudroom itself, the data it handles stays on that business's server and Foyer does not receive it. That business is responsible for that data, and its own privacy policy applies.

What we collect

When you visit mudroom.dev

We use PostHog to measure page views, link clicks, demo engagement, documentation search results and completed demo bookings. We do not set cookies or write to your browser's storage for our website analytics. Requests pass through our own domain, and PostHog may use your IP address to estimate a rough location (country or city). We use temporary visit identifiers and campaign labels to connect a visit with a booking. We do not send booking names, email addresses, meeting links, documentation search text or copied code to PostHog through this instrumentation.

When you book a demo

Cal.com processes the booking details you provide, including your name and email address, so we can arrange the meeting. Our demo page shows Cal.com's booking calendar, which loads from Cal.com and may use browser storage under Cal.com's privacy policy. We receive booking notifications and retain a booking reference, status and pseudonymous visit attribution to measure bookings and subsequent demo or pilot outcomes.

When an AI agent uses the playground

The playground is a public demo for a fictional business. When an agent books, cancels or sends a message there, we receive what the agent sends: typically a name, phone number, email address, the chosen service and time, and any message text. We also see the requesting IP address and the agent's software name, which we use to apply rate limits and to show anonymous request counts on the playground page. Please do not enter real details of other people in the playground.

When a business owner receives messages from Mudroom

Mudroom lets AI agents ask a business owner a question or tell them about a booking, and passes the owner's reply back to the agent. To do this, we process:

• the owner's phone number, or their Slack workspace and channel identifiers;
• the content of messages between agents and the owner, including any booking details they contain (for example a customer's name, phone number, email address, service and time);
• delivery information from the messaging provider, such as whether a WhatsApp message was delivered or read, and the time of each message.

When you contact us

If you email us, we receive your email address and whatever you write.

WhatsApp messages

Mudroom sends WhatsApp messages through Meta's WhatsApp Business Platform. We only message the phone number a business owner gives us during setup to receive Mudroom notifications. The owner can stop these messages at any time by asking us, removing their number from their Mudroom setup, or blocking the number.

Meta processes these messages as our service provider and under its own terms and privacy policy. We use WhatsApp data only to deliver messages and route replies. We do not use it for advertising, we do not sell it, and we do not use it to build profiles of anyone.

How we use data

• to run the services: deliver messages, pass replies to the right agent, make and cancel bookings;
• to keep the services safe: rate limiting, preventing abuse and fixing errors;
• to understand which pages and features people use, in aggregate;
• to reply when you contact us;
• to meet legal obligations.

We do not sell personal data, share it for targeted advertising, or use message content to train AI models.

Who we share data with

We share personal data only as needed to run the services, with:

• Service providers that process data on our behalf: Railway (hosting), Meta (WhatsApp), Slack (Slack messages), Twilio (SMS), Google (Google Calendar), Cal.com (demo scheduling) and PostHog (website analytics).
• The business's own tools. When a business connects Square, Google Calendar or another booking system, booking details go to that system so the booking can be made.
• The AI agent in the conversation. An owner's reply goes back to the agent that asked the question, and to no other agent.
• Authorities, when the law requires it, or to protect the rights, property or safety of Foyer, our users or others.
• A buyer or successor, if Foyer is involved in a merger, acquisition or sale of assets. This policy would continue to apply to your data.

How long we keep data

• Message threads between agents and a business owner are deleted 30 days after the conversation closes.
• Playground bookings are cancelled automatically about an hour after they are made. Playground request counts are deleted after 30 days.
• Website analytics are kept according to PostHog's retention settings for our project.
• Emails you send us are kept as long as needed to deal with your request.

We may keep data longer when the law requires it or to resolve a dispute.

Security

Data is encrypted in transit (HTTPS). Access to our servers and provider accounts is restricted to people who need it to run the services. Webhook deliveries from Meta are checked against Meta's signature before we read them. No system is completely secure, but we work to protect your data and will tell affected people about a breach as the law requires.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To use any of these rights, email dennis@mudroom.dev. We will answer within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.

Deleting your data

To have your data deleted, including any data we received through WhatsApp:

1. Email dennis@mudroom.dev with the subject “Delete my data”.
2. Include the phone number, email address or Slack workspace your data is tied to.
3. We will confirm your request, delete the data from our systems within 30 days, and reply when it is done.

The same steps are on our Data Deletion page.

Business owners can also stop WhatsApp messages straight away by removing their number from their Mudroom setup or blocking the sending number.

International transfers

Foyer and its service providers are based in the United States, so your data may be processed there. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

Children

The services are for businesses and are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We will post any changes on this page and update the effective date. If a change is significant, we will give notice on mudroom.dev or by message before it takes effect.

Contact

Foyer AI, Inc.
Email: dennis@mudroom.dev