Privacy Policy — Mutual Friend

1. Introduction

Mutual Friend Productions (“we,” “us,” or “our”) operates the Mutual Friend platform, a portal for Broadway producers and investors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information you provide directly, including:

Account information (name, email address, password)
Profile details (role, organization affiliation)
Investment and financial data you enter into the platform
Documents you upload to data rooms
Communications sent through or connected to the platform
Contact and company records you create or import

We also automatically collect:

Usage data (pages viewed, features used, document access timestamps)
Device and browser information
IP address and approximate location

3. Gmail Integration

If you choose to connect your Gmail account, we access your email data solely to match email threads with contacts and productions in your workspace. We store email metadata (sender, recipients, subject, dates) and message content for matched threads. You can disconnect Gmail at any time from your settings, which stops further syncing. You may also request deletion of all synced email data.

4. How We Use Your Information

Provide and maintain the platform
Authenticate your identity and manage access control
Display investment portfolios, cap tables, and financial reports
Track document views and downloads for producer analytics
Send transactional emails (invitations, notifications, alerts)
Improve and optimize the service

5. Third-Party Services

We use the following third-party services to operate the platform:

Supabase — database hosting, authentication, and file storage
Vercel — application hosting and serverless functions
Google — Gmail API integration (optional, user-initiated)
Resend — transactional email delivery

Each provider processes data in accordance with their own privacy policies. We do not sell your personal data to any third party.

6. Cookies

We use essential cookies to maintain your authenticated session and store your organization preference. We do not use advertising or tracking cookies.

7. Data Retention

We retain your account data for as long as your account is active. When records are deleted within the platform, they are soft-deleted and retained for 90 days before permanent removal. You may request full account deletion by contacting us.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security policies at the database layer, and role-based access controls. Financial data and documents are only accessible to authorized members of your organization.

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your data in a portable format
Disconnect third-party integrations (e.g., Gmail)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at hello@mutualfriendproductions.com.