Privacy Policy

Last updated: February 12, 2026

Muhan ("we," "us," or "our") operates the Muhan platform, an IT management solution for managed service providers. This Privacy Policy describes how we collect, use, and protect your information when you use our website and services.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Organization name
• Account credentials (passwords are hashed and never stored in plaintext)

Service Data

When you use the Muhan platform, you may store:

• IT documentation and asset records
• Device information collected through our remote management agent (hostname, operating system, IP address, hardware details, installed software, patch status)
• Credentials stored in the credential vault (encrypted at rest using AES-256)
• Case and ticket records
• Contact and organization data

Usage Data

We automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Feature usage patterns (which tools you use, how often)
• Error and performance data to improve reliability

Waitlist Information

If you sign up for our waitlist, we collect your email address solely to notify you when access becomes available.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the service — powering documentation, remote management, credential storage, and case tracking
• Improve the product — understanding usage patterns to build better features
• Ensure security — detecting unauthorized access, monitoring for threats, and maintaining audit trails
• Communicate with you — sending service updates, security alerts, and responding to support requests

3. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Infrastructure providers — we use trusted cloud hosting providers to run the platform. These providers process data on our behalf under strict contractual obligations.
• Legal requirements — we may disclose information if required by law, court order, or governmental regulation.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

4. Data Security

We take security seriously and implement measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Credential vault entries are individually encrypted with per-record keys
• Role-based access controls and audit logging
• Regular security reviews and monitoring
• Secure password hashing using industry-standard algorithms

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Account data is permanently deleted within 30 days
• Service data (documents, credentials, cases) is permanently deleted
• Backups containing your data are purged within 90 days
• Anonymized, aggregated usage data may be retained for analytics

You may request data export or deletion at any time by contacting us.

6. Cookies and Tracking

We use minimal cookies necessary for the service to function:

• Authentication cookies — to keep you logged in securely
• Preference cookies — to remember your settings (theme, layout)

We do not use third-party advertising trackers. If we use analytics tools in the future, we will update this policy accordingly.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, contact us at the address below.

8. Children's Privacy

Muhan is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, sending a notification through the platform.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@muhan.com