Privacy Policy

1. Introduction

Munshee is a product of Online Offline LLC, a New Jersey limited liability company (“Online Offline,” “we,” “us,” or “our”). Munshee is software that lets you run your business inside Claude — structured systems for your customers, products, projects, transactions, documents, and more, accessed through a web app and through Claude using the Munshee connector (the “Service”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to our marketing site, the Munshee web app, and the Munshee connector for Claude. Your use of Claude itself is governed by your own agreement with Anthropic; see section 5.

2. Our role: controller & processor

We handle two broad kinds of information, and our responsibilities differ for each:

• Account information — we are the controller. This is information about the people who sign up for and administer Munshee: your name and email, workspace details, billing records, and usage and log data. We decide how this information is used, as described below.
• Customer Data — we are the processor. This is the business information you store in Munshee, including details about your own contacts. You decide what to keep and why; we process it on your behalf to provide the Service. Section 6 describes this in more detail.

3. Information we collect

Information you provide

• Account & identity — your name and email and your workspace and organization details. Sign-in is handled by our authentication provider, WorkOS; Munshee never receives or stores your password.
• Billing — we store your workspace’s plan, its billing status and renewal date, and the customer and subscription identifiers from our payment processor, Stripe. When you subscribe, the billing email you give us (or your account email) goes to Stripe, and the version of our Terms you accepted, and when, is recorded with your subscription at Stripe. Card details are entered directly with Stripe; we never receive or store your full card number. When you open billing in the web app, your card’s brand and last four digits are read from Stripe to show to you; we do not keep them.
• Customer Data — the records you create, import, or upload, including any documents and files. See section 6.
• Early access requests — if you request early access, your email, plus your name if you tried to sign in before we opened. We keep these in our database and on our email list (Brevo) to confirm your request and to send your invite, until you ask us to remove you.
• Support communications — messages and any attachments you send when you contact us, including refund requests.

Information we collect automatically

• Usage data — we count the requests Claude makes through the connector (the calls, not their content) to show you your usage. For product analytics we record events on our websites and in the web app, and, for the connector, which tool ran, how long it took, and whether it worked — never what you asked or the records involved. Usage is not used to set your bill; there are no usage fees.
• Device & log data — IP address, browser and device type, and timestamps, recorded by our hosting providers and analytics for security and diagnostics. Our server logs record the identifier of the signed-in user and workspace for a request; they do not record the contents of your records. Our websites, web app, Claude cards and emails load fonts from Google Fonts (Google LLC), which receives your IP address and browser details when the fonts load, under Google’s own privacy policy.
• Error reports — when something breaks in the web app, the connector, or our back-end functions, a report goes to our error-tracking provider, Sentry. Reports describe the error and where it happened, with record contents removed.
• Cookies & similar technologies — see section 8.

4. How we use information

We use the information above to:

• provide, maintain, and secure the Service;
• authenticate users and prevent fraud or abuse;
• process billing, including counting the people in a Team workspace;
• keep records of your subscription, your payments, and the terms you agreed to;
• send service messages, such as a welcome email when you subscribe, payment receipts, a reminder before the first charge after an early-access workspace’s free months, notice of any change to your subscription’s price, and the date a workspace you deleted will be permanently removed (Stripe sends some of these for us);
• provide support and respond to your requests, including refund requests;
• understand and improve how the Service is used, and find and fix errors;
• comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use Customer Data to train machine-learning models.

Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

5. Claude & the MCP connector

Munshee provides the tools that Claude operates; it is not itself the AI. Claude is a separate service operated by Anthropic, PBC. When you connect your Claude account to Munshee, Claude can read and write your records through our connector, within the access you grant for each system and field (read, write, or ask-first).

When you ask Claude to do something, your request and the specific records needed to fulfill it pass through Anthropic as part of your Claude session. That processing is governed by your own agreement with Anthropic and by Anthropic’s terms and privacy policy, not by this policy.

Munshee makes its own call to Anthropic in one case only: when a saved feature in your workspace includes an analysis step and that feature runs. The records that step reads are then sent to Anthropic to write a short result, with Anthropic acting as our service provider. We do not use Customer Data to train any model.

6. Customer Data

When you store records in Munshee — customers, products, projects, tasks, transactions, documents, conversations, or records in any custom system you define — you are the controller of that data and we act as your processor. We process Customer Data to provide and support the Service and according to your instructions.

You decide what to store, who on your team can access it, and how long to keep it. You can view Customer Data in the web app at any time, and read, change, or delete it through Claude while your workspace has an active plan (or early-access free months). Deleted records move to Trash and can be restored from the web app; see section 9 for how and when they are permanently removed. To get a full copy of your workspace’s data, email us. A workspace’s owner can ask us to delete the whole workspace (see section 9). If you store information about other people in Munshee, you are responsible for having the right to do so and for handling any privacy requests they direct to you as the controller.

7. Sharing & sub-processors

We do not sell personal information. We share it only with the service providers (“sub-processors”) that help us operate Munshee, and only as needed to provide the Service. These providers are bound by contract to protect the data and may not use it for their own purposes. The current sub-processors are:

We may update this list as our providers change, and will provide notice of material changes as required. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice).

8. Cookies & analytics

We use cookies and local storage that are needed to keep you signed in and to keep the Service secure. We also use PostHog for product analytics on our websites and in the web app. On our marketing site it uses no cookies or local storage, and records page views, where visits came from, and clicks. In the web app it sets a cookie and local storage so it can tell visits apart, records page views and clicks, and may record session replays of how pages are used, with all text and everything you type masked, so the contents of your records are not captured. You can block or clear cookies and local storage in your browser settings.

9. Data retention

We keep account information while your account is active. When a workspace is permanently deleted and its owner belongs to no other workspace, we also delete the owner’s sign-in account and Munshee profile. You can also email us to delete your account. Either way, we keep the billing records described below and anything else the law requires. Deleting an account or workspace does not remove usage and analytics data (including the email our analytics provider links to your visits), error reports, server logs, or a early access contact on our email list (sections 3 and 8). Our providers keep these under their own retention settings, and you can email us to have them removed. Backups are covered under Workspace deletion below. We keep billing records and Customer Data as follows:

• Billing records. Records of your subscription and payments, and of which version of our Terms you accepted and when, are kept for as long as tax and consumer-protection rules require — at least three years after your subscription ends — even if you delete your account or workspace. Once a workspace is purged, these records are held by Stripe, our payment provider, and its saved card is removed.
• Workspaces without a plan. If a subscription ends, or an early-access workspace’s free months end without a plan, we keep the workspace and its records so you can pick up where you left off, until the workspace’s owner deletes it.
• Trash. Deleted records are retained for 30 days so you can restore them, then permanently purged automatically. A deleted workspace skips the Trash (see Workspace deletion below).
• Edit history. We keep recent versions of a record (the most recent versions, and any from the last 90 days) so you can review or restore changes; older history is trimmed automatically.
• Activity log. A record of changes (who changed what, and when) is retained for the life of your workspace for audit purposes.
• Workspace deletion. A workspace’s owner can ask us to delete it by emailing us from the address on their account. Within 30 days of confirming the request, we cancel its subscription, permanently delete its files and Customer Data, including Trash, edit history and the activity log, remove its saved card, and end all access to it. Billing records stay with Stripe (see above); other members keep their own Munshee accounts. Backups holding residual copies age out within their retention window.

10. Security

We protect data with encryption in transit (HTTPS / TLS) and encryption at rest provided by our infrastructure providers. Each workspace’s data is isolated using database row-level security keyed to your organization, so one customer cannot access another’s data. Authentication is delegated to WorkOS and we never store passwords; payment details are handled solely by Stripe and we never see full card numbers. File-storage credentials are held only by our servers, uploads use one-time, expiring links, and we apply least-privilege access, strict content-security policies, and security headers across our web surfaces. No method of storage or transmission is perfectly secure, but we work to protect your information and will notify affected users of a breach without undue delay as required by law.

11. International transfers

Munshee is operated from the United States, and we and our sub-processors process information primarily in the United States (and, for some providers, the European Union). If you access the Service from outside these regions, your information will be transferred to and processed in them. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

12. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent. We do not sell or “share” personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

To exercise these rights, email hello@themunshee.com. We will respond within the timeframes required by applicable law, and you may also lodge a complaint with your local supervisory authority. If your request concerns Customer Data that one of our customers holds about you, we will refer you to that customer as the controller.

To have a workspace or your account deleted, or if you can’t sign in, email us from the email address on your account and tell us which workspace it is (section 9). Only a workspace’s owner can ask us to delete the whole workspace. We may need to confirm the request comes from you before we act on it.

13. Children’s privacy

The Service is intended for business use by adults and is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The “Last updated” date above reflects the most recent revision.

15. Contact us

If you have questions about this policy or our privacy practices, contact us at:

Online Offline LLC
Attn: Privacy — Munshee
Jersey City, NJ
United States
hello@themunshee.com