Last Updated: October 11, 2026
MDLMN ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how MDLMN collects, uses, and safeguards your information across our services, including our Chrome Extension and our web platform for business customer messaging (including connected Instagram, Facebook Messenger, and WhatsApp accounts).
MDLMN offers a web platform that lets a business connect its own Instagram professional account, Facebook Page, and/or WhatsApp Business account so that messages from that business's customers appear in one unified inbox. This section explains the data involved when a business connects a Meta (Instagram, Facebook, or WhatsApp) account.
A business owner or authorized admin connects their account through Meta's official login (Instagram Login or Facebook Login for Business) and grants MDLMN permission to receive and respond to that account's messages. We store an encrypted access token so the connection persists; we never ask for or store the account's Instagram or Facebook password.
A business connects its own WhatsApp Business account through Meta's official WhatsApp signup flow, choosing the business phone number it wants to use. WhatsApp messages for that number are sent and received through Twilio, our messaging provider, which connects to Meta's WhatsApp Business Platform on the business's behalf. We never ask for or store the business's Facebook password.
We request only the permissions needed to receive and reply to messages on the connected account. We do not access posts, followers, ad accounts, or other Meta data beyond the messaging scope described here.
A connected business can disconnect its Instagram, Facebook, or WhatsApp account at any time, which stops MDLMN from receiving further messages for that account. To request deletion of message data MDLMN holds, see the "Your Rights," "California Privacy Rights," and "European Users (GDPR)" sections below, or contact us using the details in "Contact Us." MDLMN's use of information received from Meta APIs follows Meta's Platform Terms and Developer Policies.
A business can connect its Google Calendar to MDLMN so that booked jobs and open times stay in one place. Connecting is optional and is done by the business owner or an admin, in their own Google account.
MDLMN asks Google for four permissions:
MDLMN cannot see or change events on any other calendar. For calendars the business chooses only so that MDLMN avoids times it is busy, MDLMN receives busy and free times only, never the details of the events on those calendars.
We read the event details on the Jobs calendar to show the business its booked work, to keep bookings and reminders in step when a job is moved or cancelled in Google, and to offer customers real open times. On the other calendars the business chooses, we read busy and free times only, to avoid offering times when the business is busy. Bookings made through MDLMN, including requests waiting for the owner's approval (shown as tentative), are added to the Jobs calendar with the job and customer details the business needs to do the work.
Separately from Google Calendar, booking hours can come from the business's public Google listing (Google Places), which MDLMN looks up without using the business's Google account.
We use Jobs calendar events to run the business's schedule in MDLMN. If the business turns it on, we also use an AI service to read a job's details so we can link it to the right customer and send that customer the reminders the business has set up. We do not use Google Calendar data for advertising, do not sell it, and do not use it to train or improve general artificial intelligence or machine learning models. Where we use an AI service to read a job's details, we send only what is needed for that one job, only to provide that feature to the business, and the service may not keep or train on it.
The access granted by Google is stored encrypted. We also store the connected Google account's email address and account identifier, and a copy of the Jobs calendar's event details so the business's schedule stays current. Calendar data is shared only with the service providers that run MDLMN for the business (hosting and database, and the AI service described above), only to provide these features, or when the law requires it. MDLMN staff do not read a business's calendar data unless the business asks us to for support, or for security or legal reasons.
A business can disconnect Google Calendar at any time from its Calendar settings in MDLMN, which removes our access at Google (unless the same Google account is still connected to another business in MDLMN) and deletes the stored access and our copy of the Jobs calendar's events. A business can also remove MDLMN's access at myaccount.google.com/permissions; that stops our access, but our stored copy is deleted only when the business disconnects in MDLMN or asks us to delete it. The Jobs calendar and its events stay in the business's Google account. When a customer of the business asks MDLMN to delete their personal data, we also delete the events MDLMN added to the Jobs calendar for that customer's bookings and requests. If MDLMN can no longer reach that calendar (for example, the business connected a different Google account, or the calendar was deleted or unshared), we tell the business, which is then responsible for removing those events. Deleting a business in MDLMN deletes its stored Google Calendar connection and calendar data.
MDLMN's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use the collected information to:
Our service uses Twilio to handle phone calls, text messages, and WhatsApp messages. When you use the extension, or when a business sends or receives WhatsApp messages through MDLMN, data is transmitted to Twilio's servers. Please review Twilio's Privacy Policy for more information.
When a business connects an Instagram, Facebook, or WhatsApp account, MDLMN exchanges data with Meta's messaging APIs (for WhatsApp, through Twilio) to receive and send messages on that account. Please review Meta's Privacy Policy for more information. MDLMN's use of information received from Meta APIs adheres to Meta's Platform Terms and Developer Policies.
Selected phone numbers and text are sent to our API (api.mdlmn.co) to process your requests. This data is used solely to fulfill your request and is not stored permanently.
We use analytics to understand how our websites and extension are used and to improve them:
On consentlink.co and askrupert.co, Google Analytics does not receive the contact details you submit, and the extension’s usage events do not include the phone numbers or text you select. Please review Google’s Privacy Policy and the Microsoft Privacy Statement for more information.
We do not:
We may share data:
We implement appropriate security measures to protect your information:
You have the right to:
If you received text messages from a business using MDLMN and want to access or delete your data (as a message recipient), use that business's privacy request page at consentlink.co/{business}/privacy-request, linked from the privacy notice they shared with you.
Our extension is not intended for users under the age of 13. We do not knowingly collect information from children under 13.
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.
If you have questions about this Privacy Policy, please contact us:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
By using the MDLMN Chrome Extension or platform, or by connecting a messaging account, you consent to this Privacy Policy and agree to its terms.