M3 Multimedia
Draft. This page is a plain-language description of how the platform works, written while the product is in pre-launch. It has not been reviewed by a lawyer and it is not the final agreement.
Privacy
The short version
We hold account details for the people who sign in, and the websites they build. We do not hold their customers’ enquiries, their visitors’ details, or anyone’s payment information. Contact-form submissions from a published site never reach us at all.
What we store
- Your account. Email address, name, the agency you belong to, your role, and when you signed in. If you sign in with Google we receive your email address and basic profile only — nothing else from your Google account.
- Your sites. The content of each website you build, as data: wording, image references, menus, colours, and the version history of every change.
- Your provider keys. Encrypted, write-only. See below.
- An activity log. Who did what and when — sign-ins, key changes, publishes, approvals. IP addresses are stored only as an irreversible hash.
What we never receive
- Contact-form submissions from published sites. A published site’s form posts straight from the visitor’s browser to the form provider you connected, with your own key. There is no endpoint of ours in that path, no copy in our database, and nothing in our logs. We could not show you a list of your leads if you asked, because we have never held one.
- Site visitors. We run no analytics, no tracking and no scripts of ours on any published site.
- Card details. We take no payments in this version.
Your own keys, and your own bills
The platform is bring-your-own-key. You connect your own accounts — Anthropic for generation, Vercel for hosting, Vercel Blob for images, a form provider for enquiries — and everything runs on them. Each key is encrypted with a key of its own before it is stored, we display only the last four characters, and no screen, log or export anywhere in the product can show you a whole key back. Every provider charge goes to your account, billed by that provider to you.
Who can see your data
Each agency’s data is isolated at the database level, not by application code: a query made in your session can only return your own agency’s rows. A client you invite sees only the sites you have granted them and nothing else — not your other clients, not your keys, not your other sites. We can access an agency’s data for support, and any such access is written to the activity log.
Your data is yours
The websites you build, the content in them and the enquiries they generate belong to you and your clients. Published sites live in your hosting account and images in your storage, so the live result of your work is not hostage to your account with us. Ask and we will export your site data; ask and we will delete your account and everything in it.
How long we keep things
Account and site data for as long as you have an account. The activity log for 24 months. Job records are trimmed after 90 days. There is no retention period for form submissions because there are none to retain.
Third parties
We use Supabase for the database and sign-in, Vercel for hosting this platform, Railway for background jobs, and Resend to send invitation and password emails. Google is involved only if you choose to sign in with it. The providers you connect yourself are your relationships, under their terms, not ours.
Questions about any of this: hello@m3multimediagroup.com.