Privacy — MRRLens

We collect as little as possible, and we do not sell or share personal data for advertising. This policy covers mrrlens.com for visitors in the European Union (GDPR), Brazil (LGPD) and elsewhere.

Who is responsible

The controller is Albion Ltda (Brazil). Privacy requests: hello@mrrlens.com.

What we store, and why

Your e-mail address, when you sign in or pay — to send sign-in links, receipts and the alerts you set up (performance of a contract).
Your passes, subscription status and alerts — to give you access (contract).
A session cookie (ml_sess), set only after you sign in, start a checkout or use the founder flow. Public pages set no cookies.
A salted hash of your IP address, kept in memory for rate limiting (legitimate interest: preventing abuse).
Founder verification results — the MRR figure, number of subscriptions, currency and date (consent, by verifying).

What we never store

Card data (handled by Stripe).
Stripe keys pasted in the founder flow.
Names of reviewers or authors of public threads. Quotes are kept with a link to the original.

Processors

Stripe — payments and billing portal.
Resend — sends sign-in links and alerts.
Telegram — only if you connect it for alerts.
Cloudflare — delivers the site and protects it from attacks; it processes IP addresses to do so.
Our language-model provider — reads public reviews and public threads to classify them. No personal data of our users is sent to it.

Some processors are outside your country (for example in the United States); transfers rely on their standard contractual clauses. No analytics or advertising trackers run on this site.

How long

Account data is kept while your account exists and deleted within 30 days of a deletion request. Payment records are kept as long as tax law requires. Server logs rotate within 30 days.

Your rights

You can ask to access, correct, export or delete your data, to object to processing, or to withdraw consent, by writing to hello@mrrlens.com. We answer within 15 days. You may also complain to your data protection authority (in Brazil, the ANPD; in the EU, your national authority).

People mentioned in public sources

Reviews and threads are public posts; MRRLens keeps their text and link, never the author’s name. To have a quote removed, write to the address above with the page and the quote.