Privacy Policy

1Purpose & Relationship to Other Policies

This Privacy Policy explains how Chic Geek Enterprises LLC, doing business as MultiMissionaire™ ("CGE," "MultiMissionaire," "we," "us," or "our"), processes personal information in connection with MultiMissionaire™ and The GeekLink CRM platform that powers it (together, the "Services").

This Policy supplements the general Chic Geek Enterprises Privacy Policy. The general policy governs Chic Geek Enterprises websites, inquiries, marketing preferences, billing, account administration, and CGE's own business records. This Policy governs information placed into, collected through, or generated by the Services. If the policies conflict regarding Customer Data processed through the Services, this Policy controls.

The applicable Subscription Terms, Order Summary, Usage Rate Schedule, Acceptable Use requirements, and any signed statement of work remain part of the customer agreement. This Policy does not reduce contractual privacy or confidentiality protections. See the MultiMissionaire™ Terms and Conditions.

2Key Definitions

3Our Role and the Customer's Role

When CGE acts for its own business purposes

CGE acts as the business or controller when it determines why and how information is used for account creation, billing, fraud prevention, service security, support administration, legal compliance, product administration, and CGE's direct communications with Customers and authorized users.

When CGE processes Customer Data

For Customer Data processed through an Account or Sub-account, the Customer generally determines the purpose and means of processing, and CGE acts as a service provider or processor on the Customer's documented instructions. The Customer is responsible for its own privacy notice, lawful basis, permissions, consent records, data accuracy, retention choices, and responses to Customer Contacts.

CGE will process Customer Data only to provide, maintain, secure, support, troubleshoot, export, and improve the Services; comply with documented Customer instructions; prevent misuse; or meet legal obligations.

4Information We Process

• Account and identity information, including names, business names, job titles, usernames, authentication details, contact information, authorized-user roles, and access history.
• CRM customer records, including contact details, notes, tags, pipeline stages, appointments, forms, surveys, transactions, preferences, consent records, and Customer-defined fields.
• Customer-contact data collected directly, imported by the Customer, received through an integration, or generated through forms, websites, calendars, payment activity, automations, and customer service interactions.
• Communications Data for email, SMS, MMS, telephone, voicemail, chat, and other supported channels, including delivery, bounce, opt-out, complaint, and carrier-status information.
• Content and files, including templates, documents, images, recordings, transcripts, workflow inputs and outputs, and materials uploaded or created through the Services.
• Billing and usage information, including plan, entitlements, communication volume, metered feature use, invoices, payment status, subscription events, and usage-wallet activity. Full payment-card details are generally handled by payment providers rather than stored directly by CGE.
• Device, log, and security information, including IP address, browser and device attributes, timestamps, session activity, diagnostic events, audit trails, and suspected-abuse indicators.
• AI-enabled inputs and outputs, including prompts, source material, generated content, summaries, classifications, transcripts, and feedback when a Customer enables or requests an AI-assisted feature such as System Scribe™ or AI Ready Check Go™.
• Support and implementation information, including requests, meeting notes, configuration decisions, migration files, troubleshooting data, and communications with CGE personnel.

5Sources of Information

We receive information from Customers and authorized users; Customer Contacts who interact with Customer forms, pages, calendars, messages, or calls; integrations enabled by a Customer; payment and communications providers; security and fraud-prevention services; and automatically through use of the Services.

Customers must not import purchased, rented, scraped, unlawfully appended, or otherwise unauthorized contact data. Customers represent that they have the right to submit and instruct processing of all Customer Data.

6How We Use Information

• Provision and administer Accounts, Sub-accounts, users, permissions, plans, and entitlements.
• Store, organize, synchronize, route, display, and export Customer Data as directed.
• Deliver forms, funnels, calendars, pipelines, workflows, receipts, reminders, campaigns, and other Customer-configured functions.
• Send and receive communications, confirm consent and opt-out signals, assess deliverability, calculate usage, and apply carrier or provider requirements.
• Provide onboarding, migration, implementation, support, training, quality assurance, and troubleshooting.
• Protect Accounts, prevent fraud and abuse, enforce agreements, investigate incidents, and preserve service integrity.
• Administer billing, renewals, cancellations, refunds where applicable, metered charges, and account status.
• Maintain, evaluate, and improve service reliability, accessibility, usability, and performance using minimized, aggregated, de-identified, or operational data where reasonably possible.
• Comply with law, lawful process, recordkeeping duties, and enforceable requests from authorities.

7Sub-Accounts and Access Controls

Customer administrators control who may access each Account and Sub-account and are responsible for assigning appropriate roles, removing former users, protecting credentials, and maintaining internal separation between brands, clients, teams, or operating units.

CGE personnel may access Customer Data only when reasonably necessary for authorized implementation, support, security, billing, abuse prevention, legal compliance, or maintenance. Access may be logged or otherwise controlled according to the capabilities available within the Services.

A Customer's use of multiple Sub-accounts does not create separate legal controllers unless the Customer has independently established that relationship. The Customer must identify which business is responsible for each Customer Contact and provide any required disclosures.

8Communications Data and Consent

The Services may process email, SMS, MMS, telephone, voicemail, chat, and related Communications Data. Communications may involve telecommunications carriers, email-delivery networks, registration authorities, verification providers, and other Service Providers.

Customers are responsible for lawful recipient consent, do-not-contact and opt-out compliance, list provenance, calling and quiet-hour restrictions, sender identification, recording or transcription notices, and the content and timing of communications. CGE may retain consent, suppression, complaint, and delivery records when reasonably necessary to honor preferences, document compliance, protect recipients, and prevent repeated unlawful contact.

Call recording, transcription, automated dialing, AI-assisted calling, or similar features must not be enabled unless the Customer has determined that the feature is lawful for every relevant jurisdiction and has implemented the required notice or consent.

9AI-Enabled Processing

Some Services — including System Scribe™ and AI Ready Check Go™ — use artificial intelligence or automated tools to draft, summarize, classify, transcribe, recommend, search, or otherwise assist with Customer-directed work. AI output may be incomplete, inaccurate, biased, or unsuitable for a Customer's purpose and must be reviewed by an authorized person before consequential use.

When a Customer enables or requests an AI feature, relevant prompts, source material, Customer Data, and outputs may be transmitted to an AI Service Provider solely to perform that feature, subject to applicable provider terms and safeguards.

CGE does not sell Customer Data or intentionally use identifiable Customer Data to train generalized AI models for CGE's independent benefit. If a future feature would use Customer Data for model training beyond delivering the Customer-requested service, CGE will provide a separate disclosure and obtain any consent required by law or contract.

Customers must not place highly sensitive or regulated information into an AI feature unless the applicable Order Summary or signed agreement expressly authorizes that data type and appropriate safeguards are in place.

10Data Ownership, Intellectual Property & De-Identified Data

As between CGE and the Customer, the Customer owns Customer Data and Customer-supplied materials. The Customer grants CGE and its Service Providers a limited right to host, copy, transmit, transform, display, and otherwise process Customer Data only as reasonably necessary to provide and govern the Services.

Customer ownership of Customer Data does not transfer ownership of The GeekLink CRM, MultiMissionaire™, CGE methods, templates, documentation, configurations, independently developed improvements, or proprietary and multi-step workflows developed through Chic Geek Enterprises, The GeekLink, or MultiMissionaire™ teams. Data portability and workflow transfer are governed separately by the applicable Subscription Terms.

CGE may create and use aggregated or de-identified information that does not reasonably identify a Customer or individual to analyze service performance, security, capacity, and product improvement. CGE will not attempt to re-identify that information except to test de-identification or protect the Services.

11Sharing and Disclosure

We disclose information only as reasonably necessary for the purposes described in this Policy, including to:

• Service Providers and Subprocessors that support platform infrastructure, hosting, storage, communications, payments, analytics, integrations, security, customer support, and AI-enabled features;
• Customer administrators and authorized users according to the permissions and instructions configured by the Customer;
• professional advisers, auditors, insurers, and financing or transaction advisers subject to appropriate confidentiality obligations;
• government authorities, courts, regulators, or other parties when required by law or reasonably necessary to protect rights, safety, security, or service integrity; and
• a successor or transaction participant in connection with a merger, financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate confidentiality and continued protection.

We do not sell Customer Data. We do not share Customer Data for cross-context behavioral advertising. Chic Geek Enterprises' website analytics and marketing practices are addressed in the general Chic Geek Enterprises Privacy Policy.

12Service Providers and Subprocessors

The Services depend on specialized providers. The categories below describe the operational processing they may perform. The specific provider used may vary by feature, geography, integration, or Customer configuration.

A current list of material Subprocessors is available through the applicable legal page, member environment, or upon request through our Contact Us page. Where required by contract or applicable law, CGE will provide notice before adding a new material Subprocessor and will provide a reasonable process for documented objections based on legitimate data-protection concerns.

13Customer-Enabled Integrations and Third-Party Destinations

Customers may connect third-party applications or direct data to external services. Once Customer Data is transmitted to a Customer-selected third party, that third party's terms and privacy practices govern its processing. Customers are responsible for reviewing integrations, limiting permissions, and disabling connections no longer needed.

CGE is not responsible for a third party's independent processing merely because the Customer connected that service to The GeekLink CRM.

14Security and Incident Response

CGE uses reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, use, alteration, disclosure, or destruction. Safeguards may include access controls, authentication, encryption in transit where supported, monitoring, vendor governance, backups, and personnel confidentiality requirements.

No service can guarantee absolute security. Customers must use strong credentials, multi-factor authentication where available, least-privilege access, secure devices, timely user removal, and appropriate internal procedures.

If CGE confirms a security incident affecting Customer Data, CGE will investigate, contain, remediate, and notify affected Customers without unreasonable delay as required by applicable law or contract. Customers remain responsible for notifications to their Customer Contacts or regulators unless law assigns that duty to CGE.

15Data Retention, Export, Deletion & Account Closure

CGE retains Customer Data while the subscription is active and as needed to provide the Services, comply with law, resolve disputes, prevent fraud, maintain suppression or consent records, and enforce agreements.

Unless an Order Summary or signed agreement states otherwise:

• Customers may request or perform a standard export of supported Customer Data while the Account is active.
• After termination, CGE may provide a limited export window of up to 30 days if the Account is accessible, all undisputed charges are paid, identity and authority are verified, and the requested format is technically supported.
• After the export window, Customer Data may be scheduled for deletion from active systems. Residual copies may remain in backups, logs, legal holds, suppression records, or provider systems for up to 90 additional days or longer when required by law, security, fraud prevention, or technical constraints.
• Deletion may not be immediate or complete where data has been de-identified, included in immutable records, retained by a Customer-enabled third party, or lawfully preserved for compliance or dispute purposes.
• Custom exports, migration assistance, agency coordination, workflow review, reconstruction, redaction, or transfer support may require a separate scope and fee.

Direct transfer of Accounts, Sub-accounts, integrations, automations, phone numbers, domains, or workflows is subject to verification, compatibility, provider rules, security review, intellectual-property boundaries, and the applicable Subscription Terms. Transfer is not guaranteed.

16Individual Privacy Rights

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, objection, or information about certain disclosures; to withdraw consent; or to appeal a privacy decision. We will not unlawfully discriminate against a person for exercising applicable privacy rights.

For Customer Data, the Customer is ordinarily the correct first contact because the Customer determines why the data is processed. If CGE receives a verified request concerning Customer Data, CGE may direct the requester to the Customer, notify the Customer, and assist as required by contract or law.

Requests concerning CGE's own account, billing, support, or marketing records may be submitted through our Contact Us page. We may verify identity and authority before acting and may retain a record of the request. Authorized agents must provide proof of authority where required.

Where legally required and technically applicable, CGE will recognize valid browser-based opt-out preference signals for activities governed by the general Chic Geek Enterprises Privacy Policy. Customer campaign and CRM preferences must be submitted to the applicable Customer or through the unsubscribe, STOP, or preference mechanism provided in the communication.

17Sensitive Information & Regulated Uses

The Services are not designed by default for protected health information, government identification numbers, precise financial-account credentials, biometric templates, children's data, or other highly sensitive or specially regulated information.

Customers must not submit or process regulated or highly sensitive data unless a signed agreement expressly authorizes the use case, identifies the parties' responsibilities, and confirms that required safeguards and vendor terms are in place. General availability of a field, form, note, recording, AI feature, or integration does not constitute approval for a regulated use.

18Children's Privacy

The Services are business tools and are not directed to children under 13. CGE does not knowingly collect Personal Information directly from children through its own account-registration process. Customers that process information about minors must establish a lawful basis, obtain required parental or guardian authorization, use age-appropriate notices, and configure the Services responsibly.

19International Processing & Transfers

CGE is based in the United States, and the Services and their providers may process information in the United States and other countries. Privacy protections may differ across jurisdictions.

Where applicable law requires a transfer mechanism, the parties will use an appropriate contractual or legal safeguard. Customers with material international or regulated processing requirements should request a separate data-processing agreement through our Contact Us page before submitting affected data.

20Business Continuity, Legal Requests & Compelled Disclosure

CGE may preserve or disclose information when reasonably necessary to comply with law, enforce agreements, protect rights or safety, investigate fraud or abuse, or respond to valid legal process. Where legally permitted, CGE will direct a request for Customer Data to the Customer or notify the Customer before disclosure.

CGE may reject requests that are invalid, overbroad, technically infeasible, conflict with another person's rights, or are not supported by required verification, while honoring all non-waivable legal obligations.

21Changes to This Policy

CGE may update this Policy to reflect legal, security, vendor, product, or operational changes. Material changes will be communicated through the Account, email, this page, or another reasonable channel before or when they take effect, as required by law. The effective date at the top identifies the current version.

If a material change expands CGE's independent use of Customer Data, CGE will provide additional notice and obtain consent where required.

22Contact and Privacy Requests

Questions, privacy requests, or concerns may be submitted through our Contact Us page. Please identify whether your request concerns CGE's own records or data held within a specific Customer's MultiMissionaire™ or The GeekLink CRM Account.

Do not submit sensitive Customer Data, passwords, full payment-card numbers, or government identification numbers through the contact form.

23Our Data-Processing Commitments

When CGE acts as a processor or service provider for Customer Data, CGE will:

• process Customer Data only on documented Customer instructions, including instructions established by the agreement and the Customer's use of configured features;
• ensure personnel authorized to process Customer Data are subject to appropriate confidentiality obligations;
• implement reasonable safeguards appropriate to the nature of the Services and the information processed;
• engage Subprocessors under obligations designed to protect Customer Data and remain responsible for their processing to the extent required by applicable law or contract;
• reasonably assist the Customer with verified privacy requests, security incidents, and data-protection obligations, considering the nature of the processing and information available to CGE;
• delete or return Customer Data after service completion according to Section 15, unless law requires continued retention;
• make information reasonably necessary to demonstrate these commitments available under appropriate confidentiality and scope controls; and
• notify the Customer if CGE believes a documented instruction violates applicable data-protection law, unless prohibited from doing so.