Privacy policywhat Mula collects and why.

Who we are

Mula is operated by Oira-Oira S.R.L., Viale dell’Arte 23, 00144 Roma, Italy ("Mula", "we"). We are the data controller for account information and for how we run Mula; for the content your company connects to its workspace, we act on your company's behalf. For any privacy question, write to [email protected].

What we collect

• Account information: your name, email address, workspace and the details needed to sign you in.
• Content from tools you connect: when you authorize a connector such as GitHub, Notion or Slack, Mula reads only the resources you select.
• Coding-app updates: with the Mula plugin for Claude Code or Codex, the progress updates and handoffs your agent writes when you ask. If you turn on automatic updates for an approved project, your prompts and the agent's final replies in that project. If you keep the history import on, your prompts and the agent's final replies from that project's recent sessions, within the period you choose. Mula never receives your files, tool calls, command output, credentials or other projects.
• Billing information: payments are processed by Stripe. Mula does not store full card numbers.
• Technical information: logs needed to operate, secure and troubleshoot the service.

How we use it

We use this information to provide Mula: to build and update your team's work, prepare specs, summaries and updates for your workspace, keep the service secure and answer support requests. We do not sell personal information.

Your company’s data stays yours

Each company's data stays in its own workspace and belongs to that company. Mula keeps a separate knowledge base for every company and uses it only for that company: earlier decisions and work help Mula improve its later answers for the same company, never for anyone else. We do not use your data to train AI models, ours or anyone else's.

AI models

Mula runs on AI models from OpenAI and Anthropic. We send them only what each task needs: prompts never include your passwords, connection tokens or payment details, and no prompt uploads a full copy of a company's data or activity. OpenAI and Anthropic process these prompts on our behalf and, under their terms for business customers, do not use them to train their models.

Service providers

Besides OpenAI and Anthropic, Mula relies on Hetzner for hosting, Stripe for payments and an email delivery provider for account emails. Each processes data only on our behalf.

Legal bases

We process personal data to perform our contract with you or your company, for our legitimate interest in keeping Mula secure and working well, with your consent where we ask for it (such as automatic updates and the history import from coding apps), and to meet legal obligations such as keeping invoices.

International transfers

OpenAI and Anthropic are based in the United States. Where data is processed outside the European Economic Area, we rely on the safeguards in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

Retention

Workspace content is kept while your workspace is active and follows your workspace retention settings. Raw text received from coding apps is deleted after 30 days; the work Mula built from it remains. When a workspace is deleted, we delete its content, except records the law requires us to keep, such as invoices.

Your rights and choices

• Disconnect a coding app or connector in Mula at any time to stop future updates.
• Turn off automatic updates in Mula, and remove the project-local hook the plugin added.
• Ask for access to, a copy, correction or deletion of your personal data, or object to or restrict how we use it, at [email protected]. Where we rely on your consent, you can withdraw it at any time.
• Complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live or work.

Security

Mula encrypts data in transit, signs coding apps in with OAuth so they never see your password, and limits every connection to the workspace and projects you approved.

Changes

We will post changes to this policy on this page and update the date below.