Privacy

Two things. Your account: the email address and organization you signed up with, handled by our authentication provider. And a replica of the billing objects your Stripe account exposes to the restricted key you grant, which is customers, subscriptions, invoices, discounts, prices and meter summaries.

The replica contains personal data because Stripe customer objects do: names, email addresses, billing addresses and any metadata you put on them. Murphy does not need customer email addresses to run a check and will drop them at connect time if you ask.

Re-deriving what your invoices should have said, and keeping the objects a finding was derived from so the finding can be reconstructed when you open it.

Nothing else. Your billing data is not used to train anything, is not aggregated into benchmarks, and is not sold, shared or licensed to anyone.

A short list of subprocessors: the hosting provider the service runs on, the authentication and billing provider that handles sign-in and subscriptions, and an email provider for the alerts you ask for. The current list with names is available on request and before you sign anything.

Evidence retention follows your plan: thirty days on Starter, ninety on Growth, negotiated on Scale. Objects that no longer back an open finding age out on that schedule.

Disconnecting revokes access immediately, because the key is yours to revoke. The replica and the findings derived from it are deleted within thirty days of you closing the account, or immediately if you ask.

For your own account data: access, correction, export and deletion, by writing to the address below.

For your customers' data inside the replica, you are the controller and Murphy is the processor. A data processing agreement is available and Murphy will action deletion requests you pass on.

This marketing site sets none and runs no analytics and no third-party scripts. The application sets a session cookie so you can stay signed in.