Privacy Policy

1. Who is responsible

MasterMNG is provided by tgss LLC, a Wyoming limited liability company in the United States. For privacy questions or requests, write to contact@mastermng.com with the subject “Privacy request”. Do not include passwords, verification codes or provider credentials.

tgss LLC is responsible for determining the purposes and means of processing involved in operating its own accounts, website, security and business correspondence. When an organization uses MasterMNG to process information on its behalf, that organization's instructions and any applicable data-processing agreement determine the separate responsibilities for its content.

2. What this notice covers

This notice covers mastermng.com, the MasterMNG application at app.mastermng.com, account and support communications, commercial inquiries and information exchanged with MasterMNG Runner.

It does not replace the privacy notices of your employer, another organization administering your account, your email service or an AI provider. Those parties may process information under their own responsibilities and agreements.

3. Information involved

Account information. Email address, account and organization identifiers, profile information you supply, email-verification state and authentication records.

Organization and work information. Names and descriptions of organizations, agents, roles, projects and tasks; instructions, knowledge, uploaded files, comments, decisions and work products supplied through the service.

Execution information. Agent and machine identifiers, run status and timing, output and error excerpts, logs, activity records and information needed to coordinate a connected machine and relate work to the relevant organization and task.

Security and connection information. Session information, IP address, browser or user-agent information, requests, authentication events and technical records used to operate and protect the service.

Correspondence. Your email address, message and any attachments you choose to send when you contact us, request a quotation or report an issue.

The information actually involved depends on the functions you use and what you or your organization submit. Do not include personal information about other people unless you are entitled to provide it. Do not submit unnecessary sensitive information or secrets through an inquiry email.

4. Purposes and legal bases

Where data-protection law requires a legal basis, processing must have the basis applicable to the actual activity:

• Creating and administering an account, providing requested functions and handling a requested quotation: taking steps at your request before an agreement, or performing the applicable agreement. If an organization is the contracting party, legitimate interests in providing and administering its authorized service may apply to individual users' account details.
• Authenticating users, preventing misuse, investigating incidents and maintaining service reliability: legitimate interests in protecting users, organizations and the service, balanced against the rights of affected people; a legal obligation may also apply to particular records or disclosures.
• Responding to correspondence and exercising or defending legal rights: legitimate interests in handling requests and business communications, resolving disputes and protecting legal rights.
• Meeting applicable legal requirements: compliance with the relevant legal obligation.
• An activity for which consent is required: the consent requested for that particular activity. Consent must not be inferred from a general account registration or from reading this notice.

Where we process organization content as a processor, the organization determines its purposes and legal basis and provides the relevant instructions. This notice does not replace those instructions or a required data-processing agreement.

We must not use information for a materially different purpose without providing the information and establishing the legal basis required for that use.

5. Required and optional information

An email address and authentication information are needed to establish and use an account. If you do not provide information needed for a requested function, that function may not work.

Content, file uploads and commercial-inquiry details are provided according to your use of the service. A quote request does not automatically enroll you in marketing or authorize a paid subscription.

6. AI providers and MasterMNG Runner

The customer execution path described on the website uses Claude Code under the customer's own Claude plan on a customer-controlled machine connected through MasterMNG Runner. The Runner invokes the provider's tool on that machine.

Tasks, instructions, knowledge or files made available to an agent may be processed by the provider as part of the work you authorize. MasterMNG also receives the run information, outputs and work records needed to coordinate and display that work. Do not assume that everything remains on your computer merely because an agent runs there.

The provider's privacy notice, account configuration and contractual terms govern its separate processing, including its retention and any model-training use. This notice does not claim that a particular provider has accepted a no-training or zero-retention arrangement.

A recording showing an internal configuration is not evidence that the same provider or hosted execution is offered to customers.

7. Who may receive information

Information is made available as needed to:

• Authorized members and agents of your organization, according to the access and instructions applicable to its workspace.
• Hosting, infrastructure, communications and technical-service providers supporting the service or handling a message you send.
• An AI provider or external system when the authorized work you configure involves that provider or system.
• Authorized personnel and professional advisers where necessary for support, security, accounting, legal advice or the administration of the business.
• A competent authority or another recipient where disclosure is required by applicable law, necessary to protect legal rights or otherwise lawfully authorized.

These categories do not authorize unrestricted access or a sale of your information. A provider acting as a processor must be covered by the agreements required for that role. Details of recipients relevant to a particular customer relationship should be provided with the applicable processing arrangements.

8. Processing locations and international transfers

The hosted service uses Amazon Web Services (AWS) infrastructure in the United States, in the US East (Ohio) region (us-east-2). AWS acts as a processor for customer data hosted through its services.

AWS incorporates its Data Processing Addendum into its Service Terms. AWS states that the DPA applies automatically to customers who require it for GDPR compliance, and that its Standard Contractual Clauses apply automatically to the relevant transfers covered by those terms. The applicable documents and safeguards can be obtained from the AWS Service Terms and AWS Data Processing Addendum linked below.

The contact email domain uses Migadu-Mail GmbH, a Swiss provider. Migadu publishes its privacy notice and Data Processing Agreement together. Switzerland is recognized by the European Commission as providing an adequate level of data protection. The provider’s country does not mean that every technical operation takes place in that country.

These provider arrangements are specific to their respective services. They do not certify tgss LLC under the EU–US Data Privacy Framework or establish that every external system selected by a customer has the same arrangements. AI services used under your own provider account remain subject to that provider’s terms and the work you authorize.

For information or a copy of the arrangements relevant to your use, contact contact@mastermng.com. Provider safeguards do not, by themselves, establish that every use of the service complies with applicable data-protection law.

• AWS Service Terms
• AWS Data Processing Addendum
• Migadu privacy notice and DPA
• European Commission adequacy decisions

9. Retention and deletion

Retention must be limited to what is needed for the relevant purpose. The applicable criteria are:

• Account and organization records: the period during which the account or organization needs the service, followed only by retention necessary for closure, outstanding obligations, disputes, security or applicable law.
• Work content and execution records: the organization's instructions and the needs of the work, its activity history and the applicable customer agreement, subject to legal and security requirements.
• Authentication and security records: the need to authenticate a session, prevent misuse, investigate an incident or meet a specific legal requirement.
• Correspondence and quotations: the time needed to handle the inquiry and any ensuing relationship, plus applicable legal recordkeeping and dispute requirements.
• Recovery copies: the period needed for the documented recovery and legal-retention arrangements. Deletion from the active service does not necessarily erase every recovery copy immediately.

These are retention criteria, not a promise of a deletion schedule or an automatic erasure feature that has not been established. A legal hold may require particular information to be retained longer. Organization-controlled content may need to be handled through the organization administering it.

To request closure or deletion, contact us. We must verify authority, identify the information concerned and explain any applicable retention exception. We must not represent that information has been erased until the relevant process has been completed.

10. Cookies, browser storage and external links

The marketing website covered by this version serves its assets locally and contains no executable analytics or advertising scripts. Its inline structured data describes page content for search engines. A web server can still process connection and request information when you visit.

The application uses browser/session technology for authentication and service operation. Browser controls can restrict or clear stored information, but doing so may sign you out or prevent a function from working.

This notice does not assert that the entire application has been certified free of every non-essential storage mechanism or telemetry path. Any non-essential technology must receive the disclosure and choice required by applicable law before use.

Following an external link, opening a mailto link or using an AI provider involves the relevant external service and its own privacy practices.

11. Security

Access restrictions, organization boundaries and authentication are part of the service's security design. No internet service or AI system can guarantee perfect security.

MasterMNG Runner operates with the privileges of the user running it. It is not a sandbox. Limit what connected machines, users and agents can access and review actions that could disclose information or affect external systems.

This notice does not claim a security certification, a service-level agreement, a particular backup frequency or a guaranteed recovery objective. Report a security concern to contact@mastermng.com without including working credentials or unnecessary customer data.

12. Your rights and choices

Depending on the law that applies, you may have rights to request access, correction, deletion, restriction, portability, information about processing or an objection to particular uses. Where consent is the legal basis, you may withdraw it without affecting the lawfulness of processing before withdrawal.

We may need information sufficient to verify your identity and authority. Do not send a password or a provider key. Requests must be handled within the periods required by applicable law, subject to lawful exceptions.

Where an organization controls the content concerned, contact its administrator; we must assist it as required by the applicable processing arrangement. You may also complain to a competent data-protection or other regulatory authority. Nothing in this notice limits a mandatory right.

13. Children and sensitive information

MasterMNG is intended for business and professional work, not for children. Do not create or provide an account for a person who cannot lawfully use the service, and do not submit children's information or other sensitive personal information without an appropriate lawful purpose and safeguards.

If you believe such information was submitted improperly, contact us so that it can be assessed and handled through the applicable process.

14. Automated processing and human decisions

Agents process information according to the work and tools configured for them. AI outputs may be inaccurate or incomplete. Review outputs and actions before using them for decisions that affect people.

This notice does not authorize a customer to make a legally significant automated decision or establish that a customer's use satisfies the requirements applicable to that decision. The organization directing the use is responsible for establishing its lawful basis and safeguards.

15. Changes and contact

A published version must identify its version and publication date. Material changes must receive the notice, legal basis and any consent required for the change; an updated notice does not retroactively authorize a different use of information.

For privacy questions or requests: contact@mastermng.com, subject “Privacy request”.