Privacy Policy

Effective date: March 30, 2026

Majelyn, Inc. ("Majelyn," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our authentication gateway, client portals, and related services (collectively, the "Services").

1. Information We Collect

Information you provide

• Account information: When you sign in through Google, Microsoft, or email magic link, we receive your name, email address, and profile image from your identity provider.
• Access request information: If you request access to a client portal, we collect your name, email, company name, and reason for access.

Information collected automatically

• Authentication data: We log sign-in events, including timestamps, authentication provider used, and the portal accessed.
• Session data: We use signed JWT cookies to maintain your authenticated session across Majelyn-operated domains.
• Usage data: We may collect information about how you interact with our Services, including pages visited, access times, and referring URLs.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and manage access to client portals
• Process and respond to access requests
• Maintain audit logs for security and compliance purposes
• Send transactional emails (sign-in links, access approvals, notifications)
• Improve the security and functionality of our Services
• Comply with legal obligations

3. How We Share Your Information

We do not sell, rent, or trade your personal information, including your email address or contact information, to third parties for their marketing purposes.

By using the Services, you consent to Majelyn contacting you about the Majelyn platform, product updates, and related services. You may opt out of non-transactional communications at any time.

We may share your information in the following limited circumstances:

• With portal administrators: Administrators of client portals you request access to can see your name, email, company, and access status.
• Service providers: We use third-party services to operate our platform, including cloud hosting (Vercel), database services (Neon), email delivery (Resend), and authentication providers (Google, Microsoft).
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide Services. Audit log data is retained for compliance and security purposes. You may request deletion of your account by contacting us.

5. Security

We implement industry-standard security measures to protect your information, including encrypted connections (TLS), signed JWT tokens, and secure authentication protocols. However, no method of electronic transmission or storage is 100% secure.

6. Cookies

We use a session cookie (__majelyn_session) scoped to the .majelyn.com domain to authenticate your access across client portals. This cookie contains a signed JWT token and expires after 7 days. We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Request a portable copy of your data

To exercise these rights, contact us at privacy@majelyn.com.

8. Third-Party Services

Our Services integrate with third-party authentication providers (Google and Microsoft). Your use of these providers is subject to their respective privacy policies. We only receive the information necessary to authenticate your identity.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Majelyn, Inc.
privacy@majelyn.com