MNNR is authorization and evidence infrastructure for agent-initiated payment workflows. It identifies actors, binds mandates, evaluates transaction intents against policy, and preserves decision evidence above existing payment infrastructure. MNNR does not move or custody money, issue cards, or replace a payment processor.

Does MNNR move money or settle payments?

No. MNNR evaluates whether an agent-initiated transaction intent is authorized under its mandate and policy, records the decision with reason codes, and exports evidence. Payment execution remains with your existing payment infrastructure.

Is MNNR compliant with PSD3, MiCA, or GDPR?

MNNR provides PSD3/PSR-aligned authorization controls and is designed to support MiCA and EUDI Wallet trajectories, with privacy-by-design data handling. MNNR does not certify compliance or guarantee regulatory outcomes; compliance determinations remain with the customer.

What does MNNR record for audit purposes?

Each evaluated transaction intent produces a decision record with reason codes, the policy and mandate versions applied, and an exportable evidence package (JSON or CSV) for internal oversight and review.

Privacy Policy

Last Updated: January 9, 2026
Effective Date: January 9, 2026

1. Introduction

Welcome to MNNR ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use MNNR's authorization and decision-evidence services at https://mnnr.app (the "Service").

Legal Entity: MNNR, LLC
EIN: 33-3678186
Address: 1603 Capitol Ave, Suite 413 PMB #1750, Cheyenne, WY 82001
Phone: (252) 242-0710
Email: legal@mnnr.app

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

Email address
Name (optional)
Company name (optional)
Password (encrypted, we never store plain text)

Billing Information:

Payment information is collected and processed by Stripe, Inc.
We do NOT store credit card numbers or payment credentials
We receive only payment confirmation and customer ID from Stripe

Authorization Data You Send to Our API:

Actor identifiers and metadata you choose to provide
Policy and delegated-mandate definitions
Transaction-intent metadata, such as amount, currency, merchant, or purpose, when supplied
Authorization decisions, reason codes, and evidence records
Timestamps of API requests
API key identifiers

2.2 Information We Collect Automatically

Technical Information:

IP address
Browser type and version
Device information
Operating system
Referring URLs
Pages visited and time spent
API request logs

Cookies and Similar Technologies:

Essential cookies (authentication, security)
Analytics cookies (Google Analytics, opt-in required)
Preference cookies (language, theme)

We use cookies to enhance your experience. You can control cookies through our cookie consent banner and your browser settings.

3. How We Use Your Information

We use collected information for:

Service Delivery:

Providing actor, mandate, policy-evaluation, and decision-evidence services
Processing API requests
Generating authorization records, evidence exports, and dashboards
Administering paid engagements when applicable

Service Improvement:

Analyzing usage patterns (aggregated, anonymized)
Improving platform performance
Developing new features
Troubleshooting technical issues

Communication:

Sending service updates and announcements
Responding to support requests
Sending service and authorization alerts
Marketing communications (opt-in only)

Legal and Security:

Preventing fraud and abuse
Complying with legal obligations
Enforcing our Terms of Service
Protecting our rights and property

4. How We Share Your Information

We do NOT sell your personal information. We share data only in these limited circumstances:

Service Providers:

Stripe: Payment processing (PCI DSS Level 1 certified)
Clerk: Authentication and identity services
Neon: Managed database hosting
Netlify: Application hosting and CDN
Sentry: Error tracking and monitoring
Google Analytics: Usage analytics (anonymized, opt-in)

Legal Requirements:

To comply with applicable laws and regulations
In response to valid legal requests (subpoenas, court orders)
To protect our rights, property, or safety
In connection with legal proceedings

Business Transfers:

In the event of merger, acquisition, or sale of assets
You will be notified via email 30 days before transfer
You may delete your account before transfer completes

With Your Consent:

When you explicitly authorize us to share your information
For purposes you have approved

5. Data Retention

Account Data: Retained while your account is active

Authorization and Evidence Records: Retained according to the applicable beta, pilot, or enterprise configuration and any written engagement terms.

Billing Records: 7 years (legal requirement for tax purposes)

Deleted Accounts:

Account data deleted within 30 days of account closure
Aggregated, anonymized service data may be retained for analytics
Backups purged within 90 days

You can request immediate deletion by contacting legal@mnnr.app

6. Your Rights

6.1 GDPR Rights (European Users)

If you are in the European Economic Area, you have the right to:

Access: Request copies of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in machine-readable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Opt out of marketing or optional processing

To exercise these rights, email: gdpr@mnnr.app

We will respond within 30 days of your request.

6.2 CCPA Rights (California Residents)

California residents have the right to:

Know: What personal information we collect, use, and share
Delete: Request deletion of your personal information
Opt-Out: Opt out of sale of personal information (we do NOT sell data)
Non-Discrimination: Not receive discriminatory treatment for exercising rights

To exercise these rights, email: privacy@mnnr.app or call (252) 242-0710

We will respond within 45 days of your verified request.

6.3 All Users

Regardless of location, you can:

Update your account information in dashboard settings
Request an export of your personal data in a portable format
Delete your account at any time
Opt out of marketing emails (unsubscribe link in emails)
Disable non-essential cookies via cookie settings

7. Data Security

We implement industry-standard security measures:

Encryption:

TLS 1.3 for data in transit
AES-256 encryption for data at rest
Encrypted database backups

Access Controls:

Multi-factor authentication for admin access
Role-based access control (RBAC)
API keys with scoped permissions
Regular access reviews

Infrastructure:

SOC 2-audited hosting providers (does not imply SOC 2 certification of MNNR itself)
Automated security scanning
Regular penetration testing
24/7 monitoring and alerting

Incident Response:

Security incidents reported within 72 hours (GDPR requirement)
Affected users notified promptly
Post-incident reports published

Note: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Our servers are located in the United States. If you access our Service from outside the US, your data will be transferred to and processed in the United States.

For EU Users:

We use Standard Contractual Clauses (SCCs) approved by the European Commission
Our sub-processors are contractually bound to GDPR data-protection obligations
Data Processing Agreement available upon request: dpa@mnnr.app

For UK Users:

We comply with UK GDPR and Data Protection Act 2018
International Data Transfer Addendum available upon request

9. Children's Privacy

Our Service is NOT intended for children under 16 (or 13 in the US). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at legal@mnnr.app and we will delete it immediately.

10. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with updated "Last Updated" date.

Material Changes:

We will notify you via email (to address on file)
Notice will be posted on our homepage for 30 days
Continued use after changes constitutes acceptance

Your Options:

Review changes and decide whether to continue using the Service
Delete your account if you disagree with changes

11. Contact Us

For questions about this Privacy Policy or our privacy practices:

Email: privacy@mnnr.app
Legal: legal@mnnr.app
Support: support@mnnr.app
Phone: (252) 242-0710

Mailing Address:
MNNR, LLC
1603 Capitol Ave, Suite 413 PMB #1750
Cheyenne, WY 82001

Acknowledgment: By using our Service, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy was last updated on January 9, 2026.