Privacy Policy

Last updated: August 22, 2026

This Privacy Policy explains how MM Creative Group, LLC ("Magnolia," "we," "us") collects, uses, and protects information in the Magnolia Portal (the "Portal"), our private client and employee portal. It applies only to the Portal, not to our public website or other services.

Who this applies to

The Portal is invitation-only. It is used by people at our client organizations and by Magnolia employees. You reach it only after we create an account for you.

Information we collect

Account information. Your name, email address, and the sign-in details needed to authenticate you. Authentication is handled by our provider, Clerk, including Google sign-in if you choose to use it. We do not store your password.

Content you provide. The information you enter or upload while using the Portal: form responses, table entries, uploaded files, chat messages, and your module or course progress. This content is associated with your organization.

Usage information. Basic technical records such as sign-in times, the pages you access, and device or browser data, used to operate, troubleshoot, and secure the Portal.

Information we do not collect

The Portal is intentionally built not to store Social Security numbers, health information, or compensation and payment figures. Please do not enter any of these into the Portal. If you need to share that kind of information with us, contact us through another channel.

How we use information

We use the information above to run the Portal: to authenticate you, show you the modules and courses assigned to your organization, enable messaging, send you email notifications, and keep the service working and secure. We do not sell your information, and we do not use it for advertising.

Service providers we rely on

We use trusted third-party providers to operate the Portal. They process information only on our behalf and only as needed to provide their part of the service:

• Clerk, for account authentication and sign-in
• Neon, for database hosting
• Vercel, for application hosting
• Resend, for transactional email such as notifications
• Google, if you choose Google sign-in
• YouTube, for embedded videos inside lessons and modules

Embedded YouTube videos may set their own cookies under Google's policies once you interact with them. Aside from these providers, we do not share your information except where required by law or to protect the rights, safety, or property of Magnolia, our clients, or others.

How your organization's data is separated

Data in the Portal is scoped to your organization. Members of one client organization cannot see another organization's data. Magnolia administrators and authorized staff can access an organization's data as needed to provide and support the service.

Cookies

We use cookies strictly to keep you signed in and to operate the Portal. We do not use advertising or tracking cookies. Embedded content such as YouTube may set its own cookies as described above.

How we protect information

We take reasonable measures to protect your information, including per-organization data separation, server-side access controls, encrypted connections, and serving uploaded files only through authorized requests rather than public links. No online service can be completely secure, but we work to safeguard your information.

How long we keep information

We keep information for as long as your organization uses the Portal and as needed for legitimate operational and legal purposes. When an organization stops using the Portal, or on request, we delete or anonymize its information within 90 days, except where we are required to retain it.

Your choices

You may request access to, correction of, or deletion of your personal information by contacting us using the details below. Depending on where you live, you may have additional rights over your information, and we will honor those rights as the law requires.

Children

The Portal is a business tool and is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided information, contact us and we will remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the date at the top, and for significant changes we will provide notice through the Portal or by email.