Who we are
Muxila makes an internal AI assistant: a private assistant that answers a company’s employees from its own documents. We set it up for each client and operate it on an ongoing basis.
Muxila is the trading name of OD “ISLAMOVIC”, a company registered in Bosnia and Herzegovina. Delivery is location-independent; we work with clients in the US, Europe, and elsewhere.
For privacy questions or data requests, email contact@muxila.com.
Scope
This policy covers personal data we process when you:
- visit muxila.com,
- submit a demo request or contact form,
- communicate with us by email or other channels, or
- engage us as a client for setting up and running the assistant.
It does not cover third-party websites, platforms, or tools you connect to your assistant (e.g. Google Drive, Microsoft 365, Notion, Slack). Those are governed by their own privacy policies.
Information we collect
Depending on how you interact with us, we may collect:
- Contact details: name, email address, phone number.
- Business information: company or store name, website URL, industry, role, and details you provide in demo requests (e.g. monthly traffic, tools you use).
- Messages and form submissions: content you send through our contact forms, email, or other communication channels.
- Client and billing data: billing contact, invoicing details, and payment confirmations from our payment processors. We do not store full payment card numbers.
- Technical and usage data: IP address, browser type, device information, pages viewed, referral source, and similar analytics data collected when you use our website.
- Preferences: your cookie choice (accept or decline), stored locally in your browser.
How we use your information
We use personal data to:
- respond to demo requests and sales inquiries,
- deliver, operate, and improve the assistant for clients,
- communicate about projects, support, billing, and account matters,
- maintain website security and prevent abuse,
- understand aggregate website traffic and improve our marketing site,
- meet legal, tax, and accounting obligations.
We do not sell your personal data. If we send marketing emails, we do so only where permitted by law or with your consent, and you can opt out at any time.
Legal bases (EEA/UK visitors)
Where GDPR or UK GDPR applies, we rely on:
- Contract: to deliver services you have requested or are negotiating.
- Legitimate interests: to operate our website, respond to inquiries, improve our services, and protect our business, balanced against your rights.
- Consent: for Google Analytics cookies, and where otherwise required (e.g. certain marketing communications).
- Legal obligation: for tax, accounting, and regulatory compliance.
Cookies and analytics
We use two analytics tools on muxila.com. We do not use advertising cookies.
- Vercel Web Analytics and Speed Insights count page views, referrers, clicks on a few buttons (such as “Book a call”) and page load times. They set no cookies and do not track you across sites; visits are counted with a short-lived hash of the request that resets every day, and we only see aggregated numbers. These run for every visitor, based on our legitimate interest in knowing how the site is used.
- Google Analytics runs only after you click “Accept” in the cookie banner. Until then, the Google tag isn’t loaded and nothing is sent to Google. With your consent, Google sets cookies to tell repeat visits apart and receives your IP address, browser and device details, and the pages you view. Google processes this data, possibly in the US.
Events we send say which button or page was used, never your name, email or what you type in a form. The site also stores your cookie choice in your browser so it doesn’t ask again. To change your mind, click “Cookie settings” at the bottom of any page and choose Decline; you can also clear this site’s cookies in your browser.
Who we share data with
We share personal data only with service providers that help us operate, including:
- hosting and database providers (Railway, Cloudflare, Vercel for this website),
- website analytics (Vercel; Google Analytics only with your consent),
- AI model providers (OpenAI, Anthropic, Google), to generate answers,
- email delivery (Resend),
- payment processing, when you pay by card,
- error monitoring (Sentry),
- professional advisors (accountants, lawyers) when needed,
- authorities when required by law.
The current list, with what each provider does, is on our Security page.
We may also share data with a successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.
International transfers
Muxila is based in Bosnia and Herzegovina. Our service providers may process data in the EU/EEA, UK, US, or other countries. Where required by law, we use appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep data
- Prospects and demo requests: up to 24 months after our last meaningful interaction, unless you become a client or ask us to delete sooner.
- Client and billing records: for as long as required by applicable tax and accounting law.
- Website analytics: Vercel keeps aggregated data only; Google Analytics keeps event data for the retention period set in our account, at most 14 months.
- Assistant conversation data: for deployed client systems, retention is configured per engagement and documented in the client agreement.
Client responsibilities
If you use Muxila in your company, you are responsible for:
- telling your employees how their data is collected and used through the assistant,
- obtaining any consents required under applicable law (e.g. GDPR, CCPA, or sector-specific rules),
- ensuring your use of the assistant and the documents you connect to it comply with laws relevant to your industry and your employees.
Muxila acts as a service provider / processor for data processed through client-deployed agents, as defined in the relevant client agreement.
Security
We apply reasonable technical and organizational measures to protect personal data, including HTTPS encryption, access controls, least-privilege credentials, and isolated environments for client work. No method of transmission or storage is completely secure. If a breach affects your data, we will notify you and regulators as required by law.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, withdraw consent where processing is consent-based, request portability, or lodge a complaint with your local data protection authority.
To exercise these rights, email contact@muxila.com from the address associated with your data. We respond within 30 days.
Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 16.
Third-party links
Our site may link to external services. Their privacy practices are governed by their own policies, not ours.
Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. See also our Terms of Service and Refund Policy.
Contact
OD “ISLAMOVIC” (trading as Muxila)
Džemala Bijedića 162, Novi Grad, 71000 Sarajevo, Bosnia and Herzegovina
contact@muxila.com