Privacy Policy
How we handle your information
Effective and last updated: October 13, 2026.
Controller and scope
2MM Labs, LLC receives and uses visitor, contact and client information for the purposes described here. When we provide services on behalf of a business, that business determines the purposes of processing its customers’ and employees’ data; 2MM works within the applicable scope, instructions and agreements. Privacy contact: hello@2mmlabs.com.
Information we receive
We receive your name, company, email, phone number, service of interest and message when you request information. In a business relationship, we may also receive billing details, brand materials, business information and authorized access needed to provide the service. Hosting and security systems process technical information such as IP addresses, browsers, dates and request logs. Do not send passwords, payment card details, identity documents or sensitive information through the form.
Purposes and communications
We use information to answer inquiries, prepare proposals, coordinate and provide services, manage billing and support, protect systems and address obligations and privacy requests. An inquiry does not automatically subscribe you to advertising. When an activity requires consent, we will request it; we may also process information to perform agreements, address business requests or meet obligations, as permitted by applicable law.
Contact form and security
Successfully submitted inquiries are processed through the company’s contact and email system. Spam controls, request limits and technical validation apply. The form uses a security session and Cloudflare Turnstile to verify requests. Cloudflare processes technical browser and connection signals. Technical rate-limit and duplicate-submission identifiers are pseudonymized and removed from active records when their one-hour window expires. We do not use contact form data to automatically feed Sophia AI.
Information by contracted service
Digital Presence and Web Care may require materials, contacts and website or domain access. Visibility and audits use public information and, when authorized, analytics, search engine and digital asset data. Social Content AI uses the brief, branding, authorized materials and publishing permissions to prepare, review and schedule content. Cloud Workspace may require authorized access to users, files and permissions, and a verified premigration copy on client-provided storage. It does not entail recurring custody or backups. At the end of the service, we remove our access without deleting client data; detected incidents compromising data or access are reported promptly to the designated contact. Information is limited to the agreed work; purchasing multiple solutions does not by itself authorize Sophia AI to access Cloud Workspace files.
Sophia AI and artificial intelligence platforms
Depending on contracted channels and workflows, Sophia AI may process contact details, conversations, inquiries, follow-up information and the business’s authorized knowledge base through Respond.io and OpenAI services. Campaign data may come from Meta where an authorized campaign and integration exist. Visiting an informational page does not activate these workflows. Providers and specific configuration are defined for each implementation. AI responses require supervision and must not be used to introduce sensitive information outside the authorized scope.
Providers and transfers
We use hosting, email and security providers, including Hostinger for business email. Contracted services may use Respond.io, OpenAI, Meta, Microsoft or Google and content creation and scheduling tools, depending on scope. These providers receive the information necessary to operate enabled functions and apply their own processing terms. They may process it in the United States or other countries; applicable transfer measures and agreements are determined by the service and relevant law. We may also disclose information when required by law or to address claims and protect rights.
Cookies, links and campaigns
The informational website code does not currently include behavioral advertising pixels. Hosting and security may use necessary cookies. Offering Meta Ads management to clients does not mean advertising tracking is enabled on this site. If we introduce nonessential analytics or advertising, we will provide notice and required choices before use. Links to social media and external platforms lead to sites with their own policies.
Retention and protection
We retain information as long as needed to address inquiries, provide services, manage obligations and resolve disputes. For Digital Presence, the delivery folder remains available during the relationship and for 30 calendar days after closure notice to download assets; this period does not direct deletion of data or records subject to legal retention. Other periods depend on information type, agreements and legal requirements; ending a subscription does not entail immediate deletion of invoices or records that must be retained. Return or deletion of data managed on clients’ behalf is coordinated according to the agreement and each provider’s capabilities. We apply access and security measures appropriate to the processing without promising absolute security.
Rights and requests
Write to hello@2mmlabs.com to request access, correction, deletion or a copy of your information, withdraw consent, or object to or restrict processing when applicable. We may verify your identity and will address the request in accordance with applicable law, its time limits and exceptions. If the data belongs to an operation we manage on a client’s behalf, we will direct the request to the appropriate controller. You may ask to stop receiving marketing communications.
Children and changes
The site is intended for businesses and professionals, not children under 13. Contact us if you believe a child has submitted information to us. We will publish changes with their date and provide notice or request authorization for processing changes when appropriate. Purchasing a plan does not authorize uses of data beyond the stated purposes.