Privacy Policy

Chainmail ("Chainmail," "we," "us," or "our") is a software product operated by Madsen Mill LLC ("Madsen Mill," "Company"). Madsen Mill LLC values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Chainmail website and services (the "Services").

Information you provide. We may collect information you voluntarily provide, including your name, email address, phone number, organization or company name, approval-related responses and confirmations, and support inquiries or communications.

Information from connected applications. When you connect third-party applications such as accounting, HR, or operational systems, we may receive limited data necessary to perform approved actions, including identifiers, approval-related metadata, and authorization tokens required to access the connected application. We do not collect or store third-party account passwords.

Automatically collected information. We may automatically collect limited technical information such as IP address, browser type, device information, and timestamped activity logs related to approvals. This information is used solely for security, auditing, and service reliability.

• Deliver and operate the Services
• Send approval notifications via email or SMS
• Execute actions only after explicit approval
• Authenticate users and secure approvals
• Maintain audit logs for accountability
• Provide customer support
• Improve service performance and reliability
• Comply with legal and regulatory requirements

Chainmail uses SMS messaging solely for transactional and security-related purposes, including approval notifications and one-time passcodes.

Users opt in to receive SMS messages by providing their phone number during onboarding or workflow setup. Messages are sent only in response to actions initiated by the user's organization.

Message frequency varies based on approval activity. Users may opt out of SMS messages at any time by replying STOP.

Chainmail does not send marketing or promotional SMS messages. For support related to SMS communications, contact support@usechainmail.com.

We do not sell personal information.

• With service providers necessary to operate the platform
• With connected applications solely to execute approved actions
• To comply with legal obligations or lawful requests
• To protect the security and integrity of the Services

All third-party service providers are required to protect information appropriately.

We retain information only for as long as necessary to provide the Services, maintain audit and compliance records, and fulfill legal obligations. Authorization tokens and approval logs are retained according to operational and security requirements.

We implement reasonable administrative, technical, and organizational safeguards to protect information, including OAuth-based authentication, encrypted data storage where appropriate, access controls, and audit logging.

No system is completely secure, but we take security seriously and continuously improve our practices.

• Opt out of SMS communications at any time by replying STOP
• Request access to or deletion of your information, subject to legal and operational requirements
• Contact us with privacy-related questions or requests

Requests can be sent to support@usechainmail.com.

The Services may interact with third-party applications. Their use of information is governed by their respective privacy policies. Chainmail and Madsen Mill LLC are not responsible for the privacy practices of third parties.

Chainmail is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Updates will be reflected by the "Last updated" date at the top of this page. Continued use of the Services after changes constitutes acceptance of the updated policy.

Operator: Madsen Mill LLC

Email: support@usechainmail.com

Website: https://usechainmail.com