Skip to content

Privacy Policy

Last updated: July 13, 2026

Mugavi is a business-to-business accounts-receivable tool. This policy describes the data we collect, how we use it, and the choices you have. It's written in plain English, not legalese, but it's a real policy, not a draft. If you have questions, email privacy@getcollectly.app.

What we collect

Email, name, billing info, and the data you put in our platform (customers, invoices, payment records).

Data from your accounting software

If you connect QuickBooks Online, Mugavi reads your customers, your open invoices, credit memos that still have a balance, and payments that have an unapplied amount. It asks for the QuickBooks accounting permission only. It writes one thing back: when your customer pays an invoice through Mugavi, we record that payment against the invoice in QuickBooks. We do not create or edit customers or invoices, and nothing is sent to your customers without your approval.

You can disconnect at any time from the Integrations page. Disconnecting asks Intuit to revoke Mugavi's access, deletes the connection tokens we hold and stops syncing. Customers and invoices already imported stay in Mugavi until you remove them or delete your account. Deleting your account also asks Intuit to revoke access.

If you connect Xero, Mugavi reads your contacts, your invoices and credit that has not been used (credit notes, overpayments and prepayments). The permissions it asks for are invoices read-only, contacts, and payments. It writes one thing back: when your customer pays an invoice through Mugavi, we create a payment against that invoice in Xero. We do not create or edit invoices, and nothing is sent to your customers without your approval. You can disconnect from the Integrations page, which asks Xero to remove the connection and deletes the tokens we hold, or from Connected Apps inside Xero. Customers and invoices already imported stay in Mugavi until you remove them or delete your account.

How we use it

To provide the service. To send you transactional emails. To send you product updates if you opt in.

What we never do

  • Sell your data
  • Share customer data with third parties except those needed to provide the service (payment processors, Twilio, Resend, Gemini)
  • Train AI models on your data

Cookies

Three groups, and you decide on two of them. The site works with none of the optional ones switched on.

  • Strictly necessary: keeping you signed in, remembering your answer to the cookie banner, and a two-letter country code used to decide whether you are shown the banner at all. That country cookie holds nothing but the country. These cannot be switched off, and we do not ask about them.
  • Analytics: PostHog, for which pages get read and where people get stuck, and Microsoft Clarity, which records the session and builds heatmaps. Clarity masks what you type into form fields.
  • Advertising: Google AdSense, which sets cookies used to select and measure ads.

In the UK, EU, EEA and Switzerland nothing in the second and third groups loads until you say yes, not as a blocked cookie, but as a script that is never added to the page. Elsewhere they load by default and we do not interrupt you to ask, but Cookie preferences in the footer works everywhere: switch something off from there, anywhere in the world, and we honour it. Turning analytics off stops collection rather than just stopping the asking.

Data deletion

You can delete your account at any time from Settings. We delete all associated data within 30 days.