Privacy Policy

Effective Date: June 9, 2026

SusuMoney, a service offered by MenSol LLC ("we", "our", or "us"), operates a savings group management platform. This Privacy Policy explains how we collect, use, and protect your information when you use the SusuMoney platform and any mensol.org subdomain.

MenSol LLC is a limited liability company registered in the State of Minnesota, United States. MenSol LLC is the data controller responsible for your personal information collected through the SusuMoney platform and all mensol.org subdomains.

Information We Collect

We collect the following information when you submit the SMS opt-in form at https://mensol.org/optin.html, when your account is created on the platform, or when you use the platform. Note that creating a member account does not opt you in to messaging; messaging consent is collected separately and only from you (see "SMS / Text Message Communications" below):

Personal information: Name, phone number, and email address (your mobile number for SMS is provided by you when you self-opt-in at https://mensol.org/optin.html)
Account information: Member number assigned by the platform and group membership details
Financial records: Payment and contribution records, payout schedule, and transaction history within your savings circle
Authentication data: Login activity, session data, and hashed PINs or passwords (we never store PINs in plain text)
Device information: Device type, browser type, and operating system (collected for security purposes)
Network information: IP address (collected for security and fraud prevention)

How We Use Your Information

We use the information we collect to:

Operate and provide the savings circle management platform
Send transactional notifications via SMS, WhatsApp, and email (payment reminders, payout alerts, welcome messages, PIN recovery codes)
Authenticate members and administrators securely
Generate payment history, statements, and reports for group administrators
Detect and prevent fraud, unauthorized access, and abuse
Comply with applicable legal obligations
Improve platform functionality, reliability, and security

We do not use your information for marketing, advertising, or profiling purposes.

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your information may be shared only in the following limited circumstances:

With your group administrator: Admins can view member information within their own group only. Administrators of one group cannot access data from another group.
With service providers: We use third-party services to deliver notifications and operate the platform (see "Third-Party Services" below). These providers process data only as needed to provide their services.
For legal compliance: We may disclose information if required by law, subpoena, court order, or government request.
To protect rights: We may share information to protect the rights, safety, or property of MenSol LLC, our users, or the public.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates for marketing or promotional purposes.

Cookies & Technology

We use cookies and similar technologies in a limited and transparent manner:

Session cookies: We use session cookies solely for authentication and maintaining your logged-in state. These are essential for the platform to function.
No third-party tracking: We do not use third-party tracking cookies, advertising cookies, or marketing pixels.
No analytics tracking: We do not use analytics services that track individual users without consent.
Cookie settings: You can disable cookies in your browser settings, but login functionality requires session cookies to be enabled.

Data Retention

Member data is retained for as long as your group subscription is active on the platform.
Upon account deletion request, your personal data will be deleted within 30 days.
Audit logs may be retained for up to 90 days for security and compliance purposes.
Backup copies may persist for up to 30 additional days after deletion, after which they are permanently removed.
Anonymized or aggregated data (which cannot identify you) may be retained indefinitely for platform improvement.

Your Rights

You have the following rights regarding your personal information:

Right to access: You may request a copy of the personal data we hold about you.
Right to correction: You may request correction of inaccurate or incomplete information.
Right to deletion: You may request deletion of your personal data by emailing [email protected].
Right to data portability: You may request an export of your group data in a standard format.
Right to withdraw consent: You may withdraw consent for messaging at any time by replying STOP or contacting us.
California residents: You may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what data is collected, the right to delete, and the right to opt out of data sales (we do not sell data).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Children's Privacy

The SusuMoney platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a person under 18, we will delete that information immediately. If you believe a minor's data has been submitted to the platform, please contact us at [email protected].

International Users

The SusuMoney platform is operated from the United States. If you access the platform from outside the United States, you understand and consent to the transfer of your personal information to the United States for processing and storage. We comply with applicable data protection laws and take reasonable measures to protect your information regardless of where it is processed.

Third-Party Services

We use the following third-party service providers to operate the platform and deliver notifications:

Twilio: SMS and WhatsApp message delivery — Twilio Privacy Policy
Resend: Email delivery — Resend Privacy Policy
Cloudflare: Security, DNS, and content delivery — Cloudflare Privacy Policy
Meta (WhatsApp): WhatsApp Business Platform — WhatsApp Privacy Policy

Each provider has their own privacy policy governing how they process data. We do not sell your data to any third party. Service providers process data only as necessary to provide their respective services to MenSol LLC.

SMS / Text Message Communications

MenSol LLC sends transactional SMS text messages to members of savings circle groups registered on our platform. Members opt in to SMS exclusively through the public web form at https://mensol.org/optin.html. The member enters their own mobile number, checks an unchecked-by-default consent box that displays the full disclosure, and submits the form. The submit button is enabled regardless of the checkbox state; the form processes the submission either way but only enables SMS notifications when the box is checked. Consent is stored with the submission timestamp, IP address, user agent, and the exact disclosure text shown to the member at submission. Consent is never assumed from inaction, never collected by an administrator on the member's behalf, and never shared with third parties or affiliates for marketing or promotional purposes.

Types of messages we send:

• Welcome message upon account creation
• Payment reminders before your due date
• Payment confirmation after a payment is recorded
• Payout notifications when your payout is scheduled
• PIN recovery codes when requested

Message Frequency:
Message frequency varies based on your group's payment cycle, typically 2 to 4 messages per month.

Message and Data Rates:
Message and data rates may apply depending on your mobile carrier and plan.

How to Opt Out:
Reply STOP to any message to unsubscribe immediately. You will receive one confirmation message and no further messages will be sent. Reply START to resubscribe at any time.

How to Get Help:
Reply HELP to any message for assistance, or contact us at [email protected].

Your Privacy:
Your mobile phone number is never sold, shared, or rented to third parties for marketing purposes. It is used solely for transactional notifications related to your SusuMoney savings circle.

Opt-In & Consent Collection:
SMS/text-message opt-in consent is always initiated by the member and is collected only one way: the member submits the opt-in form at https://mensol.org/optin.html from their own mobile number, where it is stored with the submission date, time, IP address, user agent, and the exact disclosure text shown. No SMS, including any opt-in request, is ever sent to a phone number before it has been submitted through this form. Adding a member to a group does not opt them in, and an administrator never provides consent on a member's behalf. Opt-in consent and mobile phone numbers are never sold, shared, or transferred to third parties or affiliates for marketing or promotional purposes.

Carriers:
MenSol LLC is not responsible for delayed or undelivered messages. Contact your carrier for questions about message delivery.

For complete messaging consent documentation and our opt-in process, visit our Messaging Consent & Opt-In Process page.

WhatsApp Communications

In addition to SMS, MenSol LLC sends transactional WhatsApp messages to members using Twilio's WhatsApp Business API. WhatsApp is our primary messaging channel for savings circle notifications.

Consent:
WhatsApp consent is separate from SMS consent and is not collected through the SMS web form. Consent to receive WhatsApp notifications is member-initiated through WhatsApp itself: the member taps the wa.me invitation link and sends the pre-filled message from their own phone, opening a member-initiated messaging session (session-window onboarding). That member-sent message is the member's own affirmative action establishing consent. Being added to a group does not opt a member in, and an administrator never provides consent on a member's behalf. Members can reply STOP to any WhatsApp message at any time to opt out.

Types of WhatsApp messages we send:

Transactional Only:
All WhatsApp messages sent by SusuMoney are strictly transactional. We do not send marketing, promotional, or advertising messages via WhatsApp.

How to Opt Out:
Reply STOP to any WhatsApp message from SusuMoney to unsubscribe immediately. You may also contact us at [email protected] to request removal. Reply START to resubscribe at any time.

Third-Party Platform:
WhatsApp messages are delivered through Meta's WhatsApp Business Platform via Twilio. Message delivery is subject to Meta's WhatsApp Privacy Policy and Twilio's Privacy Policy. MenSol LLC is not responsible for how Meta or Twilio process data on their respective platforms beyond what is required to deliver your notifications.

Email Communications

MenSol LLC sends transactional email notifications to members and group administrators using Resend, a third-party email delivery service. Email is used as a secondary notification channel alongside SMS and WhatsApp.

Consent:
Email consent is not derived from SMS opt-in. A member provides their own email address during account creation, and the emails we send to that address are strictly transactional — account, payment, and payout notifications directly related to the member's savings circle. Under the CAN-SPAM Act, transactional emails of this kind do not require prior opt-in consent; we nonetheless honor unsubscribe requests on request (see "How to Opt Out" below). Email addresses are used solely for these transactional notifications and are never used for marketing.

Types of email messages we send:

• Welcome email upon account creation
• Payment reminders before your due date
• Payment confirmation after a payment is recorded
• Payout notifications when your payout is scheduled
• Missed payment alerts
• PIN recovery codes when requested
• Administrative notices from your group administrator

Message Frequency:
Email frequency varies based on your group's payment cycle, typically 2 to 4 emails per month. No marketing or promotional emails are ever sent.

Transactional Only:
All emails sent by MenSol LLC are strictly transactional. We do not send newsletters, marketing campaigns, promotional offers, or advertising emails. Every email is directly related to your savings circle activity.

CAN-SPAM Compliance:
MenSol LLC complies with the CAN-SPAM Act. Every email we send:

• Identifies MenSol LLC as the sender
• Includes a valid physical or mailing address or reference to our registered state (Minnesota, United States)
• Clearly describes the purpose of the message
• Includes instructions for how to stop receiving emails
• Honors opt-out requests within 10 business days

How to Opt Out:
To stop receiving email notifications, contact us at [email protected] with the subject line "Unsubscribe" and your group subdomain name. You may also contact your group administrator to update your notification preferences. Opt-out requests are honored within 10 business days as required by the CAN-SPAM Act.

Your Privacy:
Your email address is never sold, shared, or rented to third parties for marketing purposes. It is used solely for transactional notifications related to your SusuMoney savings circle.

Third-Party Email Delivery:
Emails are delivered through Resend (resend.com), a transactional email service. Email delivery is subject to Resend's Privacy Policy. MenSol LLC is not responsible for how Resend processes data on their platform beyond what is required to deliver your notifications.

For complete messaging consent documentation, visit our Messaging Consent & Opt-In Process page.

Data Security

We take reasonable measures to protect your personal information, including:

All connections are encrypted using HTTPS/TLS
PINs and passwords are stored using one-way cryptographic hashing (bcrypt)
Each savings group operates on its own isolated subdomain with completely separate data
Access to member data is restricted to authorized administrators of your specific group
Account lockout is enforced after multiple failed login attempts
Regular database backups are maintained for disaster recovery

No system is completely secure. While we implement industry-standard protections, we cannot guarantee absolute security. If you discover a security vulnerability, please report it to [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify active users via email at least 14 days before the changes take effect. The "Effective Date" at the top of this page indicates when the policy was last updated. Your continued use of the platform after the effective date constitutes acceptance of the revised policy.

Contact

For questions about this policy, to exercise any of your data rights, or to report a privacy concern, contact the data controller at:

MenSol LLC
A limited liability company registered in the State of Minnesota, United States.
Legal: [email protected]
Email: [email protected]
Web: mensol.org